Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651BFE007C3E11F192C868DDCE1D38B0.roa
File: 651BFE007C3E11F192C868DDCE1D38B0.roa (raw, json)
Hash identifier: 7h+Zambw0IMDtVCrJMOZ8dOIACqWGSjaW/+j87ZTLCo=
Subject key identifier: 06:7C:37:8C:88:52:67:EB:54:E3:F6:C2:AE:CD:7C:48:AE:CD:FC:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C44C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651BFE007C3E11F192C868DDCE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:04:45 +0000
ROA not before: Fri 10 Jul 2026 09:04:41 +0000
ROA not after: Tue 10 Jul 2029 09:04:41 +0000
asID: 17561
IP address blocks: 156.251.191.0/24 maxlen: 24
156.251.192.0/24 maxlen: 24
156.251.193.0/24 maxlen: 24
156.251.194.0/24 maxlen: 24
156.251.195.0/24 maxlen: 24
156.251.196.0/24 maxlen: 24
156.251.197.0/24 maxlen: 24
156.251.198.0/24 maxlen: 24
156.251.199.0/24 maxlen: 24
156.251.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115788 (0x1c44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:04:41 2026 GMT
Not After : Jul 10 09:04:41 2029 GMT
Subject: CN=6a50b5ad-5b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0d:36:d8:e1:cb:c2:34:1e:72:65:41:c1:3d:
ad:bc:51:f7:4e:f7:af:cd:85:9d:f4:f0:7b:38:f4:
f5:8e:7f:a6:77:f2:ec:6f:48:83:37:16:1b:fa:46:
1e:d0:35:8a:66:b9:69:7a:b7:18:fd:0f:12:de:39:
a8:29:1c:5a:85:f9:fb:7e:ea:ce:db:6d:99:b5:a5:
72:37:91:cd:dc:22:5a:fd:a4:f5:45:90:dd:68:59:
1f:4b:88:57:39:60:6d:c4:2b:25:5b:94:d2:f9:e6:
a9:f9:91:d4:7d:ea:80:cb:50:08:fb:13:bf:af:f3:
73:ea:c7:f8:60:2e:16:2f:29:d5:e5:8e:66:b4:6d:
34:6b:21:98:6d:29:af:6b:3d:2c:1d:5a:bd:38:df:
06:c5:e8:ba:60:19:c6:6d:7b:8d:3f:fb:20:f5:ec:
b8:d7:ca:4e:a9:36:42:02:82:7d:e1:42:e6:34:40:
6f:71:be:f3:ef:75:d3:32:c0:fc:70:eb:db:04:c8:
64:cd:41:a1:d8:bc:e8:da:4f:18:0d:4f:e4:93:6d:
2d:0b:78:dc:d4:a6:10:14:26:30:11:e1:81:8c:d3:
74:cf:88:ed:b8:11:e0:d6:13:dc:ae:30:ee:43:2e:
eb:b5:98:db:56:22:20:3f:59:bb:8e:b2:c8:d1:24:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7C:37:8C:88:52:67:EB:54:E3:F6:C2:AE:CD:7C:48:AE:CD:FC:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/651BFE007C3E11F192C868DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.191.0-156.251.200.255
Signature Algorithm: sha256WithRSAEncryption
84:f2:97:0a:f7:d0:68:a4:9f:03:66:4a:2d:7f:5e:7c:8e:52:
ea:a6:b7:9b:5e:85:85:89:af:c0:62:43:28:b9:48:0d:61:e4:
27:e8:ca:d4:f8:1a:26:dd:02:fc:ef:c2:c7:61:c7:5e:25:36:
07:80:2c:b9:08:c8:aa:ec:5a:28:09:f8:92:b2:f2:e3:6b:08:
ba:9b:93:57:c4:dc:f5:84:1b:fa:2f:89:c9:21:46:44:18:3e:
e9:dc:14:cf:2d:e6:b9:99:3f:67:73:d4:bc:82:9b:72:3f:f7:
20:e7:26:12:14:e7:8d:98:eb:0b:7b:2f:9b:c4:89:d4:1b:20:
bb:76:6b:9d:d2:37:a3:66:19:d2:bf:85:4a:57:03:43:2f:b9:
3d:c6:d9:3a:52:41:73:d9:de:cf:84:d4:9b:5d:72:0b:ad:5f:
5e:71:c5:c9:45:d5:c0:f2:17:a5:85:13:b2:a4:f6:cf:b1:ef:
ee:8d:c2:06:b2:0f:2e:68:d8:b7:76:46:82:31:53:64:21:94:
65:15:d3:57:1a:a1:99:5f:1c:a0:47:5e:45:d8:90:18:2c:4d:
03:43:f3:fa:0e:9d:99:28:4e:65:dc:e8:7a:06:28:f7:b1:a6:
d5:21:ae:d8:07:b7:93:93:57:84:94:e9:be:1c:3c:7d:9a:96:
0d:00:8a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:34 2026 by rpki-client