Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D83A9E71FC11F1B33CAFCACE1D38B0.roa
File: 65D83A9E71FC11F1B33CAFCACE1D38B0.roa (raw, json)
Hash identifier: CbUwPbhun1RnlwhlngFIquphcZyw2B+/1hUXp+/NhwQ=
Subject key identifier: 73:72:82:8D:83:9C:BC:AC:50:1F:8F:3F:67:4A:A0:D7:CF:FA:1B:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D83A9E71FC11F1B33CAFCACE1D38B0.roa
Signing time: Sat 27 Jun 2026 07:47:08 +0000
ROA not before: Sat 27 Jun 2026 07:47:03 +0000
ROA not after: Mon 31 Aug 2026 07:47:03 +0000
asID: 399077
IP address blocks: 156.251.27.0/24 maxlen: 24
156.251.28.0/24 maxlen: 24
156.251.29.0/24 maxlen: 24
156.251.30.0/24 maxlen: 24
156.251.31.0/24 maxlen: 24
156.251.32.0/24 maxlen: 24
156.251.33.0/24 maxlen: 24
156.251.34.0/24 maxlen: 24
156.251.35.0/24 maxlen: 24
156.251.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114890 (0x1c0ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 07:47:03 2026 GMT
Not After : Aug 31 07:47:03 2026 GMT
Subject: CN=6a3f7ffc-c346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:14:cb:f0:94:60:3f:78:8f:55:43:03:5d:24:
a9:58:b5:3f:71:6d:a7:e9:1e:9d:da:8c:57:38:14:
78:e6:94:90:f9:c9:dc:ae:5e:dc:e5:d8:2d:b7:e1:
d6:cd:36:e4:52:a1:1c:fa:ed:97:20:61:d5:b2:c1:
90:7e:16:94:6e:e3:aa:47:63:ac:07:0b:40:d9:c0:
41:f8:0e:7d:11:2b:eb:72:bf:3a:79:9c:6c:f1:4f:
1a:5a:1d:c5:f7:6e:9f:b5:08:ad:f8:3b:34:7a:4a:
7a:4d:4f:0a:e7:26:72:69:f4:e7:d6:30:6f:be:d7:
2a:7f:63:56:86:19:a3:c0:d5:ff:77:f9:5f:ec:da:
64:94:3d:80:9b:e9:6d:a4:a2:ad:b7:1a:46:01:1c:
bc:a1:95:19:f4:d8:32:bd:69:ea:c8:f6:3d:ac:17:
05:79:a8:10:b5:d5:44:06:7e:76:43:67:eb:ba:6a:
fd:1b:d4:48:0c:f7:1c:e6:c8:30:80:b8:ef:af:51:
f2:8a:b6:87:24:59:d1:f1:c0:36:b6:e6:4e:8b:08:
41:48:b8:ec:1d:49:01:43:e8:ef:b1:f5:9d:8e:1c:
41:bc:15:de:7e:4e:c2:8c:23:85:27:86:25:6b:71:
c6:e3:4d:02:af:4b:81:43:12:63:3e:0b:29:4c:bd:
b0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:72:82:8D:83:9C:BC:AC:50:1F:8F:3F:67:4A:A0:D7:CF:FA:1B:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65D83A9E71FC11F1B33CAFCACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.27.0-156.251.36.255
Signature Algorithm: sha256WithRSAEncryption
94:89:cf:f9:81:32:ab:a4:87:e9:4e:d7:b9:9c:46:2c:52:d2:
96:00:aa:d0:59:a4:64:59:43:74:36:2b:6b:31:aa:d5:ce:a1:
9a:40:51:17:39:cf:a5:67:a3:53:96:12:34:f6:c8:b1:e1:d6:
00:cd:8e:5f:ee:be:13:6b:d3:81:35:f3:2c:37:6a:32:01:04:
69:1f:30:38:00:f0:af:71:bb:e6:28:e3:3f:70:54:31:f1:b7:
c8:1a:bb:a5:70:05:ed:fc:82:8b:f2:65:c5:9d:68:f1:a1:28:
90:6a:42:70:ad:cd:4c:a9:63:ee:89:b5:f3:c8:26:65:a4:07:
30:5a:20:b9:04:5a:ab:8c:9a:f6:94:f1:df:48:a3:d3:2d:a3:
41:12:5c:f6:1d:a9:01:ea:b0:f4:08:bc:9f:85:71:ed:a0:19:
36:59:5c:e8:43:2f:83:90:e9:7c:98:b2:8a:77:ad:24:07:fe:
cd:36:20:54:3b:01:f9:4e:7c:10:9f:c1:05:45:e1:21:c0:25:
2b:31:27:91:7a:bf:04:a1:54:f6:8c:8b:b5:c6:08:b0:54:bf:
e6:72:4e:ad:ad:71:b5:42:3d:db:e8:12:d3:f3:ec:75:f3:86:
1c:75:f1:3a:c5:76:61:09:b6:d4:ac:2c:cf:95:cc:69:bf:dd:
54:a5:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client