Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67515D1273E411F1B1835ED5CE1D38B0.roa
File: 67515D1273E411F1B1835ED5CE1D38B0.roa (raw, json)
Hash identifier: yZKPQ8UcUVRDdkdnKcOdmvsQY2E0IJpEkjzF8XF2ySo=
Subject key identifier: 58:62:61:6A:72:01:E9:0F:34:FB:42:4E:83:81:FD:2F:A5:A7:EC:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C192
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67515D1273E411F1B1835ED5CE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:00:25 +0000
ROA not before: Mon 29 Jun 2026 18:00:20 +0000
ROA not after: Mon 31 Aug 2026 18:00:20 +0000
asID: 399077
IP address blocks: 156.240.192.0/24 maxlen: 24
156.240.193.0/24 maxlen: 24
156.240.244.0/24 maxlen: 24
156.251.5.0/24 maxlen: 24
156.251.48.0/23 maxlen: 24
156.251.59.0/24 maxlen: 24
156.251.60.0/24 maxlen: 24
156.251.61.0/24 maxlen: 24
156.251.62.0/24 maxlen: 24
156.251.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115090 (0x1c192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:00:20 2026 GMT
Not After : Aug 31 18:00:20 2026 GMT
Subject: CN=6a42b2b9-c47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:4a:51:10:b1:d2:49:c2:0a:e7:13:c2:cc:
ba:0c:9a:ae:a8:1c:5a:de:b4:14:37:01:36:ae:16:
d5:76:a0:ca:56:94:96:0b:bd:5e:09:c2:11:6f:50:
64:1b:46:ea:ed:4d:b0:8f:6b:db:67:52:8e:c4:b5:
88:ed:7f:1a:ba:0d:39:0b:84:c9:34:4e:46:6c:60:
77:8c:dd:c8:4c:54:d6:46:69:3c:2d:f9:58:57:43:
53:5d:9a:7c:b0:a9:a5:8a:8f:4a:7c:2e:fa:06:db:
1d:7e:ef:aa:a2:43:30:fe:37:98:ed:81:37:49:19:
60:9d:1b:7b:de:54:42:be:63:c6:7f:ba:f0:75:d5:
84:02:bf:13:67:a9:f9:0e:aa:1e:ea:a6:45:b5:de:
16:b0:3e:61:e6:7d:35:f7:47:d1:98:70:a5:83:a2:
72:7b:36:cf:d1:ec:18:ad:30:ae:7d:7c:ca:f8:ec:
27:26:8d:6b:29:f7:fb:80:53:d2:f6:b2:59:93:72:
2a:4d:3b:5d:fa:9e:60:35:ff:3a:83:a4:85:c8:a2:
ab:21:35:4c:7e:c8:91:ea:63:85:64:b6:17:81:cf:
21:01:32:6a:23:cf:ba:5f:f4:b9:a2:00:02:c0:f6:
ef:04:82:78:bd:0e:e9:5c:fd:1f:eb:1b:d9:44:1e:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:61:6A:72:01:E9:0F:34:FB:42:4E:83:81:FD:2F:A5:A7:EC:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67515D1273E411F1B1835ED5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.192.0/23
156.240.244.0/24
156.251.5.0/24
156.251.48.0/23
156.251.59.0-156.251.63.255
Signature Algorithm: sha256WithRSAEncryption
13:17:d8:dd:8e:14:56:e3:85:dd:e4:fb:a8:66:86:df:ed:c2:
d5:ac:96:48:5c:91:e6:43:59:ce:f1:7d:b2:15:39:25:37:17:
1f:6c:d9:e8:2b:8c:1d:9a:92:5f:ef:68:7e:b7:03:7f:11:bf:
cf:68:c7:6b:0d:4a:d5:46:ee:93:62:a6:8e:7d:07:74:84:85:
62:ad:65:4c:63:ee:c0:fe:86:34:a3:14:28:2c:71:e2:35:ab:
5e:d5:a9:45:96:1c:9c:e0:34:d7:4b:c0:66:55:82:d7:14:5b:
55:dc:00:f7:d6:9d:30:88:44:74:5f:6b:51:b3:87:90:b0:4d:
b0:a1:21:9c:52:95:e0:6b:5e:da:e6:d8:93:2b:b9:d1:a3:fb:
27:6b:c5:b0:e8:04:0d:7c:b4:12:73:33:2e:ea:e6:b9:f8:65:
b4:eb:f3:d1:02:18:2d:d6:07:6e:23:90:3b:e8:d5:e0:73:c5:
b6:59:66:32:1e:98:eb:56:47:b8:c1:fb:20:24:43:f3:0c:ab:
b5:23:f1:6a:c7:f4:9b:b7:4a:5b:b4:cb:1c:41:eb:bc:da:11:
38:5b:2f:3b:4c:dc:6e:11:e1:aa:c1:c1:7f:b7:79:9b:97:f8:
da:d9:1a:d0:e7:c4:17:d3:6e:ea:a3:54:18:3d:41:11:0b:0f:
17:1f:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:20 2026 by rpki-client