Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6895BAD8756011F18A5081DDCE1D38B0.roa
File: 6895BAD8756011F18A5081DDCE1D38B0.roa (raw, json)
Hash identifier: hhtkFcj6BxEfbIig4XtrjilKfZe+J+yZe/F+pViv9W8=
Subject key identifier: 0E:64:1F:3A:35:A4:C2:67:3F:35:E5:98:50:0A:58:44:A4:BF:F6:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C206
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6895BAD8756011F18A5081DDCE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:20:36 +0000
ROA not before: Wed 01 Jul 2026 15:20:31 +0000
ROA not after: Sun 09 Aug 2026 15:20:31 +0000
asID: 48031
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.247.19.0/24 maxlen: 24
156.254.105.0/24 maxlen: 24
156.254.106.0/24 maxlen: 24
156.254.107.0/24 maxlen: 24
156.254.108.0/24 maxlen: 24
156.254.109.0/24 maxlen: 24
156.254.110.0/24 maxlen: 24
156.254.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115206 (0x1c206)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 15:20:31 2026 GMT
Not After : Aug 9 15:20:31 2026 GMT
Subject: CN=6a453044-19b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:68:f5:38:3e:86:fc:de:8a:0e:93:40:94:ed:
d4:e0:5f:dd:68:b1:e7:b6:e6:cf:d2:e3:98:86:ba:
11:ad:5f:74:0f:99:11:c0:f3:1c:69:f8:05:b3:e0:
6a:1e:1a:2a:52:2b:52:d9:c7:e1:09:30:21:f9:bd:
b0:4b:e5:ab:5d:f2:7b:77:81:36:70:a7:4b:38:00:
a4:3d:57:43:1b:f5:c6:2f:21:61:9d:56:f8:07:42:
68:f1:c4:79:cc:42:f7:66:54:37:31:36:86:2b:9e:
9a:bd:85:f4:64:18:1f:24:fb:c5:71:8d:2b:80:22:
65:0d:5a:98:d1:d7:fa:71:ff:c5:9c:68:bc:05:5e:
63:ca:9a:b0:71:46:05:38:3b:d3:d5:30:cb:0a:0c:
5d:d0:db:e2:ab:25:5b:05:f6:c3:06:da:84:1e:21:
c8:11:d7:4f:7b:f8:c6:e2:ef:63:b7:f5:c9:fc:a8:
ff:79:8f:54:74:31:39:0d:3e:67:f0:27:1f:f3:87:
86:4a:fe:ca:f2:6c:af:d4:f0:d8:2e:91:be:66:c8:
a1:b2:f9:d4:03:4c:ba:0c:01:6d:c0:cd:1c:0a:39:
86:02:6f:87:62:3d:9a:8d:d3:7a:b9:c1:47:f1:d9:
fd:20:84:6d:24:95:ca:dc:4e:74:1a:27:db:b8:b9:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:64:1F:3A:35:A4:C2:67:3F:35:E5:98:50:0A:58:44:A4:BF:F6:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6895BAD8756011F18A5081DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/23
156.247.19.0/24
156.254.105.0-156.254.111.255
Signature Algorithm: sha256WithRSAEncryption
54:65:c2:f4:4d:e0:c6:88:71:83:68:ba:2d:4b:92:7e:86:39:
48:f4:29:a9:8c:f9:e0:78:a7:bb:aa:79:1a:41:4e:b6:f4:d7:
74:83:1d:44:c7:c8:20:e2:fe:1d:81:e9:86:0c:2e:94:b7:57:
03:8a:04:6f:37:f9:c7:6d:94:5c:44:3b:d2:00:7e:ba:c7:4a:
96:73:45:2a:e6:90:18:f4:21:99:a6:f6:d2:7b:14:1f:72:82:
49:54:05:c8:28:a7:3e:ef:23:f6:1d:d2:9c:1a:3f:96:ac:1d:
25:b1:63:e7:df:fe:cf:55:6a:35:ef:18:42:9c:9a:58:ab:4e:
57:87:86:36:9f:f8:33:61:d9:73:54:4c:8b:37:63:3a:be:dd:
6a:ba:81:90:73:83:ce:91:08:e6:b5:73:50:fb:44:fb:b1:77:
79:f8:4f:cc:e2:82:79:70:23:8b:72:8f:95:7e:70:a8:de:67:
d8:d9:a9:c5:d3:d3:76:73:15:b5:78:7a:42:a5:c0:33:c4:e9:
bf:65:ba:49:e1:cd:81:56:2f:23:dd:cb:ae:97:25:6c:1d:c5:
80:31:12:c9:35:f6:a0:86:a0:9c:b9:bd:89:e1:e4:9c:32:3c:
42:fe:20:10:42:6f:e9:a1:5f:7e:e1:15:41:09:4f:4a:f9:f9:
2c:0b:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:40 2026 by rpki-client