Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75E24FA8542711F18C4DA819CF1D38B0.roa
File: 75E24FA8542711F18C4DA819CF1D38B0.roa (raw, json)
Hash identifier: rq9A0Q4fJNaj1uCMnPp8v1X+XCtpruAEQ29aPwKWDr4=
Subject key identifier: B9:09:29:21:92:13:11:6A:32:A5:E1:EA:63:C8:DA:99:3B:2A:CB:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B614
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75E24FA8542711F18C4DA819CF1D38B0.roa
Signing time: Wed 20 May 2026 08:39:49 +0000
ROA not before: Wed 20 May 2026 08:39:44 +0000
ROA not after: Tue 20 Jul 2027 08:39:44 +0000
asID: 328608
IP address blocks: 156.253.141.0/24 maxlen: 24
156.253.142.0/24 maxlen: 24
156.253.143.0/24 maxlen: 24
156.253.160.0/24 maxlen: 24
156.253.161.0/24 maxlen: 24
156.253.162.0/24 maxlen: 24
156.253.163.0/24 maxlen: 24
156.253.164.0/24 maxlen: 24
156.253.165.0/24 maxlen: 24
156.253.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112148 (0x1b614)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:39:44 2026 GMT
Not After : Jul 20 08:39:44 2027 GMT
Subject: CN=6a0d7354-e243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:ec:0f:eb:7f:95:92:b6:aa:aa:71:09:8f:
11:d0:20:83:b6:e7:d7:cc:3a:c1:06:ca:6e:70:b4:
71:62:d7:84:3c:fc:c1:bb:b8:c3:2a:57:cc:c6:b0:
1a:24:e9:1c:55:ed:1c:dc:7a:2a:88:3f:02:9f:7b:
17:91:7b:8f:79:a2:f0:4a:1a:e7:a4:4c:b1:9e:ee:
93:00:00:e3:d7:02:b6:c7:51:76:00:71:78:c4:dd:
1e:3d:8f:d5:3b:a2:53:aa:d3:8a:d1:85:67:b7:d9:
f6:cc:ef:a8:19:96:d5:84:01:79:ce:cc:31:2c:d4:
30:00:5c:df:58:53:c1:29:94:61:ef:51:31:f1:44:
d4:86:76:e9:19:66:14:ef:74:27:26:80:07:42:f8:
77:9a:e4:59:c4:76:87:db:ca:60:a2:4a:53:83:fc:
fa:c6:79:40:9b:b0:f3:3d:c7:75:82:f4:ed:83:bd:
b5:47:35:38:39:4f:0b:b6:ee:99:cd:e4:55:1f:99:
78:4e:30:da:90:dc:eb:2e:d7:eb:10:a4:50:0d:2e:
19:63:5f:a0:33:fe:0b:34:ff:9d:72:7f:ea:d8:43:
6a:05:97:b2:5c:3a:69:1a:46:1c:4e:20:a8:b2:5b:
ee:de:d4:de:7d:2c:bb:3f:a7:b4:39:27:a9:c0:d7:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:09:29:21:92:13:11:6A:32:A5:E1:EA:63:C8:DA:99:3B:2A:CB:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75E24FA8542711F18C4DA819CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.141.0-156.253.143.255
156.253.160.0-156.253.166.255
Signature Algorithm: sha256WithRSAEncryption
81:fb:70:fc:07:5e:42:d9:c6:9f:59:01:8c:8f:84:f4:70:5d:
2d:d5:dc:d2:fb:a0:67:31:b2:84:3a:7f:4f:a9:90:b0:0c:63:
ee:e8:a7:8d:3b:87:6b:4c:87:d6:2f:6c:2a:76:da:62:0e:27:
6c:08:34:53:eb:4f:4d:a5:26:7c:b6:fd:25:31:db:32:fa:f8:
8b:d9:a8:73:7f:86:85:05:78:bd:ca:a9:7f:e8:90:5f:20:81:
16:08:bb:4b:c4:ba:15:19:0c:13:ea:f7:0a:49:42:e2:93:20:
29:2d:ce:57:de:6d:77:77:24:f1:29:a5:78:48:ed:77:c3:cc:
a7:7d:bc:e3:03:ae:b0:c9:f9:4f:c8:e9:32:3c:31:43:c7:6d:
1f:19:0c:5e:ca:39:7e:e6:f1:b6:13:80:ed:12:f8:2e:43:b5:
4c:da:88:a3:02:9e:b1:a6:6d:d5:b9:24:ae:83:b3:fc:bc:d9:
32:87:49:a1:fd:f9:b3:fc:d7:64:b7:8c:dd:d9:21:3d:7d:43:
d6:81:7b:b8:4e:81:20:4a:4e:95:52:a7:85:8f:8f:89:8d:80:
d7:b1:4f:e7:90:13:33:32:d5:a8:ef:c2:fe:e6:35:b7:78:4b:
19:1f:4a:bf:12:a3:9c:ce:73:91:75:7c:23:5e:ce:01:a7:bf:
73:a4:ae:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:22 2026 by rpki-client