Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C17694E693F11F18090CCE3CE1D38B0.roa
File: 7C17694E693F11F18090CCE3CE1D38B0.roa (raw, json)
Hash identifier: guRRyFepzYg73oYmD36bKb0HcdNXQ+tbnXic2KWdYGg=
Subject key identifier: DD:DA:67:82:9F:08:AA:7C:A5:00:10:BA:A2:63:2C:B8:8C:52:7D:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C17694E693F11F18090CCE3CE1D38B0.roa
Signing time: Tue 16 Jun 2026 04:54:41 +0000
ROA not before: Tue 16 Jun 2026 04:54:37 +0000
ROA not after: Tue 21 Jul 2026 04:54:37 +0000
asID: 202036
IP address blocks: 156.249.158.0/24 maxlen: 24
156.249.159.0/24 maxlen: 24
156.249.161.0/24 maxlen: 24
156.249.163.0/24 maxlen: 24
156.249.168.0/24 maxlen: 24
156.249.169.0/24 maxlen: 24
156.249.174.0/24 maxlen: 24
156.249.181.0/24 maxlen: 24
156.249.182.0/24 maxlen: 24
156.249.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114114 (0x1bdc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 04:54:37 2026 GMT
Not After : Jul 21 04:54:37 2026 GMT
Subject: CN=6a30d711-60f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:f7:97:96:65:b0:c1:ab:ff:37:b7:bb:28:
28:d8:80:8a:d0:4b:f9:85:1d:07:a3:f9:06:a0:c6:
09:56:3d:c5:e6:50:e0:23:c8:a9:c8:07:81:c3:76:
c4:2d:c4:27:af:79:89:6b:1b:3d:4a:4f:4b:25:52:
72:fe:84:ac:ad:9f:90:d2:b4:d3:17:5b:bc:de:0f:
22:b0:ad:0b:24:88:37:77:8b:7d:e4:70:57:5e:a2:
27:86:25:0d:3b:91:8e:28:82:ec:2a:9d:c4:1e:04:
5c:c2:04:a7:06:b4:35:a0:ed:d5:4b:4c:3b:29:b1:
f8:16:f3:cd:6d:f2:ec:65:26:c3:70:bd:b7:38:7a:
bd:30:ce:a9:49:ae:03:25:b0:59:e3:9b:05:80:99:
34:64:03:be:6f:08:2b:05:2f:40:21:54:82:c0:22:
0e:1d:97:a3:98:84:51:28:a3:0b:98:e3:94:b9:3d:
c7:9b:9a:0e:52:9c:57:a9:b2:cf:14:74:c0:b2:10:
0f:e0:04:e0:6c:02:71:8f:1d:d0:58:60:27:4c:24:
32:32:f7:81:e1:4e:53:cb:e5:4c:e1:49:85:63:c0:
84:33:99:cf:c6:84:67:dd:6b:f4:91:87:9b:24:be:
b7:ef:ff:5b:f6:eb:ae:3d:bd:95:a4:1c:96:37:8e:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:DA:67:82:9F:08:AA:7C:A5:00:10:BA:A2:63:2C:B8:8C:52:7D:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C17694E693F11F18090CCE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.158.0/23
156.249.161.0/24
156.249.163.0/24
156.249.168.0/23
156.249.174.0/24
156.249.181.0-156.249.182.255
156.249.186.0/24
Signature Algorithm: sha256WithRSAEncryption
10:fe:f9:9d:06:1c:51:51:89:c5:68:bf:56:0a:14:e7:ea:23:
1c:e4:b1:83:14:34:a4:92:65:8e:75:9c:53:36:84:f3:52:ec:
78:2b:e7:15:26:9d:f8:36:d7:e4:e4:8e:dd:36:1b:4c:c5:58:
b3:06:70:14:b9:8e:4a:ff:9b:b2:ef:56:72:bf:d4:4c:1c:35:
86:2c:fd:3e:7a:83:b8:ea:d5:9e:f2:de:b5:ed:66:8c:87:33:
5a:e7:16:7d:5b:b5:3d:cb:3c:cf:ca:2f:73:85:af:3b:57:f9:
00:19:95:ef:bd:43:7c:73:46:53:25:9e:d3:2e:f5:a0:2d:74:
6c:6a:fd:72:de:b4:7e:22:b2:d3:32:0f:b6:c0:64:f4:5e:b8:
ef:9b:18:10:2a:43:c2:88:35:01:e9:cc:21:ff:5d:33:04:d8:
ce:55:87:5b:b9:e5:50:2d:18:04:77:d9:4a:25:4f:b8:1c:4b:
93:65:eb:aa:d6:7c:cf:cd:26:00:59:2a:51:5c:fa:0e:40:f3:
a1:14:7b:97:78:ad:f6:52:5b:3b:5b:19:c5:95:6d:cb:b6:a1:
cf:fe:ce:22:e7:8f:50:cd:29:ce:48:41:d7:cd:81:f4:fc:47:
87:4d:7b:36:f8:09:75:90:cc:6c:b5:00:2b:7d:93:9a:8f:62:
da:c5:5a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:01 2026 by rpki-client