Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E91F87A1F8D11F198910DC7DAE4EC9C.roa
File: 7E91F87A1F8D11F198910DC7DAE4EC9C.roa (raw, json)
Hash identifier: btVHQCiQ7lN8C8/ixMb4MTbjvXmhP/F93MzJ1mms7x0=
Subject key identifier: A9:4C:C5:5D:76:78:42:69:A5:D7:1E:7D:41:89:95:DD:17:66:82:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A506
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E91F87A1F8D11F198910DC7DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 10:06:40 +0000
ROA not before: Sat 14 Mar 2026 10:06:35 +0000
ROA not after: Sun 31 May 2026 10:06:35 +0000
asID: 399077
IP address blocks: 156.251.30.0/24 maxlen: 24
156.251.31.0/24 maxlen: 24
156.251.32.0/24 maxlen: 24
156.251.33.0/24 maxlen: 24
156.251.34.0/24 maxlen: 24
156.251.35.0/24 maxlen: 24
156.251.36.0/24 maxlen: 24
156.251.37.0/24 maxlen: 24
156.251.38.0/24 maxlen: 24
156.251.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107782 (0x1a506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 10:06:35 2026 GMT
Not After : May 31 10:06:35 2026 GMT
Subject: CN=69b53330-e3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:47:cf:fb:ae:ac:5b:07:b4:04:14:6d:35:
53:d9:c5:f1:aa:80:f5:99:3d:aa:ff:4b:07:76:1f:
11:67:7e:c4:ae:06:06:41:13:f1:05:b8:35:6e:ef:
ae:e2:68:bc:e1:8a:30:00:aa:3e:7e:07:d3:84:0a:
fc:32:13:3e:7e:44:d7:bf:f8:b7:e8:ba:4f:b0:88:
59:ae:43:61:45:f7:03:a2:cd:59:dd:aa:37:c1:7a:
26:9b:1d:29:a7:21:3b:18:41:20:36:83:58:29:ba:
8d:df:d5:d7:60:ee:8a:67:56:0b:6e:10:45:cc:48:
32:bc:44:fb:f5:2e:8c:61:66:8b:db:5d:e4:fa:3d:
1e:76:17:e2:46:ef:8f:83:25:3f:47:c9:fb:c2:52:
84:02:32:33:98:4e:a8:d7:2b:f5:cd:e2:cc:b1:b9:
24:28:9a:03:c5:ba:55:06:44:22:cf:1b:9b:0a:b3:
6e:d9:ce:88:06:80:09:3c:dd:69:7b:aa:59:41:05:
9a:ca:84:d2:24:26:8a:fa:b2:93:0c:92:4f:50:2e:
45:e9:6e:88:b9:47:c1:f1:88:95:b4:63:20:f3:a1:
86:97:ff:ff:df:29:16:c8:90:7c:57:d1:06:9a:28:
83:e3:bc:89:30:2d:88:8f:14:67:ee:09:97:a0:21:
e5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:C5:5D:76:78:42:69:A5:D7:1E:7D:41:89:95:DD:17:66:82:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E91F87A1F8D11F198910DC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.30.0-156.251.39.255
Signature Algorithm: sha256WithRSAEncryption
89:3a:84:11:1c:5e:4a:2b:1e:ef:03:27:2f:e9:21:38:c8:e4:
3d:0a:49:9f:41:09:c2:92:47:1f:1a:3c:a2:9f:74:10:7d:e4:
f4:c7:88:ac:a4:05:f9:c3:15:ec:0c:24:32:3c:a8:f0:ca:ed:
45:e5:13:34:d1:f6:be:cd:f9:9d:31:88:b0:09:ed:48:a0:be:
cd:43:cc:02:ac:06:a6:df:7d:02:40:ab:89:7a:55:e3:92:5e:
27:b9:86:ef:e9:f3:9a:9f:27:1a:73:ee:5c:58:05:19:bd:91:
ed:b4:ef:13:46:cb:ee:42:28:d8:e1:a3:79:13:03:8e:5e:00:
c7:5e:47:aa:0a:f6:05:ae:5c:80:77:0e:dd:49:20:fb:1c:2e:
36:ad:f4:49:52:60:cb:0c:51:93:2d:96:44:2b:55:c2:ec:20:
e4:e7:09:1b:43:85:88:b1:67:cc:09:84:97:cb:36:d5:67:02:
be:ec:09:79:8b:1d:d0:c8:72:b0:cf:50:31:1f:06:33:b9:2b:
7c:b2:57:67:cd:c9:36:bf:c5:18:05:8d:09:4c:3b:7a:9d:05:
1e:a4:ac:34:53:11:2f:d4:19:80:2f:41:26:9c:79:e6:20:97:
81:fd:5b:17:5a:7f:41:b4:83:c5:5e:7c:0e:e8:57:45:7f:f2:
5d:2d:a3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:11 2026 by rpki-client