Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84277308578911F1A52676BACE1D38B0.roa
File: 84277308578911F1A52676BACE1D38B0.roa (raw, json)
Hash identifier: TK+aFdm26DpzLHuJVzqgc/MyFlyuGcoPenyXihzEXBI=
Subject key identifier: D2:1A:34:8C:75:43:3C:64:EE:62:D6:C1:25:8F:0B:83:49:A6:1B:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B918
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84277308578911F1A52676BACE1D38B0.roa
Signing time: Sun 24 May 2026 15:59:17 +0000
ROA not before: Sun 24 May 2026 15:59:12 +0000
ROA not after: Thu 02 Jul 2026 15:59:12 +0000
asID: 11427
IP address blocks: 156.233.12.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112920 (0x1b918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 15:59:12 2026 GMT
Not After : Jul 2 15:59:12 2026 GMT
Subject: CN=6a132055-fdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:39:69:37:52:8f:11:80:61:73:b3:95:f5:d9:
d4:85:33:b8:16:ad:b5:27:3a:81:ed:72:b9:6f:d7:
78:7b:28:63:bd:94:55:40:68:65:bc:3e:55:05:e4:
da:34:b0:b6:d1:70:89:35:c6:f6:21:cd:2c:78:3b:
9f:f9:53:70:9b:60:99:a4:21:80:50:ae:6c:0b:27:
77:44:52:7f:a5:5e:65:9e:60:7b:04:83:c1:d2:bf:
8e:1b:11:70:e3:af:a6:16:42:56:0d:89:57:bc:b9:
8d:d3:a9:45:74:e1:8b:f8:60:e2:e5:3f:57:b0:39:
36:54:ba:23:31:3f:f8:b4:f2:eb:c3:84:37:4d:92:
32:23:e6:2a:5f:9f:fd:dc:13:68:74:0d:82:01:6e:
04:51:47:67:dd:d0:ae:84:10:86:4f:a8:e5:59:7c:
c9:c7:40:95:f3:1f:2e:36:4d:e1:af:ff:cf:5e:e4:
5f:e3:3a:1f:cd:98:41:3c:a2:b1:13:8d:4e:35:eb:
b2:ed:52:fd:ba:5d:db:ed:e3:aa:ec:87:f5:1d:73:
5f:01:2d:d4:8d:6a:a9:a2:69:9d:fb:23:a9:de:0b:
4e:ab:69:01:56:e0:75:52:f1:4b:d6:85:ef:bf:4a:
3b:38:a7:a2:f2:80:d4:94:c8:90:15:5a:4b:1b:1a:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1A:34:8C:75:43:3C:64:EE:62:D6:C1:25:8F:0B:83:49:A6:1B:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84277308578911F1A52676BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/22
156.233.24.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:71:e5:c9:fa:83:5d:20:31:23:39:07:6d:85:5e:5d:84:6a:
33:45:85:84:c5:65:c9:ff:55:7c:fc:ba:a2:01:66:ff:bb:f7:
af:c4:fb:8f:b6:2d:a4:d6:51:79:c8:a6:4f:30:4b:df:25:87:
94:51:cd:25:27:18:36:b3:de:ad:2e:4d:4e:12:5e:9b:c2:bd:
9b:a3:89:87:94:a9:55:c0:1c:5c:c5:34:e1:33:cf:8b:5d:30:
41:72:89:88:6f:51:20:a3:67:e3:6a:df:8c:e3:73:9d:21:c0:
76:14:8b:65:3f:4d:2f:b6:dc:b0:10:df:d7:53:ad:4f:20:0b:
9d:b8:bf:77:29:b5:0b:7a:9e:55:5d:b5:f0:3f:21:82:03:3e:
88:de:89:97:36:85:bf:28:d7:fb:14:92:20:2c:c0:63:81:ba:
13:87:2d:98:82:02:28:ed:92:9a:b7:29:94:de:ca:7b:fe:c2:
7a:74:b4:96:1d:13:bc:ec:03:b0:20:f8:78:7a:42:06:ab:ec:
61:37:38:70:c8:04:ef:0f:8f:82:25:88:ae:d6:4c:2d:61:e7:
96:d1:41:74:45:8d:73:f8:1b:5e:85:d9:b0:3c:70:42:2b:d6:
14:29:7d:92:dd:24:72:f2:22:d2:f5:8e:b3:91:d7:ee:4f:e4:
80:67:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:37 2026 by rpki-client