Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843ECA7681F511F1A3B334E5CE1D38B0.roa
File: 843ECA7681F511F1A3B334E5CE1D38B0.roa (raw, json)
Hash identifier: G1tIc43QokL+D/QkbaWzmorfVMrQlNyva+y+PICeWto=
Subject key identifier: 45:C3:5C:68:F7:16:8F:5B:F7:E4:4F:F1:83:A1:8C:0E:79:84:91:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843ECA7681F511F1A3B334E5CE1D38B0.roa
Signing time: Fri 17 Jul 2026 15:38:11 +0000
ROA not before: Fri 17 Jul 2026 15:38:07 +0000
ROA not after: Wed 26 Apr 2028 15:38:07 +0000
asID: 17561
IP address blocks: 156.226.11.0/24 maxlen: 24
156.229.4.0/24 maxlen: 24
156.229.5.0/24 maxlen: 24
156.229.6.0/24 maxlen: 24
156.245.91.0/24 maxlen: 24
156.245.92.0/24 maxlen: 24
156.245.93.0/24 maxlen: 24
156.245.94.0/24 maxlen: 24
156.245.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116202 (0x1c5ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 15:38:07 2026 GMT
Not After : Apr 26 15:38:07 2028 GMT
Subject: CN=6a5a4c63-95fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:83:9e:82:74:e9:c6:84:91:ff:54:74:4a:
04:51:4f:86:d7:8c:59:78:b8:1a:82:6c:7d:7d:a6:
a1:10:e6:85:d3:d2:01:48:71:6f:ac:16:8a:98:26:
45:b7:3a:88:39:ae:9c:77:c9:59:56:49:ac:4c:89:
dc:f9:df:a0:0b:9a:71:bd:f5:02:f9:1c:36:bb:f0:
78:63:b1:63:16:2b:ad:74:f8:bb:d3:7f:d8:49:bf:
70:de:69:24:8a:07:a2:f3:90:e4:f4:eb:76:ff:42:
4a:58:cd:bf:90:25:db:f3:9a:c9:57:05:b6:2c:7e:
99:90:9c:58:3e:58:82:b5:c0:26:54:41:6c:00:07:
7d:c3:8b:ed:0a:4b:53:6e:e2:42:c5:a8:98:7d:f9:
27:fe:e1:9e:dd:e1:01:4b:d5:4a:64:79:76:bf:83:
20:46:85:2e:71:9d:0f:fc:79:91:f2:e6:2c:5d:51:
3d:c2:7b:43:62:af:f9:62:8c:53:6b:db:9d:92:85:
26:eb:d5:17:40:9d:c2:9b:35:6c:52:a1:6f:bc:b8:
1d:18:a9:9d:65:f6:62:10:5b:27:43:f3:11:e1:36:
96:dd:8e:ee:c2:0c:1b:ad:41:1d:fb:84:5c:55:bd:
ec:7c:c2:e1:1d:b4:d7:df:51:d6:6a:3a:54:bb:6e:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:5C:68:F7:16:8F:5B:F7:E4:4F:F1:83:A1:8C:0E:79:84:91:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843ECA7681F511F1A3B334E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.11.0/24
156.229.4.0-156.229.6.255
156.245.91.0-156.245.95.255
Signature Algorithm: sha256WithRSAEncryption
49:ae:63:d9:89:bb:26:f9:61:45:45:3b:00:09:b3:d8:54:88:
3e:60:d0:73:b3:51:81:55:de:d5:02:5e:fc:70:94:55:6b:cb:
41:3d:6f:26:87:b1:e3:8b:b1:39:a9:9b:0b:0f:36:ff:95:87:
bb:68:bd:30:47:e6:0f:8f:bc:a9:f7:f7:48:56:f0:af:b0:35:
33:8e:3a:2c:91:5f:c9:d0:90:0f:ee:97:ff:e2:23:45:0f:75:
19:14:44:e4:0d:a2:8b:7d:82:5b:5b:3d:b8:6b:f7:35:ca:21:
ec:b1:80:83:40:ee:2b:6e:a1:bf:f3:65:19:d0:7c:90:91:be:
2a:34:c2:af:ac:5f:fb:58:e5:84:39:e8:1c:71:91:da:c3:5f:
96:a0:68:51:8f:24:47:3c:fc:e9:11:fa:3d:a2:bc:75:24:13:
29:96:9a:0a:11:a2:5d:fc:41:9a:f0:f9:66:0e:46:55:c9:96:
a8:7e:2d:6f:fc:37:45:0e:ed:2e:4b:89:6f:83:f2:9c:b7:b3:
48:34:ec:44:a3:42:83:84:99:30:c6:22:37:67:45:97:90:3b:
fe:cc:f1:3c:5f:e0:a9:5f:06:39:db:87:d6:99:09:c8:ff:99:
39:4e:11:3c:9a:61:cc:c7:45:fa:a2:a8:f3:e4:14:b7:54:21:
d4:a1:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:34 2026 by rpki-client