Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B2D150756C11F1949816A6CE1D38B0.roa
File: 88B2D150756C11F1949816A6CE1D38B0.roa (raw, json)
Hash identifier: btFFdgJZfBGxy/0wT9QRURziBRe/Abxb0dii2LzIFHk=
Subject key identifier: 82:AF:C5:40:0D:FE:41:5D:6D:37:5B:CA:CD:E4:2C:71:6F:19:95:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C21C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B2D150756C11F1949816A6CE1D38B0.roa
Signing time: Wed 01 Jul 2026 16:47:24 +0000
ROA not before: Wed 01 Jul 2026 16:47:19 +0000
ROA not after: Sat 01 Aug 2026 16:47:19 +0000
asID: 32043
IP address blocks: 156.249.140.0/24 maxlen: 24
156.249.141.0/24 maxlen: 24
156.249.142.0/24 maxlen: 24
156.249.143.0/24 maxlen: 24
156.249.144.0/24 maxlen: 24
156.249.152.0/24 maxlen: 24
156.249.155.0/24 maxlen: 24
156.249.156.0/24 maxlen: 24
156.249.157.0/24 maxlen: 24
156.249.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115228 (0x1c21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 16:47:19 2026 GMT
Not After : Aug 1 16:47:19 2026 GMT
Subject: CN=6a45449c-0e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:f0:4f:71:ba:a6:45:d1:7a:b0:5d:81:df:
15:ba:a1:c0:35:10:86:cf:c3:30:57:e0:84:51:bd:
94:c4:1d:32:04:4f:e0:40:5a:c9:97:95:61:a9:5e:
7b:9d:b1:45:0b:cc:e9:a5:97:db:bb:24:3d:55:1e:
a7:4e:e8:a2:a9:89:5c:b6:f4:31:a8:2d:b8:50:a1:
a4:cd:ae:3f:dd:c0:5b:e2:17:93:19:0a:de:64:1d:
59:0a:e1:06:9d:3c:33:38:93:4b:e5:59:4e:eb:92:
26:1e:d3:c7:a7:13:6f:2a:da:eb:18:74:b8:03:87:
ce:7a:b6:8f:54:bd:00:fe:c5:89:7f:c8:b4:7e:45:
09:87:57:1c:29:9d:57:a1:a3:29:92:57:5a:1e:aa:
89:39:02:ee:23:b7:c6:77:15:5c:15:82:ea:5d:3f:
2a:53:b9:56:e6:7b:92:31:7e:bd:9a:d0:c8:92:60:
3a:1c:f1:44:a5:1a:76:73:69:1a:5e:71:28:50:07:
2f:dd:19:2c:b5:1d:64:85:1c:ba:54:68:16:7d:83:
4e:33:69:c3:ea:77:b4:fd:a8:84:fb:32:11:7f:67:
12:92:e5:35:41:d9:ec:37:01:ee:54:8a:fa:85:9c:
9e:b2:a4:1e:c7:a6:26:f3:0b:6c:8f:48:89:d2:19:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:C5:40:0D:FE:41:5D:6D:37:5B:CA:CD:E4:2C:71:6F:19:95:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/88B2D150756C11F1949816A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.140.0-156.249.144.255
156.249.152.0/24
156.249.155.0-156.249.157.255
156.249.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:6b:34:5c:9f:53:2e:a6:d1:b7:f0:d1:e3:9f:e2:30:14:d0:
c8:d1:82:28:31:e7:57:72:e5:a3:b4:7c:e7:30:c6:2e:a5:3a:
7b:d2:ac:0d:4a:a8:3a:15:ed:ec:da:0d:ab:8c:41:17:a4:22:
53:e3:3d:29:d3:78:15:c3:4d:1b:98:a5:f2:77:06:90:74:9b:
f9:cc:30:8c:6f:b4:3f:ad:f2:c9:fd:6c:a6:15:be:ea:cb:f3:
91:9f:87:28:f5:ed:5b:c2:b6:e5:63:a2:86:fd:27:94:0f:d8:
65:ac:64:a6:5c:f0:48:dd:85:ea:5e:ba:f1:83:d2:19:84:63:
ce:38:6b:87:bc:01:83:37:14:73:67:0e:04:c2:ed:bd:d7:c2:
6d:e2:2e:70:dd:5f:41:e6:68:c2:4b:20:04:fd:23:b5:2f:0a:
8e:c4:52:16:96:52:c2:16:f0:3d:c9:22:f0:30:39:a3:45:96:
2a:2e:4d:c5:03:7e:d7:e2:3f:31:ab:48:35:4b:96:ff:f2:ac:
56:02:25:04:bf:d4:cc:09:ad:f5:e9:29:ba:3f:f6:81:e1:47:
c4:36:de:34:c8:c1:df:3b:97:d4:e0:76:c0:44:8f:f7:56:e5:
0c:e2:ee:93:7c:25:99:e6:15:16:63:bf:3c:88:9b:f1:19:5e:
f7:8b:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:06 2026 by rpki-client