Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA9458C712C11F18D6597D9CE1D38B0.roa
File: 8AA9458C712C11F18D6597D9CE1D38B0.roa (raw, json)
Hash identifier: iZDG3Xpn7BUrVAKx632Ix6HnL3R6mhqjAga+JGqSf4w=
Subject key identifier: A8:D2:E7:26:6D:59:8E:4A:C4:61:5A:E5:6D:4E:FA:3B:77:4C:14:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C07D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA9458C712C11F18D6597D9CE1D38B0.roa
Signing time: Fri 26 Jun 2026 06:59:15 +0000
ROA not before: Fri 26 Jun 2026 06:59:09 +0000
ROA not after: Mon 31 Aug 2026 06:59:09 +0000
asID: 399077
IP address blocks: 156.240.221.0/24 maxlen: 24
156.240.222.0/24 maxlen: 24
156.240.223.0/24 maxlen: 24
156.240.224.0/24 maxlen: 24
156.240.225.0/24 maxlen: 24
156.240.226.0/24 maxlen: 24
156.240.227.0/24 maxlen: 24
156.240.228.0/24 maxlen: 24
156.240.229.0/24 maxlen: 24
156.240.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114813 (0x1c07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 06:59:09 2026 GMT
Not After : Aug 31 06:59:09 2026 GMT
Subject: CN=6a3e2343-dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:b6:d7:e4:8c:5e:e5:70:31:45:c7:d3:b9:
c7:ac:48:f4:f4:39:d9:71:e8:14:af:58:b6:98:46:
5a:13:ce:a2:2e:90:0a:3c:d7:f8:f6:97:63:a6:67:
08:89:fd:bd:58:cf:e8:71:78:01:c8:b6:14:dd:e9:
92:bc:a8:8b:90:1e:6f:e8:c9:08:12:b7:6c:55:1c:
00:67:eb:e1:78:dc:95:9c:70:99:8a:e5:9b:04:43:
ca:de:73:d9:b8:b0:de:3b:23:d6:7a:5a:c8:9d:43:
60:38:40:78:36:a0:0b:3a:96:c9:31:2a:1a:c1:4c:
35:b9:7a:e4:ac:7b:e4:3a:8b:62:cc:23:39:fd:08:
79:c8:1f:90:05:1e:8c:56:89:44:b7:12:a3:59:f6:
82:38:68:d5:41:71:70:e7:29:66:ab:32:30:f5:02:
5b:c3:dc:c4:fb:98:ba:5f:0b:3e:ee:1b:b7:45:7e:
06:44:6d:26:8f:7d:43:d2:26:2c:98:85:51:18:41:
a7:0f:b1:22:6f:32:7c:cf:47:64:81:d5:0c:30:99:
a5:30:b4:50:cd:eb:48:c3:93:dc:b4:93:27:85:29:
fe:5d:03:5a:33:01:e7:3c:9a:aa:c8:6f:d2:fe:35:
a8:b5:87:65:a0:a1:84:a2:a7:e6:3c:22:73:41:da:
d4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:E7:26:6D:59:8E:4A:C4:61:5A:E5:6D:4E:FA:3B:77:4C:14:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AA9458C712C11F18D6597D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.221.0-156.240.230.255
Signature Algorithm: sha256WithRSAEncryption
32:2a:e8:30:90:25:46:e0:36:9a:7a:b7:81:47:82:77:79:a6:
03:7b:9a:d2:bf:cd:5f:ec:0d:c2:15:f7:ca:ed:45:bb:a3:72:
94:41:1c:71:0b:a3:1d:86:1f:f1:d2:7b:ca:62:a5:f3:49:2a:
e0:d8:13:7f:ee:fc:46:3f:a8:be:7c:03:4f:79:8e:c2:05:47:
b0:fa:55:6f:37:be:20:f6:86:54:59:38:59:d2:a8:77:ee:de:
dc:97:f3:6f:ad:de:26:e6:49:b7:84:49:8c:52:9c:e0:f6:40:
f0:4a:83:ba:c3:95:90:89:92:62:be:84:01:77:a2:67:c0:be:
b0:44:51:e0:4a:a1:18:13:72:ac:b1:d7:40:cd:cd:0b:c9:60:
ab:b4:50:d7:ea:b2:61:0f:d0:fd:77:97:0a:4d:39:a7:cf:5a:
35:36:b8:ab:92:5d:a1:27:f0:12:10:2b:80:c7:00:de:cd:03:
8b:72:20:00:7a:2f:da:dd:65:a8:ee:f7:25:04:d3:02:9a:e3:
69:60:cc:3f:c3:2b:cd:c8:2d:34:0e:1e:5b:3b:fe:2c:72:4b:
8d:e0:09:02:25:17:51:56:04:c1:dd:b3:cf:75:ca:62:e2:1c:
ae:f7:4e:89:72:ba:bb:c4:4b:54:53:c1:22:33:17:d0:e1:2f:
64:a3:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:00 2026 by rpki-client