Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEAC0024ECB11F1ACB24AFFCE1D38B0.roa
File: 8BEAC0024ECB11F1ACB24AFFCE1D38B0.roa (raw, json)
Hash identifier: 5mlS+73N8J7Dj2jmImxkD9QOPwWHkb9aBKHBlTcqK9Y=
Subject key identifier: 85:1A:09:1E:12:38:CD:67:85:7A:00:1A:C1:AD:92:52:BB:94:89:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B431
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEAC0024ECB11F1ACB24AFFCE1D38B0.roa
Signing time: Wed 13 May 2026 12:59:16 +0000
ROA not before: Wed 13 May 2026 12:59:11 +0000
ROA not after: Tue 16 Jun 2026 12:59:11 +0000
asID: 22773
IP address blocks: 156.238.153.0/24 maxlen: 24
156.238.154.0/24 maxlen: 24
156.238.155.0/24 maxlen: 24
156.238.156.0/24 maxlen: 24
156.238.157.0/24 maxlen: 24
156.238.158.0/24 maxlen: 24
156.238.159.0/24 maxlen: 24
156.238.160.0/24 maxlen: 24
156.242.17.0/24 maxlen: 24
156.242.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111665 (0x1b431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 12:59:11 2026 GMT
Not After : Jun 16 12:59:11 2026 GMT
Subject: CN=6a0475a4-64ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:2a:1d:9a:be:fd:d5:98:9e:44:c3:f1:b0:
e9:fc:d9:09:e2:29:20:a9:7f:6a:dd:ab:f1:26:59:
f9:80:2f:ba:c9:c0:a7:dc:3d:ee:77:a7:53:66:bf:
65:57:09:cd:33:d5:6f:e8:45:89:53:d2:ce:6c:68:
02:d2:44:c2:e9:1e:c0:9b:d0:05:b5:6a:ae:ef:fc:
2b:b2:c7:fc:a2:21:90:9a:1c:20:7f:ae:e3:22:c8:
13:2a:f2:c8:09:95:c6:e9:54:08:88:d5:b1:59:03:
5e:cc:d0:e1:5d:5a:58:06:b5:a8:ed:6e:dc:5d:9f:
78:1f:d2:0f:d1:fd:36:2c:d7:8e:01:5a:97:90:24:
01:32:c1:50:08:bf:82:8f:09:1f:28:49:ac:2e:4f:
d1:bc:ce:4d:c3:6e:58:c8:cd:eb:47:1b:b0:fb:e6:
7e:a3:9d:5b:fb:fa:3f:ac:55:ca:13:de:f1:c0:c7:
e1:3d:6a:65:f1:56:63:f2:6c:fc:2c:98:3d:5f:98:
fd:aa:c2:eb:bf:20:26:cb:d5:d4:cf:21:5a:27:51:
ed:30:0d:a4:2a:b7:13:0c:dc:54:62:22:92:8b:f6:
7b:8c:86:8b:95:77:9a:45:91:e1:6e:e8:9c:14:85:
c1:c6:42:d2:92:76:fa:db:b2:42:fb:87:d4:da:e1:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1A:09:1E:12:38:CD:67:85:7A:00:1A:C1:AD:92:52:BB:94:89:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BEAC0024ECB11F1ACB24AFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.153.0-156.238.160.255
156.242.17.0-156.242.18.255
Signature Algorithm: sha256WithRSAEncryption
79:31:32:d0:ba:31:51:b5:0b:09:18:fb:4c:5e:dc:f9:29:0d:
26:52:48:d0:fd:7a:ca:13:cf:5b:e9:f6:1e:da:9d:e6:db:37:
c6:6c:9a:3f:65:59:9b:d1:e7:f7:7c:bb:cc:93:25:3e:85:6a:
19:df:1b:c4:da:4d:97:46:f3:7e:12:1a:61:a0:e5:91:1b:49:
38:3e:ff:d5:e0:5e:6c:46:bd:0a:e8:4c:69:dc:34:ca:d4:45:
15:ff:96:d6:c2:b7:14:e2:dd:cf:2f:db:5c:f7:81:26:06:7e:
aa:24:25:f5:bb:72:4f:5a:7c:8a:95:6e:9f:21:7f:79:e4:62:
79:e7:1b:4a:c8:41:71:3d:c5:9e:5a:07:05:f4:59:b2:69:a3:
69:dd:d6:71:8b:19:ae:e3:30:fb:c1:54:01:b1:9a:7a:f6:03:
47:b9:48:c2:63:d7:8d:a3:7f:91:37:f1:15:2d:f8:65:17:ff:
95:0c:db:9b:92:49:f0:55:1a:4c:50:c3:9f:da:d6:e5:f6:ec:
2a:94:e2:c9:4f:b2:ff:ff:f5:6e:17:de:37:87:42:0c:19:bc:
9f:cc:c6:93:b3:ab:85:c4:bf:b3:ff:ab:74:47:74:42:7b:ef:
e5:3e:86:d5:68:e0:49:77:a9:10:48:05:99:b9:59:19:08:eb:
f3:86:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:18:56 2026 by rpki-client