Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4A98CC568E11F19BF19AC9CE1D38B0.roa
File: 8C4A98CC568E11F19BF19AC9CE1D38B0.roa (raw, json)
Hash identifier: DUsEC9DAzWXwJNDoyD9yWm5T0Q6jQ/WjcUMXfMjTj3U=
Subject key identifier: 2E:1B:40:9E:30:36:69:0A:27:68:90:A1:D4:8F:EF:17:73:4B:0F:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B872
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4A98CC568E11F19BF19AC9CE1D38B0.roa
Signing time: Sat 23 May 2026 10:02:47 +0000
ROA not before: Sat 23 May 2026 10:02:41 +0000
ROA not after: Fri 10 Jul 2026 10:02:41 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.15.0/24 maxlen: 24
156.225.50.0/23 maxlen: 24
156.228.15.0/24 maxlen: 24
156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
156.230.159.0/24 maxlen: 24
156.236.14.0/23 maxlen: 24
156.243.223.0/24 maxlen: 24
156.243.225.0/24 maxlen: 24
156.243.230.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112754 (0x1b872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 10:02:41 2026 GMT
Not After : Jul 10 10:02:41 2026 GMT
Subject: CN=6a117b47-d4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7f:1f:7a:f6:57:69:3d:a1:b0:fc:29:0c:62:
2d:e2:34:bf:5a:40:97:7e:c8:7f:49:a4:05:8a:2a:
bb:90:c9:6e:e8:73:4d:c2:60:f6:17:c8:8a:d0:35:
56:86:e0:77:1d:9c:2e:01:20:3c:1a:a5:95:ec:4b:
06:ed:1d:c6:b1:f1:ac:40:35:90:30:c0:51:33:b9:
37:68:f1:01:49:8b:29:31:7d:2d:6e:0e:c9:04:90:
1d:5f:6a:02:94:d0:2c:1d:d1:99:3a:20:f1:89:30:
8b:b4:83:89:2e:de:f6:cc:bb:65:ee:e9:e8:0c:19:
1e:7b:6d:07:b8:56:ef:53:b9:36:c5:11:ce:c7:ec:
2e:4b:d3:f1:5c:92:00:9b:8c:75:a2:95:0e:a9:2f:
c0:6d:8e:60:85:3d:69:af:08:23:2e:aa:ea:4f:58:
0d:a5:ea:7e:2d:78:9c:b4:a8:8c:1d:02:f8:60:60:
a0:1a:20:18:56:17:c7:88:be:c3:32:59:f7:06:ed:
3e:64:c3:64:b9:a9:ee:3e:b9:ee:87:31:da:1b:94:
10:71:c8:1c:21:bc:2e:d2:d3:ec:25:b8:c1:f6:78:
50:ec:7c:1f:0e:ad:33:7e:33:78:6f:75:28:4c:c1:
43:2a:c9:5c:1b:32:83:86:ed:03:71:7f:61:7f:38:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:1B:40:9E:30:36:69:0A:27:68:90:A1:D4:8F:EF:17:73:4B:0F:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C4A98CC568E11F19BF19AC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.15.0/24
156.225.50.0/23
156.228.15.0/24
156.228.62.0/24
156.228.210.0/23
156.230.159.0/24
156.236.14.0/23
156.243.223.0/24
156.243.225.0/24
156.243.230.0/24
156.243.241.0/24
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
3e:aa:5c:d4:46:75:16:2b:68:ca:e3:58:dc:2e:a5:79:d1:c7:
67:83:66:c8:ce:2d:08:98:24:f3:59:57:22:0a:06:1f:96:cd:
4c:56:8a:ac:f2:66:db:9a:93:28:6f:55:d4:5e:c8:cd:55:e0:
af:fc:3b:ff:10:88:03:46:4d:86:e2:74:8c:46:cb:f6:af:de:
6e:4a:af:08:31:5b:a5:09:62:02:44:10:25:77:8c:0f:6f:dd:
5f:b4:f6:c4:46:7e:9a:05:86:72:87:75:79:a3:b9:b3:5b:b5:
50:a0:52:c7:67:f4:1d:5e:8a:e8:68:b6:25:87:9d:c5:c4:0e:
a8:77:70:d7:2e:c6:8a:c5:9f:f8:78:4d:a8:dd:cf:24:e5:95:
3a:56:65:2e:e0:68:95:53:75:95:41:d4:85:b8:f8:6d:43:49:
3d:59:cf:b4:d7:30:86:6c:1a:18:df:17:4a:49:59:e7:34:a3:
34:9e:d5:22:7d:04:69:dd:27:50:e2:18:35:d0:93:40:f9:d9:
ea:5f:44:12:d1:40:db:37:fe:c7:9b:7a:f9:5c:c6:be:76:8f:
66:ea:f2:de:8b:a6:5c:8b:f3:09:b3:a5:5e:9d:56:fd:ca:47:
ee:e5:09:30:41:63:6d:83:9f:47:5e:a2:23:68:d6:ff:ea:34:
11:6f:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:33 2026 by rpki-client