Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA017B07FAC11F19295ECAECE1D38B0.roa
File: 8CA017B07FAC11F19295ECAECE1D38B0.roa (raw, json)
Hash identifier: tQCmD/zw/+kRYUsBU0BpEfD4yoW/EvzY4EQg7puIYf0=
Subject key identifier: B9:0F:ED:9A:42:6B:FC:E0:34:D4:B9:82:E0:F3:F4:F3:E6:F6:89:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C51F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA017B07FAC11F19295ECAECE1D38B0.roa
Signing time: Tue 14 Jul 2026 17:50:50 +0000
ROA not before: Tue 14 Jul 2026 17:50:45 +0000
ROA not after: Sun 16 Aug 2026 17:50:45 +0000
asID: 22773
IP address blocks: 156.242.54.0/24 maxlen: 24
156.242.55.0/24 maxlen: 24
156.242.56.0/24 maxlen: 24
156.242.57.0/24 maxlen: 24
156.242.58.0/24 maxlen: 24
156.242.59.0/24 maxlen: 24
156.242.60.0/24 maxlen: 24
156.242.61.0/24 maxlen: 24
156.242.62.0/24 maxlen: 24
156.242.63.0/24 maxlen: 24
156.243.48.0/20 maxlen: 24
156.243.205.0/24 maxlen: 24
156.243.206.0/24 maxlen: 24
156.243.207.0/24 maxlen: 24
156.243.218.0/24 maxlen: 24
156.248.1.0/24 maxlen: 24
156.248.2.0/24 maxlen: 24
156.248.3.0/24 maxlen: 24
156.248.22.0/24 maxlen: 24
156.248.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115999 (0x1c51f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 17:50:45 2026 GMT
Not After : Aug 16 17:50:45 2026 GMT
Subject: CN=6a5676fa-34d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:f6:ad:d3:a5:8b:97:6f:90:4b:d0:89:58:
cf:6d:c4:0b:08:b4:6b:74:aa:11:b7:6f:c8:6c:24:
2f:b3:91:30:6c:8d:9a:1e:40:40:3e:f2:10:e1:9e:
ca:fb:9d:b9:22:ee:3b:10:37:fd:0f:b5:9b:b1:7e:
9a:bd:9a:76:34:49:67:00:3a:8c:6e:01:64:a0:5d:
46:26:07:72:17:bf:01:36:f3:d3:7a:5e:8f:b6:46:
af:b9:a1:78:9c:e5:c4:a2:a4:50:46:2f:e1:25:8c:
7e:56:8a:ed:46:11:11:b7:a5:21:11:2b:f8:47:65:
5e:30:b4:ea:ad:cf:98:b6:b2:54:f5:87:ff:6f:29:
46:eb:dc:cd:bc:fa:49:df:5c:67:44:a4:93:a8:62:
83:b2:df:c3:cb:2b:96:09:0b:1d:9d:ab:63:e0:1e:
ee:fe:d0:6b:e7:78:9d:4d:b2:df:6f:53:7e:27:95:
34:10:ff:91:b7:11:95:dd:c4:ab:71:39:c1:88:c9:
7b:05:88:08:4a:b8:fd:3c:5a:62:92:f0:2f:8b:aa:
c6:35:8f:d2:5d:a4:04:0b:a5:38:f7:d4:41:49:2d:
45:03:43:02:96:c9:44:31:b9:fc:d0:cc:8e:34:54:
18:85:7d:b6:12:e5:94:63:a9:86:22:25:63:23:aa:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:ED:9A:42:6B:FC:E0:34:D4:B9:82:E0:F3:F4:F3:E6:F6:89:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CA017B07FAC11F19295ECAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.54.0-156.242.63.255
156.243.48.0/20
156.243.205.0-156.243.207.255
156.243.218.0/24
156.248.1.0-156.248.3.255
156.248.22.0/24
156.248.24.0/24
Signature Algorithm: sha256WithRSAEncryption
98:87:8a:d8:c3:1d:33:da:4d:39:b3:29:0c:e2:2c:7a:40:15:
ea:da:a1:6a:14:cf:13:a3:b1:95:25:e0:54:86:78:45:d9:d4:
63:4c:84:0a:d0:59:cb:9d:a0:35:2e:7f:9b:d4:07:e6:f4:33:
6e:39:13:56:74:ac:04:42:4a:e6:9c:ca:d8:f1:f4:90:62:c4:
d4:ec:ed:e2:f3:a4:f9:7b:5e:01:e7:ac:91:2d:32:87:66:d4:
f7:e2:7c:b5:2c:fd:b7:ff:71:3f:b4:2e:d7:f1:f8:66:d7:36:
7c:90:42:9a:b6:d9:ce:df:b9:2b:a5:ec:7b:19:bb:b6:d3:ac:
9f:e5:82:75:27:14:88:e3:63:7c:98:9a:67:55:b2:00:ef:9c:
72:c1:ad:e5:b3:61:41:c7:70:31:6c:b4:c2:a8:04:a6:34:9f:
0f:28:23:06:cd:f1:4f:0b:75:ea:35:af:ff:fa:a2:2e:e6:16:
38:68:51:31:90:20:c1:14:2e:c2:ff:98:57:a1:fb:49:19:65:
cb:44:1b:51:3f:96:56:77:a1:d3:91:48:2a:bc:0e:9d:03:50:
bf:9a:55:25:28:7b:ce:22:f9:eb:1f:07:21:3d:db:83:13:cb:
cf:ea:76:a8:a5:5d:94:c3:b2:5f:ce:0e:c4:21:bf:e0:20:0f:
c4:f8:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:06 2026 by rpki-client