Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959911207C3511F1AA2C20ABCE1D38B0.roa
File: 959911207C3511F1AA2C20ABCE1D38B0.roa (raw, json)
Hash identifier: THBehIdSdu0UmsrbMzqtA4H3DMeqTdxiW+YwBLrVtv8=
Subject key identifier: 02:48:E6:7C:DC:31:0D:A2:46:20:F0:E0:9D:3C:49:8A:32:B0:E2:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C424
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959911207C3511F1AA2C20ABCE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:01:41 +0000
ROA not before: Fri 10 Jul 2026 08:01:37 +0000
ROA not after: Tue 10 Jul 2029 08:01:37 +0000
asID: 17561
IP address blocks: 156.235.9.0/24 maxlen: 24
156.235.10.0/24 maxlen: 24
156.235.11.0/24 maxlen: 24
156.235.12.0/24 maxlen: 24
156.235.13.0/24 maxlen: 24
156.235.14.0/24 maxlen: 24
156.235.15.0/24 maxlen: 24
156.243.2.0/24 maxlen: 24
156.243.3.0/24 maxlen: 24
156.243.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115748 (0x1c424)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:01:37 2026 GMT
Not After : Jul 10 08:01:37 2029 GMT
Subject: CN=6a50a6e5-0402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:ce:4d:dd:ba:ac:8d:12:fa:92:b0:09:bb:
52:c5:ec:08:2c:ad:ca:da:76:72:f0:53:71:bb:f7:
30:26:de:15:56:08:f0:65:90:b1:65:2f:e9:91:af:
e2:fe:0a:68:34:5a:6d:7b:0f:fd:68:8f:61:2f:4c:
06:f6:0e:73:34:6e:0c:2c:37:86:d4:36:f8:cf:ba:
63:72:8c:c0:fb:5b:64:a3:a7:67:d9:d8:ed:f5:ed:
c0:28:da:ca:57:8c:94:5a:62:8c:44:af:a8:d8:02:
66:ca:79:ab:1b:ad:fd:b6:05:ac:ae:68:80:ef:12:
b4:f8:53:7e:fc:7a:47:c9:35:bd:33:26:73:be:27:
4e:c6:19:bb:0c:23:9b:3e:2b:48:ed:b9:89:f4:eb:
7c:62:45:32:07:5b:ba:ce:13:e9:76:67:08:76:8c:
7c:09:4d:e9:70:df:01:ad:74:c2:7e:b6:32:94:e6:
0e:46:b4:b2:32:db:6d:e6:77:e1:0b:fe:78:a7:5a:
46:52:8f:23:37:92:af:5f:6a:e6:fe:cf:6c:5d:d7:
2d:2a:ee:56:46:6f:cd:ae:a1:33:6a:ae:c9:ba:0e:
aa:93:90:92:a1:d2:2b:a6:f4:f5:cb:76:c6:16:33:
82:3a:4d:cc:82:0f:1d:1f:2f:9e:56:fe:8f:fd:4c:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:E6:7C:DC:31:0D:A2:46:20:F0:E0:9D:3C:49:8A:32:B0:E2:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/959911207C3511F1AA2C20ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.9.0-156.235.15.255
156.243.2.0-156.243.4.255
Signature Algorithm: sha256WithRSAEncryption
6e:f9:a1:96:a1:a3:1f:89:82:fb:53:2b:69:01:4b:03:e2:0c:
12:21:29:bf:2e:f6:d4:6e:84:ee:3e:9b:72:d8:08:fa:36:28:
69:45:47:e0:50:06:a5:5c:cd:41:1d:44:57:15:78:26:1b:84:
79:91:5b:a0:e5:9e:92:a8:7a:22:df:a7:15:45:2e:3c:00:3f:
fe:80:be:5f:f1:d4:02:e7:5a:11:9a:25:12:6c:18:3b:a2:36:
29:36:19:fd:b5:89:3b:3c:fe:fd:ea:13:7e:8b:02:8a:68:fc:
84:22:27:5c:35:05:fe:4f:df:f5:ce:31:94:4c:22:d1:05:3b:
55:67:fc:c1:24:05:ce:fc:65:b8:e8:8c:1f:d5:0c:38:dd:20:
8b:5f:1f:4f:90:98:2e:4f:67:57:b1:dd:c2:b0:1f:98:65:75:
3b:38:28:fb:74:2b:70:3b:35:81:a7:51:5f:3c:c9:e3:9e:b6:
4c:76:2f:ea:11:8a:ea:0e:03:40:06:cc:4f:b5:10:fd:31:df:
f5:78:10:5d:b2:28:02:02:7d:9e:11:a9:9f:ab:a6:3f:c5:18:
f4:2d:80:42:bd:e4:a0:f5:35:65:af:0c:b9:93:de:b4:b6:80:
23:63:b7:9e:3c:03:3c:d4:a8:65:a5:32:5e:df:e9:66:65:26:
0a:42:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:41 2026 by rpki-client