Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BCC2B9E7F5611F1B967BAB0CE1D38B0.roa
File: 9BCC2B9E7F5611F1B967BAB0CE1D38B0.roa (raw, json)
Hash identifier: VjmLgBE8TGizb2rFWV4L/clk5sNvmjr9DdnID3jh/T0=
Subject key identifier: A6:CE:82:14:77:6C:9A:FA:A0:4F:C7:C7:F5:0C:C8:8E:17:AC:BA:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BCC2B9E7F5611F1B967BAB0CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:35:39 +0000
ROA not before: Tue 14 Jul 2026 07:35:33 +0000
ROA not after: Mon 17 Aug 2026 07:35:33 +0000
asID: 22773
IP address blocks: 156.233.41.0/24 maxlen: 24
156.233.42.0/24 maxlen: 24
156.233.44.0/23 maxlen: 24
156.233.47.0/24 maxlen: 24
156.233.56.0/24 maxlen: 24
156.233.58.0/24 maxlen: 24
156.233.60.0/23 maxlen: 24
156.239.148.0/24 maxlen: 24
156.248.0.0/24 maxlen: 24
156.248.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115937 (0x1c4e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:35:33 2026 GMT
Not After : Aug 17 07:35:33 2026 GMT
Subject: CN=6a55e6ca-2de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:40:99:fc:01:f8:4d:49:fb:10:4a:da:e0:
0c:79:df:15:6c:22:2a:6a:aa:d3:a2:79:9a:1f:aa:
42:52:f6:3c:e8:48:a4:68:e1:ee:1d:4d:f1:3a:8c:
73:25:4e:0c:ff:cf:1b:d4:bc:d7:a7:86:8c:d7:f6:
4d:2c:ee:1a:69:17:f0:67:81:f8:82:d0:d2:4d:cf:
10:28:98:93:b4:c7:d5:af:5f:1b:bf:19:6f:1d:2a:
80:b7:51:dd:ac:86:ad:81:eb:39:95:62:70:1c:d1:
b2:e7:34:45:50:14:65:8c:ef:d6:c5:a9:1d:7b:07:
65:fc:2f:eb:51:da:83:18:50:83:f5:f2:24:ee:4a:
16:3f:fc:d4:4b:d0:8a:96:14:4d:42:a9:6a:c3:07:
19:f8:9e:87:5e:a5:b0:f6:16:a0:02:7a:ed:df:bc:
2c:b2:c4:4a:d6:13:a5:44:d4:e9:71:6d:11:c2:2c:
92:cf:58:a9:66:b7:38:eb:6e:96:3d:49:25:5e:6c:
10:7f:c5:a0:d8:b8:ad:23:f2:51:49:01:15:78:73:
25:69:10:c4:ef:17:49:15:e0:e3:d8:5b:cc:ae:90:
fd:07:1f:76:96:32:6c:2c:c9:b7:2c:56:6e:3e:49:
ea:4d:b6:02:46:ac:78:ec:e8:7d:84:00:10:59:9e:
5d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CE:82:14:77:6C:9A:FA:A0:4F:C7:C7:F5:0C:C8:8E:17:AC:BA:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BCC2B9E7F5611F1B967BAB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.41.0-156.233.42.255
156.233.44.0/23
156.233.47.0/24
156.233.56.0/24
156.233.58.0/24
156.233.60.0/23
156.239.148.0/24
156.248.0.0/24
156.248.4.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2c:0d:33:90:17:5a:88:15:4a:29:18:f6:6e:52:26:1b:5f:
16:a9:76:50:33:73:8e:07:07:ce:a3:d5:02:18:d6:e4:77:4a:
ca:26:e7:8a:9a:9e:1d:21:d0:1c:b6:4d:75:35:48:fe:1f:41:
06:60:4a:ac:0d:b3:54:d2:59:3c:df:6b:97:9b:05:01:37:23:
7b:46:2a:20:8f:ae:af:83:1d:86:5e:fe:8d:b3:bb:d1:46:66:
10:ff:af:1d:5a:50:bd:88:af:73:34:df:97:d1:b4:9d:64:66:
2c:02:5b:7f:28:f9:52:b3:02:7a:c7:c9:ce:10:ba:d5:36:38:
74:9f:aa:ab:1e:ab:df:45:c2:58:80:0d:6a:3e:f1:c8:41:a1:
4b:b3:12:e5:4c:21:38:af:b6:1d:df:ca:6e:4e:8a:52:b9:9c:
8b:08:8e:ca:82:93:e6:c3:20:d7:74:32:9c:0f:eb:d9:56:1e:
76:5e:30:a7:c2:f7:4e:74:7e:9e:97:e9:b5:fa:a1:85:a2:0e:
32:ef:6b:2b:64:4c:a5:5a:e5:3e:16:9b:d6:09:53:d0:15:1b:
75:e5:aa:ef:28:d3:28:2d:b4:16:57:51:e5:e4:9f:15:33:6a:
bb:8e:19:c2:23:0c:d0:5b:70:d6:18:07:66:cf:da:6c:d9:fc:
1d:47:ce:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:19 2026 by rpki-client