Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37CB7C574B11F1B36A69C9CE1D38B0.roa
File: 9F37CB7C574B11F1B36A69C9CE1D38B0.roa (raw, json)
Hash identifier: jTFdxOtvuNsmWbih1WoMwjYUPqlEwfUo2Vt8A0NlkAk=
Subject key identifier: 76:1E:A8:BE:B1:88:AB:93:CC:C6:96:2F:DA:F9:BC:13:24:88:6C:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37CB7C574B11F1B36A69C9CE1D38B0.roa
Signing time: Sun 24 May 2026 08:36:13 +0000
ROA not before: Sun 24 May 2026 08:36:07 +0000
ROA not after: Tue 30 Jun 2026 08:36:07 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112860 (0x1b8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:36:07 2026 GMT
Not After : Jun 30 08:36:07 2026 GMT
Subject: CN=6a12b87d-ce99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:06:99:59:aa:98:9b:ff:15:6c:46:8c:2a:
e8:4f:63:aa:a5:5b:00:13:a3:fa:3a:54:52:dd:93:
4b:a1:1b:df:00:9f:9c:e2:c5:41:7a:1c:81:09:50:
73:c7:01:8a:1d:c8:7c:02:e2:d7:e3:fd:7c:53:06:
a7:c4:5c:30:fa:77:77:61:3c:da:6c:32:f5:67:25:
a7:2e:5a:3c:f1:48:a4:b1:53:6a:20:a3:9a:60:c5:
3f:f5:82:2f:be:78:9c:86:47:12:0a:09:a1:ae:80:
7f:9a:03:e0:13:65:08:95:ee:18:bd:90:79:ae:c7:
8c:be:0e:80:68:48:62:b2:96:87:e9:98:69:c0:9b:
0d:78:e2:20:c5:e2:79:52:11:10:58:1b:f2:63:96:
a8:76:16:74:a0:07:f3:42:e2:92:cb:0d:e2:7c:cc:
0d:4b:4a:ab:f6:b0:66:1a:9f:9b:67:2d:00:cf:4e:
d9:31:c7:ad:84:9d:bd:34:e2:0f:d8:d2:a8:56:bf:
cc:9f:09:94:2d:20:30:58:56:9a:a4:02:8c:53:d1:
cd:7c:60:dd:81:40:61:c5:e3:77:e0:4f:e0:31:55:
ae:a4:0e:90:23:88:e2:42:8f:89:7c:9c:ed:09:62:
82:3c:82:43:b1:3c:aa:93:11:5d:ae:74:8b:d9:6e:
79:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1E:A8:BE:B1:88:AB:93:CC:C6:96:2F:DA:F9:BC:13:24:88:6C:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F37CB7C574B11F1B36A69C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.187.0/24
156.249.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:2e:71:fa:1c:77:8f:11:36:10:9a:e8:e1:ee:55:a3:fe:a3:
7e:08:0f:66:f2:40:e1:cc:83:96:c8:07:bc:73:dd:1b:76:79:
65:e4:e5:fd:24:1d:ae:3c:70:fe:26:26:88:0a:45:64:83:4d:
17:71:3f:c8:05:6b:eb:b5:25:f8:98:4b:0d:18:11:7a:f8:b8:
5f:ca:df:1e:ee:6c:76:28:0b:9d:fe:34:b4:fd:0e:32:42:02:
57:80:d1:b4:7d:57:ee:d8:6a:57:40:53:63:26:bd:8f:33:a1:
bd:aa:1e:34:cf:92:0b:da:dd:1a:4c:5c:c8:5b:d8:45:a6:8e:
97:d8:28:65:26:f5:17:1d:6e:2c:48:3e:20:69:d0:b8:ee:17:
cd:43:fb:a3:a1:08:9d:5b:07:15:9e:39:70:53:ba:e9:a5:bb:
51:99:80:d2:ef:6f:ca:8b:20:f7:4c:74:f9:4a:f8:c5:63:8f:
96:0d:e0:d4:7d:8b:ad:54:2a:39:71:7a:36:66:a6:f1:8d:52:
39:ef:1e:97:2b:79:68:70:bf:80:c5:f1:30:bf:eb:19:67:fc:
9e:3d:c9:d2:45:72:6a:96:66:26:c2:aa:5b:fd:f1:4d:b1:f9:
61:2c:07:25:59:67:78:18:28:6b:7e:b9:e3:ad:54:4f:69:2d:
a1:7a:25:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:52 2026 by rpki-client