Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6E7E1A7AB311F1AA6263C1CE1D38B0.roa
File: AA6E7E1A7AB311F1AA6263C1CE1D38B0.roa (raw, json)
Hash identifier: 2kyfA1xqMeYlAR9uvb1yH8cRLwX8j/2AHjOFVjxu2zc=
Subject key identifier: 09:CF:AC:43:45:7D:CB:52:86:D9:50:F8:A7:19:20:18:74:06:62:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6E7E1A7AB311F1AA6263C1CE1D38B0.roa
Signing time: Wed 08 Jul 2026 09:59:11 +0000
ROA not before: Wed 08 Jul 2026 09:59:06 +0000
ROA not after: Sat 08 Aug 2026 09:59:06 +0000
asID: 131471
IP address blocks: 156.238.64.0/24 maxlen: 24
156.238.65.0/24 maxlen: 24
156.238.66.0/24 maxlen: 24
156.238.67.0/24 maxlen: 24
156.238.68.0/24 maxlen: 24
156.238.69.0/24 maxlen: 24
156.238.70.0/24 maxlen: 24
156.238.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115632 (0x1c3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 09:59:06 2026 GMT
Not After : Aug 8 09:59:06 2026 GMT
Subject: CN=6a4e1f6e-a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a0:5e:fe:85:a2:26:8f:a6:2f:93:ec:86:29:
be:0f:e0:98:04:b2:f6:85:10:6e:d7:c0:ab:cf:e9:
72:f5:5a:ff:e3:12:76:37:90:22:a1:cb:a2:0f:f1:
a8:18:01:cc:2d:5f:0b:bd:42:43:9b:10:f2:ec:cf:
b7:45:d5:a9:11:fb:c2:43:3b:b8:97:78:69:48:f7:
d4:7b:4a:ba:58:5b:48:cf:19:73:d4:19:6d:f8:a9:
aa:3e:56:47:dc:5a:6e:2b:c6:04:67:7a:b1:fd:43:
24:4f:69:1c:aa:c0:d6:03:78:70:aa:38:bb:71:70:
04:05:f3:6f:2e:2f:50:0e:7d:fc:57:ea:2d:bc:0d:
62:a8:41:57:4f:db:b0:79:b1:50:37:0b:45:59:e4:
29:59:51:b6:e3:02:87:18:bf:37:61:83:a7:4a:d4:
87:ca:c4:88:17:8e:98:91:77:d8:57:41:f2:89:2c:
c4:83:d2:d4:59:8f:29:20:18:32:5d:3e:68:cc:02:
08:cd:f7:62:9f:32:77:ee:28:6d:86:2a:f3:74:96:
13:be:43:2d:45:27:ab:6a:eb:7b:84:9c:ee:b9:08:
09:43:8e:f8:46:d3:02:51:a6:76:6c:f6:30:6c:b1:
d3:30:91:06:5b:31:d3:cf:44:76:23:df:26:1e:3a:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:AC:43:45:7D:CB:52:86:D9:50:F8:A7:19:20:18:74:06:62:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA6E7E1A7AB311F1AA6263C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.64.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:88:5d:89:ec:47:b0:73:2a:05:40:53:76:8e:6d:15:1f:78:
14:f2:df:43:f1:bc:23:cf:0e:6d:ad:24:0e:4e:fb:ed:16:86:
a4:ed:51:86:ad:53:c2:e7:8b:b8:e2:43:e3:aa:f6:9d:8f:4c:
be:1e:8e:ea:5f:3d:cc:a6:88:af:61:8a:dc:f6:7f:d7:7f:81:
b0:73:c3:47:f4:d9:6f:a3:f9:9a:5b:84:a2:d9:86:08:eb:2d:
86:2b:5a:db:81:2d:2e:ea:26:0b:30:1f:95:90:5d:67:67:82:
9a:f0:dc:63:f9:31:d3:fe:0f:47:26:c1:67:2d:4c:6d:fa:97:
f9:89:9a:83:90:70:92:7a:1d:95:bb:b6:91:2c:30:76:42:75:
0b:f8:cb:bb:da:15:4c:cf:8a:41:64:c4:84:f8:b0:2a:f9:b7:
ad:41:16:93:c0:63:9b:84:7c:37:c4:1f:a6:fc:40:71:9f:1c:
9c:f8:c9:da:86:05:13:58:a1:d8:a6:fb:92:e3:1c:9c:b4:9d:
89:33:e0:9e:c2:cc:38:02:b5:a1:9b:b2:c8:2b:bd:ea:16:34:
af:5d:c8:4f:c0:bc:e6:bb:6d:6a:8e:48:e4:75:dd:0c:28:38:
8d:53:1e:e8:df:ef:7b:3b:bd:55:b1:ed:31:64:76:90:de:4a:
f9:84:3a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:07 2026 by rpki-client