Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD406406FB711F18843CCF7CE1D38B0.roa
File: ACD406406FB711F18843CCF7CE1D38B0.roa (raw, json)
Hash identifier: XawTsX7OocFMhjBzsqLGpIjIe6OvpvMrg5yKLfwZzpM=
Subject key identifier: 1F:90:7E:AD:F2:53:4A:53:A7:D3:AA:1C:1A:11:53:58:D6:C8:FE:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD406406FB711F18843CCF7CE1D38B0.roa
Signing time: Wed 24 Jun 2026 10:30:10 +0000
ROA not before: Wed 24 Jun 2026 10:30:05 +0000
ROA not after: Sat 01 Aug 2026 10:30:05 +0000
asID: 62240
IP address blocks: 156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.100.0/24 maxlen: 24
156.233.103.0/24 maxlen: 24
156.233.104.0/24 maxlen: 24
156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114710 (0x1c016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 10:30:05 2026 GMT
Not After : Aug 1 10:30:05 2026 GMT
Subject: CN=6a3bb1b2-0454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:68:24:08:22:d5:4d:b9:71:24:88:49:4a:e9:
b3:ba:8f:bf:d9:a9:b6:cb:e2:a4:55:77:16:27:dc:
b7:69:12:dd:46:54:a1:ca:32:64:b1:57:6e:67:46:
e0:d4:ac:0c:fa:4f:1c:6d:94:07:c2:55:7c:7a:0d:
12:49:62:4c:b9:60:69:0a:03:f4:e7:9e:09:dd:fc:
c4:10:32:bd:47:45:08:d1:d3:b4:8e:03:c0:c5:cd:
5f:a7:07:b9:e0:d8:2a:ca:1d:96:42:35:98:04:71:
da:97:0b:f5:06:32:3e:86:c8:23:47:05:a5:78:e7:
0e:d7:8e:80:98:90:3f:6a:68:1c:d3:54:aa:ff:98:
93:6c:22:3c:08:47:31:bc:f4:62:cd:9a:87:ba:6b:
27:f8:8f:f7:dd:ee:fd:03:08:2b:bc:46:f9:94:3e:
78:32:7c:52:d3:01:84:42:d2:54:35:15:cb:0f:d2:
85:de:99:bb:18:a1:83:7e:93:3d:39:a0:ac:12:d2:
6e:c0:a0:9c:c8:36:e5:42:6a:09:91:dc:70:04:b4:
35:8b:77:2b:c5:19:d1:21:d3:f4:39:7b:43:17:c8:
e9:ce:10:97:27:f7:17:93:72:9d:b6:53:b4:1e:48:
60:7d:54:a8:b6:d4:bf:72:f7:8c:b2:4f:77:0a:d3:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:90:7E:AD:F2:53:4A:53:A7:D3:AA:1C:1A:11:53:58:D6:C8:FE:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ACD406406FB711F18843CCF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.0.0/23
156.233.100.0/24
156.233.103.0-156.233.105.255
Signature Algorithm: sha256WithRSAEncryption
1f:90:5a:25:fa:19:59:77:20:5b:20:74:6d:8d:2c:4e:c8:08:
a9:40:66:61:3f:65:34:8a:89:ee:c4:72:f2:26:71:2b:ba:04:
c8:2d:32:ee:1a:d6:30:35:eb:25:69:d4:a5:4f:10:d9:e7:12:
d2:b6:6b:9b:af:86:e9:21:ae:5b:03:a4:1e:1d:65:85:7d:66:
d9:ea:66:b6:83:51:94:17:72:4d:55:7a:58:17:ef:47:96:a4:
61:78:21:10:82:31:3f:fb:be:0e:94:ea:7a:0c:05:e2:ea:62:
08:a2:30:63:c2:37:0d:0c:85:9f:b2:95:24:22:c0:d8:fd:78:
f1:0a:ed:5a:8f:27:0a:d6:50:ce:85:27:7d:c6:fa:d6:6a:80:
b8:95:59:33:1f:21:ca:84:f1:e3:e2:51:07:f6:30:d0:03:25:
37:2b:84:13:ac:e8:d4:d5:2a:7b:3d:c3:39:56:33:5a:de:29:
72:e2:2d:1f:b6:c6:5d:63:a2:29:d9:20:98:aa:95:bb:d5:12:
60:9d:67:a1:12:f1:ca:52:d5:c6:f9:e2:75:b5:d9:a8:79:69:
ef:50:dd:6b:66:d5:c4:ff:c2:82:cc:cb:8f:a0:ea:dc:06:11:
e0:f8:56:13:e1:5c:ff:ff:1d:3e:20:9d:33:96:cc:f0:7c:57:
b5:33:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:41:53 2026 by rpki-client