Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF53B767C3411F19F3049A3CE1D38B0.roa
File: AFF53B767C3411F19F3049A3CE1D38B0.roa (raw, json)
Hash identifier: 5jFtF/w3DObousoPyrX7XaQYyGJJsLrd4IUwV9zBshM=
Subject key identifier: 2A:CD:E5:B4:4F:EF:11:19:D4:8E:1C:72:E4:8A:7F:0C:BC:4A:9D:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C420
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF53B767C3411F19F3049A3CE1D38B0.roa
Signing time: Fri 10 Jul 2026 07:55:16 +0000
ROA not before: Fri 10 Jul 2026 07:55:11 +0000
ROA not after: Tue 10 Jul 2029 07:55:11 +0000
asID: 17561
IP address blocks: 156.229.14.0/24 maxlen: 24
156.229.15.0/24 maxlen: 24
156.235.1.0/24 maxlen: 24
156.235.2.0/24 maxlen: 24
156.235.3.0/24 maxlen: 24
156.235.4.0/24 maxlen: 24
156.235.5.0/24 maxlen: 24
156.235.6.0/24 maxlen: 24
156.235.7.0/24 maxlen: 24
156.235.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115744 (0x1c420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 07:55:11 2026 GMT
Not After : Jul 10 07:55:11 2029 GMT
Subject: CN=6a50a564-76c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:ef:2c:1d:cb:15:f1:e7:e2:27:5b:d3:3e:
ac:79:dc:05:b8:55:b8:be:e8:0f:b4:8a:98:9d:cd:
f3:99:a9:74:7c:ff:35:37:61:6d:83:52:1f:36:9f:
cb:c4:d8:f0:cd:7d:f0:8e:88:bb:db:ac:e9:03:89:
83:21:c6:54:9a:bd:d5:f1:f1:7e:a9:ff:ec:db:f0:
bd:05:b3:a7:09:39:4d:7e:cc:df:ba:3f:4d:73:25:
58:2a:f2:03:fe:54:a4:e5:10:49:ed:08:37:cd:e9:
cb:7a:b4:2b:d6:89:3f:07:fd:39:2a:1a:5c:b9:35:
89:d3:25:63:92:8b:0d:f9:80:81:3d:f5:cc:2c:7a:
91:03:70:b7:5d:57:bb:7c:bb:1d:dc:17:13:be:ec:
a7:7d:c1:73:cf:ae:23:f6:60:40:8d:52:62:f8:ca:
d0:24:cd:54:c2:84:a7:49:88:9e:53:07:06:70:48:
e1:cb:4c:07:7f:3a:7e:97:df:a2:5e:07:fa:3b:fd:
72:e1:82:1a:17:dd:a0:ab:2e:12:e0:36:fd:15:bc:
2e:56:ca:c1:44:b2:f3:1a:7c:b3:35:e1:7a:c7:0d:
d6:c1:eb:36:29:52:4b:db:3f:eb:d2:da:7b:76:5e:
fe:49:3c:f2:d7:da:64:5f:f2:de:ed:bf:9e:1f:fe:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:E5:B4:4F:EF:11:19:D4:8E:1C:72:E4:8A:7F:0C:BC:4A:9D:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFF53B767C3411F19F3049A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.14.0/23
156.235.1.0-156.235.8.255
Signature Algorithm: sha256WithRSAEncryption
a5:14:37:65:fd:58:fb:b5:e4:cf:84:8e:0e:84:64:d4:27:5f:
b2:ef:ca:00:77:64:b8:36:1d:2c:2b:38:fd:ec:1a:18:8d:d5:
e3:a9:72:8d:c4:88:c4:99:fe:b2:43:0c:e2:0e:8b:06:9a:b8:
1a:3a:74:28:ee:7c:2c:c5:50:2a:ef:84:c9:91:98:93:a4:9e:
9a:de:bc:53:4e:c1:0a:10:bf:ed:b9:9b:9b:31:3f:0b:be:b7:
e7:de:ad:86:e8:00:c2:13:09:84:11:af:8f:79:87:f7:a7:92:
54:24:12:91:a9:f1:7b:07:a3:e7:47:c2:41:ff:0c:56:fe:41:
74:2d:89:46:b5:c6:ef:29:d0:44:54:82:f8:ba:29:5f:d8:1f:
e9:bf:ab:a2:8e:5e:e4:16:ec:90:95:bf:af:46:8f:cd:eb:7d:
ff:78:5f:dc:e1:24:2a:c2:b6:23:7c:9a:b0:09:b1:49:f2:a9:
89:c6:c3:92:c9:50:b0:87:6e:21:11:3d:11:2b:8b:4b:b7:3f:
b7:0d:fc:ab:45:5e:bf:19:ed:d5:f8:3e:aa:19:76:62:0b:59:
46:2a:af:9b:ed:eb:55:58:e5:e1:58:ea:8f:ed:19:71:95:6b:
4d:e0:cc:20:ea:e4:ef:f6:67:38:54:b7:32:9b:04:6e:34:03:
a9:a9:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:18 2026 by rpki-client