Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B2C0C07F6A11F1A6C7F5A8CE1D38B0.roa
File: B2B2C0C07F6A11F1A6C7F5A8CE1D38B0.roa (raw, json)
Hash identifier: A331wBZOiaxODcd2BN0lMv8PYnbkLkcIqq11txfi5VI=
Subject key identifier: DD:34:56:33:A4:CC:C0:07:31:9B:FD:D6:08:6C:88:DA:73:73:B0:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C507
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B2C0C07F6A11F1A6C7F5A8CE1D38B0.roa
Signing time: Tue 14 Jul 2026 09:59:27 +0000
ROA not before: Tue 14 Jul 2026 09:59:22 +0000
ROA not after: Fri 21 Aug 2026 09:59:22 +0000
asID: 202036
IP address blocks: 156.249.158.0/24 maxlen: 24
156.249.159.0/24 maxlen: 24
156.249.161.0/24 maxlen: 24
156.249.163.0/24 maxlen: 24
156.249.168.0/24 maxlen: 24
156.249.169.0/24 maxlen: 24
156.249.174.0/24 maxlen: 24
156.249.181.0/24 maxlen: 24
156.249.182.0/24 maxlen: 24
156.249.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115975 (0x1c507)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 09:59:22 2026 GMT
Not After : Aug 21 09:59:22 2026 GMT
Subject: CN=6a56087f-0225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:89:de:d2:3e:43:2b:83:85:a8:d0:61:bd:
54:b7:1b:6d:78:1b:71:51:8a:8b:cd:1c:5c:6d:85:
fa:22:fb:a4:01:07:01:ec:62:a6:66:58:41:72:5c:
71:95:23:ad:3b:98:36:77:65:ea:7d:bd:6f:05:76:
93:ca:8b:52:e1:e0:5e:bf:21:cd:a1:dc:96:bb:a0:
fe:af:97:6f:b5:4d:85:af:de:87:90:74:5c:13:41:
db:8d:b0:ca:41:85:75:c0:45:b0:d1:06:02:db:77:
90:76:78:78:29:5a:fd:b9:d3:0e:5f:eb:26:7f:77:
f5:7e:39:f1:f7:38:82:51:28:d3:fc:8c:cb:33:9b:
e0:7c:91:0c:16:09:3f:a0:e2:0d:01:89:65:81:8e:
38:11:b1:63:ec:58:32:44:e7:f4:81:f7:a0:15:0b:
eb:25:9d:03:40:94:2f:30:9d:f3:e4:fa:89:0c:85:
1e:48:e8:dd:8b:fb:bb:e8:85:f3:66:87:95:cc:b2:
1d:7a:ee:24:77:d8:15:9c:35:2c:18:19:0e:02:e2:
f1:dc:8e:94:31:db:e4:52:75:fc:db:dc:03:88:01:
7a:7e:7f:c0:ed:10:8b:c7:62:65:13:12:84:af:f2:
e6:65:c2:f6:3f:2a:0b:ca:d2:a1:bb:f4:4c:1b:48:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:56:33:A4:CC:C0:07:31:9B:FD:D6:08:6C:88:DA:73:73:B0:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2B2C0C07F6A11F1A6C7F5A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.158.0/23
156.249.161.0/24
156.249.163.0/24
156.249.168.0/23
156.249.174.0/24
156.249.181.0-156.249.182.255
156.249.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e0:c1:11:96:b5:b2:d6:d4:7a:9c:72:0c:cf:2e:60:2c:ab:
07:0f:fe:d8:3c:3a:99:29:a9:12:86:82:a8:73:e0:76:e4:77:
ca:1d:77:41:58:77:66:73:2d:75:65:08:30:6e:0c:8b:23:49:
e8:24:5b:fe:da:2e:67:9e:e6:42:62:ee:bc:c2:fe:9f:08:eb:
1c:e6:81:45:df:19:7f:24:45:c0:d1:d8:f8:bd:d9:78:3a:88:
a9:66:c0:51:e8:10:9f:84:17:e3:34:b3:85:b9:be:cb:a6:de:
89:b7:50:51:03:f1:05:95:8d:46:3b:48:66:21:85:41:ef:c4:
0c:66:4c:bd:9d:fe:01:30:ad:60:70:2e:bc:49:fe:ea:db:a0:
4d:7b:9b:78:0b:23:d1:33:2f:30:b7:65:41:9c:93:9e:89:b9:
b5:80:b4:2c:ec:11:61:17:20:f0:e9:65:70:a4:8c:5f:90:fc:
8d:7a:6e:f4:80:fd:18:49:5d:34:9c:66:91:67:6c:42:75:04:
34:af:41:25:3b:89:32:4a:16:ea:09:c4:38:ae:6a:34:13:f4:
2c:08:cc:16:4f:63:1f:63:38:69:11:65:2a:57:de:0e:dc:38:
36:3c:f0:fb:b0:bb:22:e9:03:48:39:46:37:d2:22:1c:b2:78:
35:24:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:04 2026 by rpki-client