Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A37FE67C3B11F184D069CDCE1D38B0.roa
File: B4A37FE67C3B11F184D069CDCE1D38B0.roa (raw, json)
Hash identifier: cSpa8ycyFOvn4gYUIoUHtBnrzslG+4hNhHI0h0H326g=
Subject key identifier: F9:75:80:7C:19:65:7E:D5:A2:20:98:E1:35:DE:AC:E5:D8:9A:5C:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C440
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A37FE67C3B11F184D069CDCE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:45:30 +0000
ROA not before: Fri 10 Jul 2026 08:45:25 +0000
ROA not after: Tue 10 Jul 2029 08:45:25 +0000
asID: 17561
IP address blocks: 156.251.161.0/24 maxlen: 24
156.251.162.0/24 maxlen: 24
156.251.163.0/24 maxlen: 24
156.251.164.0/24 maxlen: 24
156.251.165.0/24 maxlen: 24
156.251.166.0/24 maxlen: 24
156.251.167.0/24 maxlen: 24
156.251.168.0/24 maxlen: 24
156.251.169.0/24 maxlen: 24
156.251.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115776 (0x1c440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:45:25 2026 GMT
Not After : Jul 10 08:45:25 2029 GMT
Subject: CN=6a50b12a-5da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:80:c6:22:2c:43:7a:ba:b8:3b:67:1a:41:b3:
2c:5b:c7:ed:fa:aa:45:e7:6e:9c:64:8c:1a:14:68:
ca:d0:81:d9:5b:e5:d6:87:5c:90:ad:2a:65:dc:2b:
fb:be:74:85:4d:6c:73:ac:29:87:be:df:55:56:67:
18:96:d1:26:00:cf:cd:92:93:9e:6d:53:15:35:04:
c7:8f:c7:99:d1:76:f1:68:26:20:71:be:6d:66:8b:
db:88:11:8d:ba:a8:66:60:87:04:69:88:b0:75:59:
a7:c6:dc:60:f1:00:52:4e:8b:e3:c8:8f:98:18:ad:
02:37:2a:b2:68:6e:f5:b8:85:21:6d:4c:cf:49:d7:
8b:97:68:f3:39:5c:b3:49:5e:b1:fc:8a:09:6e:a4:
81:e4:8b:ae:22:66:5d:95:5b:a9:24:6a:9c:b3:7d:
70:31:a9:68:28:48:6f:2a:48:50:55:40:67:a7:dd:
eb:f8:e1:39:f3:4f:6c:dc:53:14:5a:8d:a9:82:cc:
5b:fe:92:6a:21:6b:e8:cb:02:7e:08:ed:2f:94:fa:
0c:63:da:51:16:46:48:5a:51:ff:96:21:73:07:e9:
7e:da:34:e3:a7:5a:0b:80:f9:ff:bd:35:e4:f9:13:
0c:f0:c5:24:54:23:24:58:04:dd:4a:8f:48:72:e2:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:75:80:7C:19:65:7E:D5:A2:20:98:E1:35:DE:AC:E5:D8:9A:5C:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4A37FE67C3B11F184D069CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.161.0-156.251.170.255
Signature Algorithm: sha256WithRSAEncryption
b8:4d:dc:66:db:99:5e:d8:e9:e0:96:11:78:d7:84:b8:1c:6c:
05:f1:d7:79:34:65:37:0c:a3:be:ab:ee:8d:6e:ef:d6:cf:74:
36:a2:66:f6:a2:4b:2f:8a:86:f0:6b:2f:32:f2:76:0b:77:44:
88:89:be:fe:3b:cf:0a:16:82:7c:51:71:9f:bd:9a:61:87:51:
b7:d9:3a:da:64:95:aa:5b:f7:6a:c8:b9:d9:96:91:25:16:b1:
75:b4:1f:5e:cd:df:b3:f0:18:26:5c:f5:a3:53:b0:b5:0a:3e:
74:9e:3a:d4:2d:15:00:fe:0a:fd:41:d5:6a:15:ab:83:23:bc:
06:83:c6:c0:f5:4e:da:a1:0b:00:37:90:1e:7e:bb:22:e5:cc:
bc:b9:92:15:29:5e:6f:a9:c4:84:e5:7d:6a:7f:43:dc:91:43:
28:23:98:66:e7:54:92:76:49:7a:09:96:76:4d:11:78:bb:e5:
2f:4b:df:d5:e7:f8:2a:b7:63:61:de:f3:8b:b4:7d:08:c7:c0:
77:49:92:35:c1:98:ed:07:f5:3c:d6:6a:d1:72:93:6b:38:c3:
72:98:05:c9:a7:79:5f:f7:b1:b1:37:4c:58:26:66:6f:b6:63:
25:5a:63:cb:61:eb:f9:7c:f0:d2:96:33:33:ff:cd:e8:85:f5:
83:dd:20:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:05 2026 by rpki-client