Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A00D40551911F1BF570BDFCE1D38B0.roa
File: B5A00D40551911F1BF570BDFCE1D38B0.roa (raw, json)
Hash identifier: yndfxHCVU5QZHxRgci9D/Wu8+s0h0Y0HjO4l9X1cpLU=
Subject key identifier: 7D:E8:25:71:A4:B8:15:9C:8A:EF:BD:32:92:49:E9:77:31:F4:3E:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B70F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A00D40551911F1BF570BDFCE1D38B0.roa
Signing time: Thu 21 May 2026 13:33:54 +0000
ROA not before: Thu 21 May 2026 13:33:49 +0000
ROA not after: Fri 26 Jun 2026 13:33:49 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112399 (0x1b70f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 13:33:49 2026 GMT
Not After : Jun 26 13:33:49 2026 GMT
Subject: CN=6a0f09c2-bd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:f6:61:c8:d2:4a:1a:b7:df:9c:f2:05:65:
da:a3:1e:b3:5c:0c:e3:a9:0d:2a:61:11:6d:38:3e:
87:07:61:f3:21:44:e8:24:df:bf:5e:d9:58:45:99:
f2:2d:35:e1:27:e0:1b:15:a3:33:35:2c:e9:30:2f:
35:c2:2d:ef:7b:ba:21:af:b6:b9:48:03:70:59:61:
d4:9b:ef:a3:ff:e7:bf:87:c4:91:e6:e4:7d:6a:99:
1e:ff:2f:19:6a:78:40:f3:a4:35:6b:b6:e3:26:cd:
a0:1f:58:bd:ce:f5:47:d9:fb:1c:4d:54:59:68:f1:
5f:cc:1c:5e:b5:10:be:6c:06:30:0d:1a:6c:ab:89:
0c:21:71:bd:0e:46:12:00:bb:11:2a:55:d8:cb:bb:
9b:c8:2e:e5:aa:d5:1c:c5:88:68:82:47:1b:b9:2c:
5d:cf:fd:c9:17:d1:05:49:0a:c2:c4:b7:84:37:bb:
58:29:43:99:76:6e:a3:e4:ba:e1:9c:fa:2e:35:28:
d7:d3:fe:21:21:8e:41:78:9b:72:ed:c0:19:0d:d0:
69:61:37:db:a9:7b:62:a8:09:98:b3:2e:1a:cf:58:
d4:e5:6b:a4:49:2d:e2:4a:76:34:1b:36:e9:da:6d:
70:86:65:b4:91:a9:fc:74:d9:80:50:99:93:ac:a2:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E8:25:71:A4:B8:15:9C:8A:EF:BD:32:92:49:E9:77:31:F4:3E:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5A00D40551911F1BF570BDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.225.126.0/24
156.227.193.0/24
156.227.199.0/24
156.229.51.0/24
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
15:74:9a:c8:73:34:05:d7:7d:cd:1d:8d:57:9f:66:d2:d1:09:
ad:40:30:c4:bc:d0:50:b0:37:b0:af:d0:db:05:a5:bf:29:ad:
44:57:e7:f5:ba:90:31:ee:1d:47:55:23:96:8d:19:26:79:e3:
ee:79:6b:45:1b:ad:e1:fe:cb:29:2d:36:62:ae:b6:0c:6c:3f:
5c:81:18:fa:01:59:34:85:c3:85:95:2e:0b:bf:42:48:71:f6:
8a:48:fe:fe:90:14:58:b2:d3:7a:8f:36:2f:c0:43:1a:f6:75:
12:85:cd:89:82:d9:89:23:e6:8e:7c:3c:c1:47:d9:54:59:23:
a2:89:6a:d4:6e:98:6b:4f:13:28:39:1c:7b:5c:ad:54:31:09:
43:88:7b:d4:e1:6a:91:09:e9:5d:d6:a7:c8:f2:45:34:29:84:
05:95:b8:38:5c:b8:65:94:00:cd:21:65:1f:0e:b5:ca:38:7e:
29:0b:fc:37:d6:c2:56:8d:2c:e6:69:82:50:88:6e:31:d3:ab:
c3:1f:0e:be:b9:d1:a9:e0:77:21:b3:c9:a6:66:04:cf:ca:50:
99:a8:d8:05:0c:71:7c:77:de:d2:6f:8e:e3:57:fc:f5:3e:d4:
96:69:8c:3d:a1:98:dc:2c:8c:13:d8:25:96:05:15:a2:00:57:
80:3e:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client