Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5AC0D4A760A11F1AE4350EFCE1D38B0.roa
File: B5AC0D4A760A11F1AE4350EFCE1D38B0.roa (raw, json)
Hash identifier: 3jKAf6YrEHXjNaUevnErtuOeRJSXJEG6Ms/pn91souQ=
Subject key identifier: 9A:36:1F:86:B8:1B:E6:E1:5C:78:32:1D:84:EF:BF:9D:FB:32:67:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C26A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5AC0D4A760A11F1AE4350EFCE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:39:40 +0000
ROA not before: Thu 02 Jul 2026 11:39:35 +0000
ROA not after: Sat 25 Jul 2026 11:39:35 +0000
asID: 401783
IP address blocks: 156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115306 (0x1c26a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 11:39:35 2026 GMT
Not After : Jul 25 11:39:35 2026 GMT
Subject: CN=6a464dfc-51aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:db:38:84:37:10:33:ed:69:ac:dc:74:9b:24:
6e:04:bb:5c:a0:78:52:e2:04:d6:60:b7:c8:43:f2:
51:34:5b:35:4d:19:58:3b:bc:95:a0:f1:1a:72:d4:
0a:d4:9b:2f:bf:22:10:6c:97:91:6e:bb:80:f3:9a:
d4:ba:3f:39:b2:8c:5f:77:73:c5:5e:e7:0d:ea:fa:
1a:15:ef:87:aa:64:8a:e4:ad:65:81:0b:b3:d2:93:
61:63:7b:2b:fe:f2:bb:50:52:54:d1:00:af:a8:26:
df:68:9d:ab:a2:68:ce:29:55:27:49:e9:50:77:b9:
6b:07:53:fd:47:e6:46:c9:a2:d9:14:b5:13:d0:0d:
72:e9:dc:c8:14:d5:b2:6c:ac:4f:0e:f6:a8:c6:12:
ee:0b:94:96:93:9d:fb:11:40:5f:3a:fb:89:0a:1d:
36:e6:20:2c:07:96:26:1c:84:ab:e2:b8:72:0d:51:
ba:ad:a8:da:e6:b5:45:68:07:cc:3b:b5:ed:2b:72:
9b:b0:ae:12:9b:c5:dc:a1:c4:af:4b:ce:ca:d4:9d:
b1:4d:75:f5:ff:a6:77:ea:98:c0:e7:b4:8b:6d:f1:
13:57:fb:62:c5:97:2a:6e:b2:69:f6:7c:0d:36:b6:
fa:00:47:b6:92:b4:e3:e7:55:73:93:09:73:ae:f9:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:1F:86:B8:1B:E6:E1:5C:78:32:1D:84:EF:BF:9D:FB:32:67:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5AC0D4A760A11F1AE4350EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.166.0/23
156.249.170.0/24
156.249.183.0/24
156.249.185.0/24
156.249.187.0/24
156.249.190.0/23
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c7:96:41:ed:9c:54:1f:91:9d:2c:34:0d:77:36:9e:b5:98:
07:74:8a:93:b6:6c:0f:50:66:4d:e8:b1:0b:dd:9f:05:63:f6:
06:8d:79:cb:f2:ee:62:26:7e:8c:e7:47:8a:55:6e:99:e9:f0:
c7:6a:ee:f8:4b:ca:41:b3:cf:23:56:aa:e1:9c:52:a3:96:45:
7c:6d:2e:6e:9d:33:d4:0a:62:09:12:2c:35:38:86:f3:9a:bc:
22:6d:5f:1d:39:68:f0:41:1c:5b:43:7c:9d:cf:3b:5c:6f:d8:
ad:67:0f:aa:1c:8c:49:31:df:0e:41:27:a9:02:7b:76:21:88:
be:e9:30:c2:ad:7b:2c:b8:78:bf:91:22:06:57:69:7e:c1:2a:
3c:d0:a1:36:d0:3c:bc:fa:8f:0c:06:fa:76:6e:06:87:93:f1:
7b:7d:88:d9:fc:4f:06:ac:78:56:bc:fc:97:03:76:ad:7c:4f:
fb:cb:e9:64:87:fb:2d:27:10:3d:93:1f:0c:04:41:27:15:e8:
43:da:ef:db:8e:9c:9e:8e:01:6e:ce:aa:e8:2d:33:0f:72:ce:
3c:26:fc:15:13:e0:6e:10:2a:d4:13:4c:f0:4f:69:4b:75:66:
cc:04:a0:68:ea:a2:f8:84:45:2e:1f:98:b1:4d:7e:b0:20:86:
21:35:e7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:52 2026 by rpki-client