Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7029B14700B11F19AE12AEECE1D38B0.roa
File: B7029B14700B11F19AE12AEECE1D38B0.roa (raw, json)
Hash identifier: mJNaDNqYWyF26q4iKU93NIGQzikeV+hrbQ95lxDR7jY=
Subject key identifier: 31:8E:80:F3:5D:4D:EA:FF:C4:70:B3:76:F1:91:D7:AF:02:7E:5A:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C057
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7029B14700B11F19AE12AEECE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:31:44 +0000
ROA not before: Wed 24 Jun 2026 20:31:40 +0000
ROA not after: Sun 02 Aug 2026 20:31:40 +0000
asID: 140869
IP address blocks: 156.225.80.0/24 maxlen: 24
156.225.81.0/24 maxlen: 24
156.225.82.0/24 maxlen: 24
156.225.83.0/24 maxlen: 24
156.225.84.0/24 maxlen: 24
156.225.85.0/24 maxlen: 24
156.225.86.0/24 maxlen: 24
156.225.87.0/24 maxlen: 24
156.225.88.0/24 maxlen: 24
156.225.89.0/24 maxlen: 24
156.225.90.0/24 maxlen: 24
156.225.91.0/24 maxlen: 24
156.225.92.0/24 maxlen: 24
156.225.93.0/24 maxlen: 24
156.225.94.0/24 maxlen: 24
156.225.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114775 (0x1c057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:31:40 2026 GMT
Not After : Aug 2 20:31:40 2026 GMT
Subject: CN=6a3c3eb0-c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:4e:9f:86:05:b5:9a:17:42:1a:2a:ec:ee:
35:5c:73:89:c8:5a:4d:18:61:37:15:44:f2:5e:9d:
39:2f:f7:7f:2d:82:b8:b1:2f:e2:6e:e5:0a:92:41:
d5:d7:6a:c9:6f:06:46:7c:6e:4e:df:02:33:29:31:
31:93:15:df:fe:92:55:59:1b:24:13:d7:c6:7d:30:
0b:f0:5f:4d:b2:a4:a2:a4:4b:4f:ec:cb:dd:b0:d5:
53:be:c8:98:e8:17:5a:52:93:e8:20:1d:84:31:20:
1d:a0:d2:e0:73:32:22:92:fd:73:03:c1:fd:74:2a:
20:65:4c:bc:0b:48:80:7d:a4:59:9c:93:62:ac:89:
f9:bd:9a:0d:d4:2b:89:63:44:db:f5:1c:cb:86:10:
9b:b5:80:e1:a4:0e:82:8b:d0:4c:5f:33:2d:17:25:
8e:31:5a:ac:14:38:e0:0a:0f:e4:e7:98:cc:06:46:
aa:0c:7b:d4:19:c8:86:5a:0c:9b:02:90:d9:cb:6e:
f8:64:38:37:f7:14:00:9b:ec:b0:ab:76:ec:77:c1:
89:66:2f:17:ff:ee:a2:ec:7e:d3:40:9f:6b:53:32:
59:12:c4:74:04:c9:f1:11:e2:58:e3:38:9b:c8:cf:
62:ab:22:aa:98:21:65:59:76:c7:9f:c8:6d:dd:aa:
3b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:80:F3:5D:4D:EA:FF:C4:70:B3:76:F1:91:D7:AF:02:7E:5A:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7029B14700B11F19AE12AEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:8c:e0:2a:93:0d:6c:04:02:49:25:70:98:15:88:5e:86:c0:
95:ad:25:4e:5c:79:dc:f7:7d:e1:91:01:f7:43:2c:ae:9a:35:
fb:23:20:f2:24:a2:5a:39:1b:12:b7:47:0e:a0:64:1e:9b:fd:
6d:80:85:fe:a2:d8:25:dc:d4:3a:23:db:12:cd:19:c0:06:82:
8f:10:ef:0f:d5:37:52:86:0f:64:ee:dd:f3:47:ec:49:ed:2e:
62:b8:f8:c2:b9:51:f8:43:5c:7d:ee:dd:6f:58:90:f6:b8:24:
16:7b:f8:20:8a:ba:e5:4d:c3:20:96:31:07:5b:c4:cb:f3:7c:
e4:ee:73:d9:43:db:21:8e:48:18:19:59:11:d6:37:1f:77:05:
32:61:8b:11:c6:98:f9:c7:dc:c4:da:ad:5d:46:fc:13:3f:e2:
37:14:92:85:f5:35:a3:53:80:94:b7:94:df:b8:85:96:d7:c4:
9c:bc:57:08:bf:ce:a9:fe:51:58:18:5d:a9:52:c5:19:b9:bd:
7e:ea:e1:05:3a:dc:9f:87:1a:74:b6:a9:d9:fb:18:7a:b2:b6:
4c:f0:3b:f5:c1:d6:d7:3d:67:11:2e:1d:a7:55:23:5f:4d:e7:
4d:5e:09:d8:3e:36:74:0e:b6:8d:55:0c:99:be:84:4e:62:73:
82:28:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:32 2026 by rpki-client