Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B71496DC7E0E11F1B378B1DECE1D38B0.roa
File: B71496DC7E0E11F1B378B1DECE1D38B0.roa (raw, json)
Hash identifier: Mj8IsfAxx/Ep04WueU4H/w9UILeriTsqPGfpifKLOOI=
Subject key identifier: 49:34:26:98:00:62:B6:01:52:AD:EF:B7:E2:49:E5:35:F8:CD:07:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B71496DC7E0E11F1B378B1DECE1D38B0.roa
Signing time: Sun 12 Jul 2026 16:28:30 +0000
ROA not before: Sun 12 Jul 2026 16:28:24 +0000
ROA not after: Tue 10 Jul 2029 16:28:24 +0000
asID: 17561
IP address blocks: 156.251.131.0/24 maxlen: 24
156.251.132.0/24 maxlen: 24
156.251.133.0/24 maxlen: 24
156.251.134.0/24 maxlen: 24
156.251.135.0/24 maxlen: 24
156.251.136.0/24 maxlen: 24
156.251.137.0/24 maxlen: 24
156.251.138.0/24 maxlen: 24
156.251.139.0/24 maxlen: 24
156.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115898 (0x1c4ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:28:24 2026 GMT
Not After : Jul 10 16:28:24 2029 GMT
Subject: CN=6a53c0ad-12d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:02:56:0e:b5:98:cc:d2:dd:31:49:d8:72:
80:00:de:c8:8d:9b:e3:a1:48:13:1b:48:be:be:ba:
64:e8:9e:2f:57:77:8d:17:5b:43:a9:ab:1f:30:2a:
ec:e6:1a:8b:f3:25:85:66:04:48:d3:e1:24:e0:54:
1f:ed:33:fb:c9:ff:5b:eb:e1:c6:18:a6:55:b8:47:
9c:5b:1c:1b:97:10:22:29:60:e0:15:2f:3e:17:21:
95:94:dd:17:72:c8:2f:d3:4e:2c:7d:43:ad:5f:72:
eb:b0:08:a9:8a:f8:2e:b5:ff:14:24:f4:82:bf:26:
01:28:75:84:7a:c6:fc:26:2c:35:f1:65:16:12:c4:
eb:9e:05:80:ba:e4:34:10:9a:11:17:17:b9:78:cb:
1d:fa:ab:86:5b:88:93:1c:93:2a:94:64:36:6f:44:
33:9e:a3:2c:96:ad:05:a8:57:32:23:39:a8:01:f7:
a3:70:07:d2:af:0a:07:70:b4:70:61:3d:1d:d5:6e:
84:13:ff:c3:59:09:91:1e:9d:d1:e6:46:c3:a9:07:
c7:4f:c1:ae:80:a1:c7:7d:8a:33:0c:94:50:e0:5b:
ce:0f:d2:cc:b3:18:46:66:4c:8c:7d:90:71:64:56:
3a:8e:cf:b2:10:72:f0:55:d5:7b:4f:64:47:f8:18:
ac:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:34:26:98:00:62:B6:01:52:AD:EF:B7:E2:49:E5:35:F8:CD:07:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B71496DC7E0E11F1B378B1DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.131.0-156.251.140.255
Signature Algorithm: sha256WithRSAEncryption
5d:8c:14:b3:07:5c:9a:80:20:09:ce:e2:b6:55:ab:06:25:c0:
35:c9:3a:4e:b7:62:61:8f:8d:d3:f7:cc:bd:a8:a7:5a:70:d8:
fd:ed:a6:c2:10:ba:52:e8:d5:8c:33:d4:05:b3:51:3a:26:87:
ed:48:29:56:b3:c3:54:51:ba:9a:bd:65:2b:26:75:75:7a:2b:
00:e6:01:8e:db:a3:b6:2e:a7:86:07:bf:02:5c:1d:83:22:47:
e1:0c:b2:0b:4e:a3:e2:d9:fc:a7:07:fa:88:2c:d8:82:90:af:
cd:ca:d6:81:a1:2c:dc:7e:52:a7:8e:c4:fb:95:e6:58:16:68:
93:52:83:be:02:59:01:70:39:77:5b:a7:db:e7:fe:36:a0:23:
bc:bf:c5:d6:41:38:25:8d:fc:f8:66:30:43:3e:21:aa:ab:74:
9e:de:ff:19:0e:40:38:f4:a1:d2:9a:26:0f:b5:8a:ee:0e:a1:
b7:84:4d:8c:fc:44:ef:49:9a:70:dc:97:07:ae:4b:e5:b5:78:
93:43:12:ab:cc:0b:da:6b:0e:2a:fd:e7:3f:fc:a2:3e:a9:fa:
47:c7:90:20:29:76:83:fc:3c:1b:81:52:c5:cd:ef:93:dc:c7:
25:42:d2:73:d8:d7:a5:88:0b:83:8b:ce:0e:0e:ab:76:20:7b:
20:3f:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client