Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C285C5D3311F1A6268DA0CE1D38B0.roa
File: B72C285C5D3311F1A6268DA0CE1D38B0.roa (raw, json)
Hash identifier: xaFQKa5YsB2Tl3dKQrr0MFWPgMW88ngkSwMKcIWPl7c=
Subject key identifier: 7C:8A:E9:66:41:32:D3:30:72:9F:97:F9:B7:C8:C2:3F:10:AE:DD:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C285C5D3311F1A6268DA0CE1D38B0.roa
Signing time: Sun 31 May 2026 21:00:13 +0000
ROA not before: Sun 31 May 2026 21:00:08 +0000
ROA not after: Sun 07 Jun 2026 21:00:08 +0000
asID: 399077
IP address blocks: 156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
156.240.234.0/24 maxlen: 24
156.240.235.0/24 maxlen: 24
156.240.236.0/24 maxlen: 24
156.240.237.0/24 maxlen: 24
156.240.238.0/24 maxlen: 24
156.240.239.0/24 maxlen: 24
156.240.240.0/24 maxlen: 24
156.240.241.0/24 maxlen: 24
156.240.242.0/24 maxlen: 24
156.240.243.0/24 maxlen: 24
156.240.244.0/24 maxlen: 24
156.240.245.0/24 maxlen: 24
156.240.246.0/24 maxlen: 24
156.240.247.0/24 maxlen: 24
156.240.248.0/24 maxlen: 24
156.240.249.0/24 maxlen: 24
156.240.250.0/24 maxlen: 24
156.240.251.0/24 maxlen: 24
156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113420 (0x1bb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 21:00:08 2026 GMT
Not After : Jun 7 21:00:08 2026 GMT
Subject: CN=6a1ca15c-210a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:c0:b0:43:46:b8:09:6f:fd:72:8c:3a:ea:
80:22:f3:98:f2:bd:1e:72:72:e2:00:dd:16:2b:07:
9c:da:b7:21:7f:5c:0d:ad:19:7e:b8:8b:a1:5a:69:
8b:2f:fa:1b:27:c6:26:ad:b6:2d:3f:72:e0:de:72:
9f:f1:ba:65:7a:38:e6:01:f5:9b:68:5c:57:52:a2:
ed:37:21:e6:f3:f4:b0:95:0c:ec:fb:cb:7b:f4:a2:
03:e1:1b:6d:39:13:65:a3:11:5b:3f:4e:06:5b:17:
ca:2d:33:04:6e:7e:35:d1:44:74:7c:8a:c1:0b:80:
54:42:9d:49:ba:22:17:2a:08:56:09:27:1a:c0:46:
38:38:35:2d:e0:40:fd:d3:09:ad:e9:b9:a8:b9:81:
81:78:38:63:24:7b:3d:e3:dc:27:8c:de:59:a4:18:
62:b8:a5:5a:0b:ef:01:0f:dc:ae:25:97:f1:fb:2c:
70:df:35:70:a5:a4:de:05:bf:c8:d5:1b:41:11:2b:
74:8c:f1:b0:65:88:39:bb:8a:52:41:95:7b:e2:0b:
3e:51:b8:90:e8:47:67:bd:05:da:4c:8e:7a:87:f1:
32:48:d5:07:0a:54:2d:e0:f6:4f:4d:53:fc:c5:b3:
54:61:01:4e:18:9d:9e:51:53:47:21:45:6a:43:ba:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:E9:66:41:32:D3:30:72:9F:97:F9:B7:C8:C2:3F:10:AE:DD:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B72C285C5D3311F1A6268DA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.231.0-156.240.255.255
Signature Algorithm: sha256WithRSAEncryption
8c:bb:59:10:d1:c6:31:41:70:c5:f0:8c:90:a8:1b:11:06:24:
d3:74:51:a7:ac:cf:6b:e3:97:3c:13:47:08:3f:9d:b9:42:10:
9e:00:00:20:70:d8:ba:37:54:cb:4a:6b:d5:e4:dd:a6:18:59:
8e:b5:85:26:bb:73:44:05:c5:52:98:67:de:4d:16:98:9d:dc:
06:de:42:b4:9e:a8:bd:7a:6a:c5:83:8b:54:34:33:2b:f0:f1:
8b:fc:5f:09:40:ac:dd:8e:fb:f6:78:15:d1:5f:a2:92:95:84:
2e:7a:19:a8:6f:9e:ce:34:64:e8:d8:f9:0d:86:eb:49:c8:5c:
78:b9:7d:5e:90:7c:4a:56:fc:19:bb:92:02:d2:73:a5:a0:08:
b6:39:93:cb:2a:1e:8a:3f:1d:d6:0c:5d:7e:3d:01:d9:58:7b:
9b:e1:cd:c0:8b:62:70:da:ea:c3:8e:8e:7e:ff:19:ea:57:6e:
96:96:ea:53:c7:77:8c:c8:ba:2c:b8:0d:b8:ae:40:9d:26:63:
d1:51:f4:4b:6f:b4:30:ef:d3:99:e7:93:55:8a:bb:14:e3:bf:
55:e9:7c:96:38:fc:0b:63:a8:3b:e8:04:9c:54:ed:5b:27:e7:
37:a7:e3:02:74:a5:50:e8:26:3f:ff:76:86:fb:19:a8:9b:f9:
90:4f:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:13 2026 by rpki-client