Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0554B6C73E911F1A6C9A1F3CE1D38B0.roa
File: C0554B6C73E911F1A6C9A1F3CE1D38B0.roa (raw, json)
Hash identifier: u5JYuPp3fm+CGqb40bGozWvN06MxLO+m1QUlAdO6foE=
Subject key identifier: 35:F0:6A:44:EA:D9:1D:6B:6C:FC:82:A7:9D:25:32:F7:C6:91:99:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C19E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0554B6C73E911F1A6C9A1F3CE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:38:42 +0000
ROA not before: Mon 29 Jun 2026 18:38:37 +0000
ROA not after: Mon 31 Aug 2026 18:38:37 +0000
asID: 399077
IP address blocks: 156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
156.251.0.0/24 maxlen: 24
156.251.1.0/24 maxlen: 24
156.251.2.0/24 maxlen: 24
156.251.3.0/24 maxlen: 24
156.251.4.0/24 maxlen: 24
156.251.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115102 (0x1c19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:38:37 2026 GMT
Not After : Aug 31 18:38:37 2026 GMT
Subject: CN=6a42bbb2-f733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:a9:c3:77:4f:92:ee:a3:db:22:3e:a1:44:
f8:52:51:79:2b:73:e6:71:d3:12:8b:e1:57:98:ad:
68:e8:72:7a:26:d7:39:2d:6d:df:98:0f:ff:b9:19:
f0:af:a2:0c:c6:89:84:ce:a0:bf:23:ad:49:29:95:
57:b0:a1:eb:1d:69:4f:27:7b:28:0a:3c:f2:39:ee:
0a:30:0b:d7:ae:b2:3a:18:30:60:ef:be:db:f4:b7:
44:25:11:c2:b7:a2:d5:93:59:6f:d5:f5:14:f3:4f:
fb:25:8b:cc:56:06:3a:ca:0c:44:e6:45:c7:e6:fc:
73:8b:51:78:65:7d:cb:b5:d4:7b:1d:4d:99:91:fc:
26:ab:3e:70:40:4d:bb:8e:1f:14:c9:49:3e:af:67:
aa:28:56:45:cc:ac:b2:78:cf:63:1e:c4:19:0e:f3:
87:c1:f7:22:11:ca:ae:2c:8a:3c:59:d6:0a:9f:16:
93:ce:96:fa:81:34:4a:46:f1:9a:d2:e4:ca:03:00:
9c:cb:df:89:0c:9e:7b:99:ec:f1:3b:6e:82:88:3b:
28:52:1e:40:15:46:1e:35:20:f2:f5:54:09:92:58:
70:02:f6:bb:c7:00:07:90:01:d0:ed:16:cb:93:ef:
13:12:50:c5:b9:05:5b:5b:14:6e:fe:b7:6f:65:ba:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F0:6A:44:EA:D9:1D:6B:6C:FC:82:A7:9D:25:32:F7:C6:91:99:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0554B6C73E911F1A6C9A1F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.252.0/22
156.251.0.0-156.251.4.255
156.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b7:4e:09:e8:8f:91:62:f5:24:1f:32:0d:22:1e:f4:99:b3:
6c:4b:e9:b0:89:50:f8:95:30:6c:75:d1:a4:50:ee:18:80:34:
29:e4:ef:c3:c6:f7:38:e0:0c:ec:23:72:25:e0:e6:ad:cc:c6:
f7:c8:07:eb:8b:b2:97:df:a6:54:8b:d2:e4:ab:76:1f:49:f5:
6d:7c:39:41:9a:f3:34:98:02:a4:4a:3d:f3:0c:ca:d9:e6:44:
c1:89:7d:6b:01:6d:9b:71:71:e0:ba:eb:57:0e:c8:a9:ed:b1:
3b:08:4f:d6:b3:f1:bb:e5:97:07:aa:20:c8:8c:ff:8c:b0:79:
b7:2a:ba:85:74:16:83:56:5d:56:03:06:31:d3:e6:f4:32:3a:
e8:97:d5:e5:ec:63:91:b7:c2:32:42:b6:de:c9:f1:6a:3c:20:
1e:4d:5d:e3:ef:3f:34:48:10:8b:ab:4d:a8:cb:0b:03:5a:8b:
59:da:26:e2:b2:12:ae:bf:19:e6:f5:de:21:4d:83:2d:e3:db:
e1:30:8c:ba:40:66:17:64:b3:70:76:ed:4d:73:e3:15:ff:f6:
25:fb:a7:4c:b4:87:6b:ac:d9:77:4d:de:57:9a:f5:55:95:dc:
22:f5:3e:2a:9f:30:d0:6c:99:65:f1:21:90:47:82:12:ee:25:
21:db:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:40 2026 by rpki-client