Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C078F31458D711F18A49C2B3CE1D38B0.roa
File: C078F31458D711F18A49C2B3CE1D38B0.roa (raw, json)
Hash identifier: Qdw/xYGgSuuUb/xjMVSSFrStLPT8GFEJcWLVBGBp+tI=
Subject key identifier: 15:EA:FA:FC:83:E6:D1:C2:6F:24:EB:6B:DD:9E:7D:41:67:12:DA:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C078F31458D711F18A49C2B3CE1D38B0.roa
Signing time: Tue 26 May 2026 07:51:52 +0000
ROA not before: Tue 26 May 2026 07:51:45 +0000
ROA not after: Sun 28 Jun 2026 07:51:45 +0000
asID: 44559
IP address blocks: 156.246.179.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.196.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113081 (0x1b9b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 07:51:45 2026 GMT
Not After : Jun 28 07:51:45 2026 GMT
Subject: CN=6a155117-659f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:3b:9d:5a:32:d7:f1:72:e1:c4:b6:d1:71:
48:f9:d5:33:9b:e6:bf:a0:be:fb:32:30:a7:51:6d:
83:fb:4b:cb:2e:72:aa:39:e4:ab:6a:8b:57:1f:35:
89:d2:93:75:e2:52:8d:14:0b:81:30:d5:e0:7a:7f:
86:2f:44:09:2b:ff:e2:47:91:3d:64:c8:5d:6d:17:
3b:e2:8e:02:ec:05:60:19:72:c7:f0:bd:a8:e0:51:
03:a9:ac:25:2c:0f:81:c7:7b:9d:1a:34:d5:0e:e2:
13:c1:d6:3e:60:7e:24:40:f9:e3:26:94:3d:d8:43:
64:34:7b:6a:d1:e5:7c:5f:5a:be:48:ca:a8:53:3a:
b3:31:32:19:0a:3a:5f:72:d6:a6:a4:57:61:db:d9:
f0:2b:08:77:f7:bf:18:96:27:c7:1a:a2:75:8a:86:
cf:0b:3c:60:b6:4e:22:7a:3e:96:e8:69:4d:40:02:
f3:c5:1b:1b:35:bb:6c:8d:8b:a0:1c:84:06:b5:64:
0e:c8:df:af:6e:e9:0b:6b:31:fc:7e:5a:8f:40:2c:
d2:bb:ce:29:2e:99:3c:82:4b:84:c7:c0:a9:14:70:
95:33:23:79:2c:95:28:91:34:68:ef:ea:fc:2f:fe:
30:cc:54:e8:9a:38:c6:91:53:65:0d:90:4e:a3:66:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:FA:FC:83:E6:D1:C2:6F:24:EB:6B:DD:9E:7D:41:67:12:DA:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C078F31458D711F18A49C2B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.179.0-156.246.198.255
Signature Algorithm: sha256WithRSAEncryption
2c:81:cc:06:cb:83:59:70:72:e0:56:f8:19:70:e7:c8:87:d0:
df:a4:b7:3d:ae:16:5f:b1:18:e2:85:a6:6c:10:91:57:a6:de:
e2:bd:90:3e:89:58:bb:87:05:77:c8:fd:b8:c9:c9:9a:19:a1:
39:a7:6c:44:2f:a0:7b:e6:d9:d8:3e:32:0a:6a:a3:fd:49:a6:
58:2d:2f:2d:37:78:45:90:ef:65:ad:cb:6a:09:08:c1:4b:e9:
22:b2:00:21:e1:6b:15:1b:da:9c:0f:9f:85:8a:89:ee:83:81:
4c:1a:c7:59:f4:11:d7:cd:f7:e4:01:3f:47:ea:d8:8f:03:42:
f6:60:c9:52:56:99:10:d7:c0:21:dd:a1:27:75:c3:fe:d1:24:
5b:8d:0c:7e:6b:d7:fc:6d:cc:3b:00:17:66:96:96:99:87:e6:
91:66:52:e8:42:65:c1:b4:7d:3b:4a:3e:8f:7b:ce:50:2f:fc:
3f:09:aa:64:33:8b:4a:e2:c9:0d:80:6b:4a:43:cf:f7:5c:b8:
99:6a:8d:ad:af:f0:39:aa:40:a0:e2:88:86:ab:24:fc:5f:ee:
94:a9:89:9c:34:b3:8d:f0:af:45:15:d0:2f:50:da:7d:65:a6:
ff:70:f7:14:08:08:ae:2d:c7:34:28:03:e6:15:5a:ef:93:dc:
a1:19:28:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:49 2026 by rpki-client