Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2786EE4550B11F1A676820BCF1D38B0.roa
File: C2786EE4550B11F1A676820BCF1D38B0.roa (raw, json)
Hash identifier: O+gbW6e8cPPmgfgQlDVssG3NsMZ3oyYqbNkNKkim7VE=
Subject key identifier: 3F:F6:A9:9A:9F:15:E5:C7:08:5C:87:52:CF:95:12:AE:BE:CA:7F:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2786EE4550B11F1A676820BCF1D38B0.roa
Signing time: Thu 21 May 2026 11:54:02 +0000
ROA not before: Thu 21 May 2026 11:53:57 +0000
ROA not after: Wed 19 Aug 2026 11:53:57 +0000
asID: 400619
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112354 (0x1b6e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 11:53:57 2026 GMT
Not After : Aug 19 11:53:57 2026 GMT
Subject: CN=6a0ef25a-266d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6f:98:b9:0c:d3:86:cb:e1:f9:0c:36:15:9b:
4b:e8:5b:aa:18:2a:2e:d8:b7:f1:20:68:ff:35:a8:
cf:67:e1:3c:90:f6:47:0b:b9:62:e3:fa:75:67:da:
e1:c4:75:a2:57:31:d7:96:e8:24:4c:a3:fd:d6:15:
5b:d9:62:80:3a:c9:13:17:4a:8c:0d:4b:df:e4:30:
f4:b3:69:f1:10:22:62:d9:94:99:58:df:4a:b5:89:
f2:63:98:48:9c:de:af:71:97:8f:90:9d:58:e7:13:
c4:0b:d9:5f:5b:48:04:f7:4a:0a:f6:c6:0e:56:e2:
50:c8:29:6b:d8:cf:aa:6c:c5:be:7b:0f:48:96:97:
0e:f5:2e:c2:a7:4b:a8:06:4f:57:a4:21:43:1b:57:
50:48:9c:4b:ee:54:53:46:fc:19:b0:81:c7:ca:35:
4c:7b:9e:6c:be:e6:32:18:29:2f:b1:cf:73:3e:73:
e3:ce:8f:a6:7b:aa:b7:90:d9:9f:18:6e:6f:4b:58:
63:34:e2:52:f0:58:34:12:0e:9f:c6:f1:c9:72:02:
9b:3e:ff:ab:6d:af:49:61:0d:44:e3:bf:0c:9b:6c:
1d:a5:2a:22:12:89:24:f2:3c:80:86:8f:fc:60:68:
86:8a:83:66:51:62:60:ed:8e:29:8d:7d:bc:fe:b0:
6a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:A9:9A:9F:15:E5:C7:08:5C:87:52:CF:95:12:AE:BE:CA:7F:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2786EE4550B11F1A676820BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:b6:7b:25:94:43:68:db:89:08:39:aa:64:78:37:ca:11:fd:
15:f1:20:91:24:34:e8:f6:7e:4b:be:fe:f9:eb:d3:92:92:06:
bf:1b:cd:5d:a6:06:c3:52:ba:e0:b0:f0:db:37:29:cd:35:8d:
24:f9:2d:a0:6d:d0:7d:be:ff:82:8b:49:fc:9e:d3:ff:99:e8:
45:87:98:45:f0:3f:d8:a7:85:69:3d:7a:b4:ae:16:26:19:40:
93:a9:1e:65:03:80:94:28:e5:2a:d8:0a:1f:84:cd:bb:67:84:
d1:fe:51:1d:47:5e:c8:33:73:79:5c:71:26:63:cd:41:14:17:
19:13:a4:15:29:2b:30:69:d8:ed:3a:22:92:38:85:63:26:20:
2c:39:94:6e:94:5e:a5:87:08:50:0a:50:cf:45:28:18:53:ce:
cf:d6:55:06:e1:75:97:bf:2e:ba:a4:b3:07:13:cc:f4:35:52:
03:26:12:34:f3:65:d3:bf:aa:29:df:69:b3:58:5d:cf:1a:90:
a6:cc:22:ca:0b:ae:b2:9c:01:b4:49:2f:93:b3:a7:61:cc:4b:
a8:91:ec:10:a1:de:cc:e0:fc:97:56:50:b6:7a:09:7e:76:ff:
9c:7d:f5:35:0f:15:91:8d:e1:bd:d4:c2:98:d3:11:bf:7b:5e:
3e:05:fb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:15 2026 by rpki-client