Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C487BE667C3311F1836D261DCF1D38B0.roa
File: C487BE667C3311F1836D261DCF1D38B0.roa (raw, json)
Hash identifier: 8ZKE24kOjypSvo+kzitOj5ZJwGdu5Ym8IR58HzBMtc8=
Subject key identifier: 44:98:BE:2B:3A:DC:7A:26:EE:2A:A6:B1:E5:39:C6:D4:89:E3:E1:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C41C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C487BE667C3311F1836D261DCF1D38B0.roa
Signing time: Fri 10 Jul 2026 07:48:41 +0000
ROA not before: Fri 10 Jul 2026 07:48:36 +0000
ROA not after: Tue 10 Jul 2029 07:48:36 +0000
asID: 17561
IP address blocks: 156.227.16.0/24 maxlen: 24
156.227.17.0/24 maxlen: 24
156.227.18.0/24 maxlen: 24
156.227.19.0/24 maxlen: 24
156.229.8.0/24 maxlen: 24
156.229.9.0/24 maxlen: 24
156.229.10.0/24 maxlen: 24
156.229.11.0/24 maxlen: 24
156.229.12.0/24 maxlen: 24
156.229.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115740 (0x1c41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 07:48:36 2026 GMT
Not After : Jul 10 07:48:36 2029 GMT
Subject: CN=6a50a3d9-3f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:c4:9d:43:63:89:b7:b7:92:3e:ef:99:a4:
ae:ac:47:48:a6:e7:68:43:48:c2:7a:d0:0e:fe:a2:
10:05:41:36:cb:d7:49:68:8f:09:65:1b:ea:dc:32:
c7:a0:c6:cd:94:6e:a2:a7:5c:2a:10:c9:40:5a:01:
6a:84:bd:40:d1:9d:2b:b4:29:bf:ca:7e:4e:3b:76:
b1:c1:07:f2:7f:cd:19:91:b5:bb:fc:c3:19:12:a2:
4f:5a:51:7c:9e:93:84:7a:1e:96:ff:c7:33:ef:5d:
ae:44:b2:aa:f1:a1:be:8a:25:f2:62:2a:90:7d:9a:
df:6c:48:cc:33:6c:ab:d1:19:2e:fc:6b:c8:38:a3:
94:b6:36:7a:e1:87:03:b7:58:b0:d9:d1:33:06:79:
49:55:26:7a:79:d5:b2:9a:f0:05:0f:23:a1:a1:90:
43:6f:dd:87:43:2c:d9:af:8b:5a:85:f6:0f:f1:c8:
00:fe:8f:6c:39:22:1c:e8:fe:48:b3:32:c4:f8:23:
0e:e5:de:e0:65:83:f0:36:67:95:a7:9e:a1:c0:00:
55:41:41:ae:1d:6d:c2:d7:c9:1a:35:9c:50:91:2b:
77:9c:a0:3e:ad:52:96:c4:c3:17:54:6b:a7:4d:78:
6b:0a:e1:f9:46:5c:e8:ad:75:ed:7a:ba:62:55:53:
08:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:98:BE:2B:3A:DC:7A:26:EE:2A:A6:B1:E5:39:C6:D4:89:E3:E1:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C487BE667C3311F1836D261DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.16.0/22
156.229.8.0-156.229.13.255
Signature Algorithm: sha256WithRSAEncryption
3d:50:b3:55:7d:b3:d0:13:da:2d:b9:2b:1d:4f:78:60:96:32:
8b:16:a4:32:f6:0c:15:fa:50:51:9b:bc:db:1f:ff:2c:32:8f:
fa:a2:8e:6d:2a:81:e6:42:f9:83:95:82:ea:53:15:f4:01:f0:
3e:9d:54:86:4a:ec:77:ff:86:ec:d3:f3:c0:27:a0:76:db:e2:
82:66:e5:d0:ad:cc:1f:c7:0c:48:01:d2:83:de:86:ba:01:29:
53:d3:3f:44:8b:2e:f2:d5:90:1f:4c:d2:af:f7:1f:25:15:c3:
1a:05:6c:c1:b6:bd:d2:d5:78:e8:41:1b:6e:17:7c:29:64:d8:
8e:46:d0:c1:bb:88:7f:da:48:fd:d7:ba:70:1c:74:f3:51:71:
3c:c3:52:7e:c7:28:0e:60:b6:3b:c3:3c:ae:76:89:3e:e3:86:
e1:91:fe:27:d9:a8:49:27:bd:ab:75:00:72:bf:54:cf:d3:3c:
b2:c2:51:36:6a:70:de:c4:d1:d9:a4:af:c5:1a:b5:f3:bc:95:
ff:30:26:a3:35:53:8c:64:c9:78:8a:e1:a5:05:49:d7:6d:33:
77:98:5b:52:23:62:27:ab:42:71:b3:bf:c2:fb:ff:5b:db:a4:
3b:3d:62:5f:97:13:40:23:41:cf:6c:fa:cd:16:f3:94:38:e6:
a7:cd:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:56 2026 by rpki-client