Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220176057B411F1B65C9CBBCE1D38B0.roa
File: D220176057B411F1B65C9CBBCE1D38B0.roa (raw, json)
Hash identifier: t5ezP6B4NQbzD7xhmtliThsUIn1CVNDmwpXEkyEmmts=
Subject key identifier: 98:CA:53:D1:9F:E6:6E:48:5F:F3:B1:C7:81:67:2E:EE:B9:14:12:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B93A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220176057B411F1B65C9CBBCE1D38B0.roa
Signing time: Sun 24 May 2026 21:09:16 +0000
ROA not before: Sun 24 May 2026 21:09:09 +0000
ROA not after: Tue 30 Jun 2026 21:09:09 +0000
asID: 9304
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.245.160.0/24 maxlen: 24
156.245.168.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112954 (0x1b93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 21:09:09 2026 GMT
Not After : Jun 30 21:09:09 2026 GMT
Subject: CN=6a1368fc-1460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:12:83:96:c5:e6:1a:5a:4a:8f:39:26:d2:
0b:ae:0b:b1:77:0d:de:78:69:84:00:92:70:04:49:
31:a5:d5:4c:50:a6:c1:f8:25:87:2d:4d:4b:3c:12:
80:87:a5:96:bd:90:6d:c7:b4:cf:3b:dd:6d:63:12:
99:bf:2b:54:e0:3d:2b:e8:ac:f7:41:b1:bf:6f:92:
97:cc:82:64:68:63:08:20:5a:59:02:78:4f:2d:4a:
b9:04:58:75:3a:40:ad:b1:93:b5:db:f1:ed:e4:e2:
9c:91:c5:e8:75:7f:35:df:71:1c:80:44:e6:5b:77:
0b:d1:d0:a8:b1:c1:f2:10:c0:8c:78:28:66:5f:c1:
36:80:9f:99:01:45:08:3b:3d:72:f7:2e:4a:04:56:
0c:de:eb:d7:59:09:05:c2:d0:85:f5:7d:06:e5:37:
99:b1:fe:6e:de:85:e6:0c:25:66:9a:21:86:f8:e1:
0a:4d:e5:dc:9d:05:bb:7e:d3:6e:3c:e9:8e:67:62:
e8:9d:a4:67:9c:5b:59:cc:de:d8:2e:d0:ab:ce:db:
99:42:f6:ef:2b:96:96:47:77:ab:dc:65:c9:b3:cf:
5d:09:3c:a5:ab:ac:be:7c:b3:8b:cc:9b:ae:3d:75:
00:c0:47:86:bc:5b:cf:31:01:d5:47:0a:da:22:68:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:53:D1:9F:E6:6E:48:5F:F3:B1:C7:81:67:2E:EE:B9:14:12:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D220176057B411F1B65C9CBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.245.160.0/24
156.245.168.0/24
156.249.162.0/24
156.249.166.0/24
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
Signature Algorithm: sha256WithRSAEncryption
28:23:a5:63:11:1e:0e:28:00:ab:fd:07:36:e8:03:a4:d7:de:
7c:91:e9:04:38:81:3e:12:ce:39:66:28:0d:70:c9:2e:e9:ab:
ae:c9:59:af:01:f1:ea:d2:4c:b5:e5:6d:ba:a8:28:84:2c:0c:
1c:18:44:61:0c:bd:4f:40:43:da:4a:f0:35:af:ca:97:78:cc:
c0:23:43:26:01:4d:db:4f:49:7a:60:36:e0:97:6b:df:23:93:
c9:31:8f:02:05:4e:36:f0:ba:f6:07:d8:66:b9:db:b0:11:b3:
40:c8:05:73:8f:67:05:d3:df:6a:d6:9c:28:4e:84:13:32:ef:
cc:3b:e4:23:86:b7:ba:26:cf:08:c0:3a:23:37:3b:0a:77:73:
20:14:37:d9:17:10:fe:04:67:f2:64:d4:15:fa:98:32:62:02:
cd:de:26:bb:2b:05:9d:c0:e6:1d:bb:35:18:c1:90:0f:f1:a4:
5e:c9:52:13:f9:4e:5c:92:0f:48:bc:52:c8:3d:0b:ab:f5:fd:
f4:d9:b1:65:ac:7d:90:1e:49:87:db:27:eb:29:ac:7c:03:5f:
c2:30:f3:77:07:53:0e:a6:ea:81:03:7b:25:33:bf:58:4b:aa:
be:b7:9a:f0:06:f9:78:51:87:3f:68:29:5f:b5:05:f8:e6:fc:
62:0f:29:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:09 2026 by rpki-client