Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45F8F76700811F1B26DF3DBCE1D38B0.roa
File: D45F8F76700811F1B26DF3DBCE1D38B0.roa (raw, json)
Hash identifier: owaN5SVKWBOFUzhWUJAbjjs3s2qpCWfdQrAzFqBNPTU=
Subject key identifier: 86:52:C8:FA:47:7D:61:EE:98:20:70:48:C8:C6:F1:AB:0A:65:1F:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C051
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45F8F76700811F1B26DF3DBCE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:11:05 +0000
ROA not before: Wed 24 Jun 2026 20:10:58 +0000
ROA not after: Sat 01 Aug 2026 20:10:58 +0000
asID: 11427
IP address blocks: 156.229.228.0/22 maxlen: 24
156.233.12.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.233.36.0/22 maxlen: 24
156.233.76.0/22 maxlen: 24
156.233.84.0/22 maxlen: 24
156.233.112.0/22 maxlen: 24
156.233.196.0/22 maxlen: 24
156.233.200.0/22 maxlen: 24
156.238.172.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114769 (0x1c051)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 20:10:58 2026 GMT
Not After : Aug 1 20:10:58 2026 GMT
Subject: CN=6a3c39d9-102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:11:f3:e5:7a:69:b1:6e:fe:c6:3a:2a:67:35:
f7:a5:03:e8:2c:1a:64:a1:c0:15:79:46:29:72:57:
ce:4e:55:d3:69:75:16:98:b7:23:a1:d6:43:a3:b9:
37:f4:9e:00:fd:76:b6:be:ab:8a:f4:7c:8e:4f:62:
d1:6d:d9:0b:2a:b6:69:89:7c:18:f5:a3:d2:7e:58:
52:3e:86:86:a8:9e:1b:70:46:fe:1b:ae:de:58:94:
e5:a9:3a:c1:39:32:24:13:e7:7f:e0:2a:95:04:15:
60:2d:72:c0:d8:1d:44:8c:a7:ef:84:1d:f6:e8:51:
06:01:9b:18:12:88:53:00:7f:67:6f:e8:69:06:88:
ec:2e:18:af:4b:3c:ea:33:fc:23:e4:1f:2e:b3:3a:
ea:ec:f8:73:0d:d1:f5:a4:04:f8:32:f2:0e:e2:73:
3c:70:02:4e:81:cb:e4:3f:fd:66:bc:27:d4:ef:0a:
87:2c:a4:7b:d3:f5:4e:7c:34:77:2e:bc:d2:94:7d:
14:69:ec:5d:65:5f:17:cc:06:d8:d9:ff:7d:a5:c7:
8d:e0:13:d7:80:9c:65:c0:42:5c:0d:97:bd:0d:57:
b7:1b:99:05:36:e7:7c:54:f6:e4:c2:b6:38:f5:99:
7b:63:df:11:02:b6:22:44:4c:8f:e8:75:2a:7f:f9:
45:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:52:C8:FA:47:7D:61:EE:98:20:70:48:C8:C6:F1:AB:0A:65:1F:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D45F8F76700811F1B26DF3DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/22
156.233.12.0/22
156.233.24.0/22
156.233.36.0/22
156.233.76.0/22
156.233.84.0/22
156.233.112.0/22
156.233.196.0-156.233.203.255
156.238.172.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
156.244.192.0/21
156.244.216.0/21
Signature Algorithm: sha256WithRSAEncryption
84:a5:f4:79:ef:eb:a6:92:ea:9f:fe:d2:fa:cb:29:70:8e:aa:
33:3d:7f:e1:e0:de:79:45:3e:69:71:58:e0:75:7f:04:2e:da:
19:27:c4:31:99:2e:2f:d1:bc:46:9b:7f:08:44:25:22:3c:94:
1c:b4:f4:3d:f1:82:f5:87:7e:e8:26:4e:3d:ca:8a:b6:0e:a9:
8d:ec:0b:63:5e:8f:e3:3b:da:d9:69:7f:66:2f:12:9d:29:97:
e1:99:ce:0e:c0:26:3f:d9:4c:b8:93:cf:39:e7:c7:ba:e8:2d:
1a:cd:0b:e0:3c:4a:02:0b:c7:43:22:ad:5a:20:74:a8:e7:21:
55:d0:e5:7f:b9:13:96:9c:d4:20:03:fe:46:58:a4:ae:9d:7d:
1e:c8:62:8d:e2:4d:63:76:99:07:e8:d6:57:5d:e0:e2:b3:8a:
64:5b:52:a7:4c:16:76:96:54:7f:90:c3:d8:1f:80:61:f9:a2:
0c:a4:f0:09:78:28:26:ff:e6:75:ba:7f:ea:4b:47:7d:9b:01:
81:17:f5:36:66:4b:c8:61:ae:18:fc:b2:44:06:05:2d:37:b0:
c0:3b:50:5e:f1:56:14:82:e6:dc:a8:11:4e:d8:75:f0:f8:e7:
a1:ad:6f:79:b5:99:55:70:de:86:ca:75:88:c1:01:e4:2a:32:
d3:dd:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:35 2026 by rpki-client