Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D62434F0534E11F1827328F4CE1D38B0.roa
File: D62434F0534E11F1827328F4CE1D38B0.roa (raw, json)
Hash identifier: WzSad/ZdoKDRcaxzd4xLPqowLss86u4rcj6s2u4fpRE=
Subject key identifier: BB:DA:C6:A2:D7:46:B6:15:45:AF:03:F7:91:20:AF:11:12:E8:F2:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B594
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D62434F0534E11F1827328F4CE1D38B0.roa
Signing time: Tue 19 May 2026 06:49:13 +0000
ROA not before: Tue 19 May 2026 06:48:58 +0000
ROA not after: Wed 19 Aug 2026 06:48:58 +0000
asID: 400619
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112020 (0x1b594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 06:48:58 2026 GMT
Not After : Aug 19 06:48:58 2026 GMT
Subject: CN=6a0c07e9-9add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:5b:f7:c0:bf:b8:d8:2f:d4:f2:ec:7c:5c:
71:aa:65:1f:09:1b:93:ca:2f:d1:98:ed:a5:06:28:
a5:bb:db:28:5a:43:41:0d:7b:5a:a2:22:5d:e1:b0:
7b:43:42:e2:70:82:dd:a2:1c:4f:d5:4b:84:39:16:
f2:84:e5:0e:a9:ef:63:de:f1:69:1b:4d:ea:66:76:
67:90:f1:4f:3d:be:64:43:a6:e8:d0:e9:d2:1e:5f:
bd:cf:ef:aa:37:6b:56:cd:57:16:2b:02:70:b6:d2:
50:d6:fc:b0:36:ed:0a:d2:ae:50:3a:5a:37:87:3a:
51:a7:92:3d:63:ab:2f:ca:d5:89:36:ad:b0:85:9a:
43:3c:98:69:1b:77:89:76:f2:f6:01:46:a3:ac:31:
29:1d:45:9e:bb:45:99:09:3f:45:b0:57:ac:6b:6f:
49:e0:0e:f3:61:26:fc:2e:80:d0:ec:4a:e5:15:68:
c1:26:0d:dd:53:ff:15:92:b8:c5:d6:15:14:56:61:
f3:d7:d3:33:6b:9f:bf:f1:25:4b:c4:d0:f1:6e:58:
99:ea:fa:3c:d5:af:de:5b:46:fe:33:57:3c:9c:e5:
c3:9b:3c:a3:0c:2c:97:25:cd:c8:aa:c3:32:88:c7:
b7:d5:5d:16:25:fa:35:ad:bc:b1:c8:7d:c5:b1:14:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:C6:A2:D7:46:B6:15:45:AF:03:F7:91:20:AF:11:12:E8:F2:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D62434F0534E11F1827328F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:da:c3:c1:8b:b9:4a:d1:06:63:0c:00:4c:c1:63:96:d8:f6:
76:68:84:91:3e:32:b1:d0:a0:d0:27:93:38:6c:75:93:c1:f9:
2d:af:6a:4d:e7:0d:30:1c:eb:22:f4:5f:6d:74:a6:93:16:50:
9a:31:de:39:33:73:86:8a:90:ef:9c:37:fd:fc:78:e4:4c:0f:
67:70:0c:9d:c9:42:de:b5:80:27:ed:51:5e:60:48:e7:b2:dc:
ed:e2:97:4f:ef:45:e8:b2:6d:cc:3f:78:7b:93:7e:29:28:fb:
da:4b:aa:73:bd:ec:0f:20:b5:81:a7:4c:c0:b3:59:bb:be:5f:
09:ae:cb:b9:47:d0:85:9b:08:db:5c:e9:9b:a5:79:02:29:0b:
f5:cc:fc:93:77:8a:53:f3:d6:5a:90:69:a0:79:2d:19:ff:b1:
60:f9:ee:38:72:c8:31:2e:c6:60:e1:12:76:3f:c1:18:1d:ea:
3e:6c:b0:54:1d:06:b8:cc:c2:3f:34:e7:ea:1a:d4:e0:3b:41:
0a:d9:5c:02:77:6f:fa:a9:6b:6d:d1:63:ca:44:8f:e8:25:45:
55:f2:fe:55:28:b7:52:76:6a:f5:0b:bf:66:0d:61:d7:17:0c:
03:22:bc:d6:34:8f:8c:25:e6:9f:15:f1:59:ff:15:9e:f0:e4:
3f:0a:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:12 2026 by rpki-client