Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836E2D694A511F1989186B0CE1D38B0.roa
File: D836E2D694A511F1989186B0CE1D38B0.roa (raw, json)
Hash identifier: o3wh1P8XQFCZ0NQYT8cDzEX+c4139a8pReKrNI2ytgc=
Subject key identifier: 76:36:61:E4:CB:82:5C:31:B2:45:41:4F:BB:F5:C9:7D:D2:C0:E8:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CB1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836E2D694A511F1989186B0CE1D38B0.roa
Signing time: Mon 10 Aug 2026 10:25:45 +0000
ROA not before: Mon 10 Aug 2026 10:25:41 +0000
ROA not after: Thu 17 Sep 2026 10:25:41 +0000
asID: 22773
IP address blocks: 156.238.169.0/24 maxlen: 24
156.238.170.0/24 maxlen: 24
156.238.171.0/24 maxlen: 24
156.239.149.0/24 maxlen: 24
156.239.150.0/24 maxlen: 24
156.239.151.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
156.239.153.0/24 maxlen: 24
156.242.16.0/24 maxlen: 24
156.243.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117532 (0x1cb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 10:25:41 2026 GMT
Not After : Sep 17 10:25:41 2026 GMT
Subject: CN=6a79a728-6c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:61:fc:15:b5:55:d8:48:02:cc:ba:a8:ed:
84:02:bf:e7:4c:b6:45:fe:a5:6c:63:ef:50:04:ec:
d2:6c:2e:cc:51:3b:05:16:cc:16:41:e7:99:a7:29:
10:52:0b:71:48:2c:f7:b7:9a:b2:c9:1c:20:71:85:
c9:eb:e1:e5:81:35:4c:b9:63:4d:9b:f2:b4:c2:3d:
9b:e9:63:df:be:08:fd:04:80:f9:49:cf:c4:ac:0d:
00:9e:e8:1c:19:35:46:69:df:e6:6b:94:76:0d:90:
ba:5a:87:4c:0e:41:75:92:2f:8d:f3:47:a1:e3:5a:
2d:22:d3:29:9a:88:81:51:26:1a:d6:3d:6a:10:32:
a8:37:e2:c9:d9:70:cf:06:f4:95:e7:f9:7b:36:ca:
73:74:03:fd:1f:11:89:d6:3e:b6:8b:c8:68:52:97:
19:f7:70:6f:f4:20:9f:11:af:42:ef:a1:f6:28:94:
80:76:c4:f2:15:09:99:e6:d1:da:57:df:8b:5b:bb:
8a:4e:45:d6:e9:0f:30:fa:87:e5:a2:6f:75:e1:b4:
64:1c:d2:88:30:e7:3a:cf:ff:55:67:c2:77:65:08:
12:98:20:bb:6c:97:af:d4:20:60:44:96:65:26:1a:
de:03:58:5e:d2:bb:52:89:4e:eb:7b:15:56:ab:6d:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:36:61:E4:CB:82:5C:31:B2:45:41:4F:BB:F5:C9:7D:D2:C0:E8:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D836E2D694A511F1989186B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.169.0-156.238.171.255
156.239.149.0-156.239.153.255
156.242.16.0/24
156.243.64.0/20
Signature Algorithm: sha256WithRSAEncryption
54:c5:e9:81:28:13:ff:b4:b9:8b:db:bc:ba:00:49:c0:00:d7:
32:1d:65:c2:e1:2a:d3:46:36:85:17:38:96:43:c1:7c:31:d1:
ea:bb:f0:22:d4:36:03:b9:38:4e:36:ed:87:31:16:f0:4e:96:
b7:9b:cc:fc:2f:e3:b9:34:75:28:d4:5a:59:5e:51:94:2a:de:
d7:3b:a8:16:50:47:ca:b6:1f:55:4c:6d:1d:da:e7:41:cc:40:
7c:cb:17:ca:1a:38:2f:91:da:d5:5d:98:51:a2:3d:8d:d9:f2:
c5:1d:69:2d:0b:d2:02:e6:12:ea:0f:cc:9e:63:b4:57:fc:55:
b3:8f:7d:29:ca:82:7f:5d:6f:2e:c4:62:81:79:67:24:11:b0:
8a:0a:3e:85:ec:9d:da:78:7b:d3:30:21:c3:a6:d1:46:48:38:
20:df:62:7c:61:ba:e3:46:e7:58:ee:7b:41:be:0a:d4:a8:aa:
6e:e2:53:ee:e8:36:19:7f:a3:05:99:72:0f:79:30:f9:de:01:
d9:61:b2:27:31:75:9b:7f:bb:b0:f9:18:13:d2:d2:3d:34:38:
1c:f4:d9:27:00:ce:df:fc:9a:e0:a4:c4:a2:af:18:88:22:1b:
b7:4e:e7:27:a1:22:5c:9f:45:b1:b3:7f:fc:7e:8c:a3:4b:4f:
6d:c0:58:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:58 2026 by rpki-client