Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA2AF438739E11F1BB12D1B9CE1D38B0.roa
File: DA2AF438739E11F1BB12D1B9CE1D38B0.roa (raw, json)
Hash identifier: uYCOezqMk09pyAyrZ1XHcAEOQDlAJeUN6prqONSPlJ4=
Subject key identifier: 0A:BD:52:31:9C:85:15:D1:2C:CA:D4:EF:27:45:5F:82:13:B1:0F:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C180
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA2AF438739E11F1BB12D1B9CE1D38B0.roa
Signing time: Mon 29 Jun 2026 09:42:33 +0000
ROA not before: Mon 29 Jun 2026 09:42:28 +0000
ROA not after: Sat 15 Aug 2026 09:42:28 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115072 (0x1c180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 09:42:28 2026 GMT
Not After : Aug 15 09:42:28 2026 GMT
Subject: CN=6a423e09-1a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:1a:51:8b:1f:67:d5:2e:86:7d:f4:14:08:
e3:77:fa:24:f4:04:5f:6f:9c:44:1d:ce:95:65:e3:
e9:c0:e4:e8:6a:68:76:e6:f6:82:47:67:e5:9d:99:
a7:ba:5d:b7:45:1b:98:79:bb:56:f7:ad:c6:35:67:
de:f8:37:05:3a:2b:bd:c4:14:db:3a:92:fd:f7:b4:
a0:3b:59:e5:f5:1c:77:54:27:a5:0d:8c:a9:3b:c2:
49:e5:ab:7d:bb:0f:90:f9:98:3d:9f:fc:ce:7b:c2:
a2:8f:e2:a4:98:6f:d3:66:29:e0:9e:07:d4:ec:e6:
a0:24:23:28:63:e2:c8:c3:ae:5b:b8:67:76:2e:48:
17:25:c7:1a:c9:e3:bb:f5:ad:a6:e0:f9:42:e8:03:
e5:56:10:33:31:46:18:15:50:c5:41:85:d7:f5:6c:
7a:bf:c9:20:6d:11:de:c2:91:fb:99:d9:0e:91:6c:
6d:a6:14:56:f4:93:10:84:cc:22:ab:3e:be:cb:aa:
41:a8:08:0e:c4:0c:06:2d:80:6a:54:b7:a2:d4:0c:
55:3e:5d:25:14:fa:58:13:d2:b2:dd:6e:05:1a:df:
89:1a:6a:30:d3:7c:af:84:26:d3:15:42:35:cd:2d:
46:c6:f7:6b:7a:da:b5:7e:a9:67:b8:19:8b:e7:a1:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:52:31:9C:85:15:D1:2C:CA:D4:EF:27:45:5F:82:13:B1:0F:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA2AF438739E11F1BB12D1B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:d2:7b:79:c2:73:f8:24:94:e9:92:45:85:e1:48:2b:4c:57:
0b:8b:7e:e3:0c:41:c6:b9:b7:88:84:5c:bc:78:6b:19:26:01:
6d:89:b3:86:96:45:48:5e:c5:b8:f8:83:75:f9:1a:ea:5c:15:
64:5f:12:b2:ed:c8:fc:04:58:25:16:af:78:ae:67:74:fd:14:
ae:cb:1f:9c:e2:e0:bc:e0:72:32:de:de:f3:66:28:87:47:0f:
b4:63:28:16:5f:e9:31:a8:93:d7:ce:77:5a:b4:28:f9:45:4c:
5c:07:42:35:ae:65:c9:a4:1d:53:31:45:50:5b:62:c7:cf:19:
f8:56:1b:29:5d:5c:63:a3:8b:87:d4:8e:5b:1a:4f:b3:24:55:
14:e8:4c:6f:0e:3c:62:c8:fb:df:1c:32:bb:2a:ea:4a:9a:49:
c8:fa:0a:33:25:91:46:95:73:bd:3e:e5:b5:98:90:df:9a:07:
52:5c:9f:0f:4f:a6:29:c6:1d:6f:06:e9:91:78:e2:eb:53:4c:
76:66:e3:51:bb:a2:32:df:b3:91:0c:20:16:54:c5:b1:0e:6f:
09:ed:e6:12:86:fc:26:bb:36:ca:89:4f:4c:f3:7f:8c:58:ad:
09:05:a7:2b:10:af:78:38:5e:20:36:cb:a5:73:e4:61:d0:2d:
5e:bc:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:00 2026 by rpki-client