Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8A9528949D11F1B7D413FDCE1D38B0.roa
File: DD8A9528949D11F1B7D413FDCE1D38B0.roa (raw, json)
Hash identifier: Y9cyfJj+xXzTbhpyMOZB2PSmQveRWtofc1+9bZCVu8g=
Subject key identifier: 71:EB:51:F0:6C:A6:64:7B:92:BE:B5:8D:48:6C:61:35:2C:20:D9:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CAFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8A9528949D11F1B7D413FDCE1D38B0.roa
Signing time: Mon 10 Aug 2026 09:28:37 +0000
ROA not before: Mon 10 Aug 2026 09:28:33 +0000
ROA not after: Thu 17 Sep 2026 09:28:33 +0000
asID: 22773
IP address blocks: 156.233.253.0/24 maxlen: 24
156.233.254.0/24 maxlen: 24
156.233.255.0/24 maxlen: 24
156.238.136.0/24 maxlen: 24
156.238.137.0/24 maxlen: 24
156.238.138.0/24 maxlen: 24
156.238.139.0/24 maxlen: 24
156.238.140.0/24 maxlen: 24
156.238.141.0/24 maxlen: 24
156.238.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117501 (0x1cafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 09:28:33 2026 GMT
Not After : Sep 17 09:28:33 2026 GMT
Subject: CN=6a7999c5-b2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:9c:e2:69:e4:87:aa:19:2e:1b:00:f9:1c:
7f:61:32:e8:02:22:6b:23:52:88:7a:7d:11:d5:07:
91:ab:68:20:28:f8:7a:cf:fa:70:ec:81:77:80:18:
f1:f8:5d:9f:76:c8:dc:22:32:26:a0:5f:09:45:af:
27:10:05:f0:fe:b4:ac:cd:fd:40:9d:9f:f2:cf:17:
11:87:10:40:ae:03:da:fd:60:a7:c0:b3:e9:aa:6c:
35:2d:49:f1:ae:99:79:bd:fd:aa:5a:e7:b5:64:92:
cb:6b:1c:05:fe:78:bd:b6:be:71:c0:44:bb:e9:e9:
f7:07:86:fc:e6:42:af:e1:00:9c:6f:10:d6:b7:e7:
01:79:e5:62:8f:6a:92:d7:a1:b4:48:75:30:85:4a:
06:53:c4:30:03:17:5f:59:1f:15:f1:c4:73:97:9a:
2f:7d:e9:32:65:9c:09:5b:55:b4:b2:5b:ee:92:42:
f1:56:b1:2c:7f:53:ed:45:07:42:6a:b6:09:6a:7a:
65:1e:c1:83:61:75:f9:e9:71:00:8c:c3:43:60:cd:
1e:47:b1:21:00:d6:2a:f5:ef:a4:7c:68:43:f0:f3:
22:d8:5b:c8:90:9d:3b:a6:04:9e:0c:c8:3e:69:c0:
f9:29:93:c0:96:bf:c6:06:5e:ec:a3:89:6a:9c:4b:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:51:F0:6C:A6:64:7B:92:BE:B5:8D:48:6C:61:35:2C:20:D9:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8A9528949D11F1B7D413FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.253.0-156.233.255.255
156.238.136.0-156.238.141.255
156.238.144.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ab:23:ef:80:39:0c:8d:aa:7b:eb:57:dd:19:f4:e2:21:2b:
21:cd:69:de:8c:24:01:95:e5:ee:33:68:c5:98:f0:69:62:d2:
2b:5d:ee:d9:79:77:d3:06:93:ac:3d:bb:e8:fd:d1:a8:e5:3c:
88:b1:64:e9:ae:6e:e7:a7:a6:9d:28:b7:77:aa:3c:9c:80:b6:
9e:0d:3d:20:7e:44:36:5f:37:02:45:46:97:ca:30:2c:57:11:
00:cf:69:f3:b3:1d:e2:da:e7:58:ba:c9:30:bb:db:f8:b8:95:
b6:59:af:d7:06:b4:fd:9e:5f:9d:60:d7:d6:a7:49:02:a6:c6:
47:f2:91:63:20:f7:7e:20:2d:51:84:ba:c5:2f:92:a3:8a:17:
6e:ef:48:2d:1f:f9:7a:d0:d3:c7:ec:4e:de:8a:6c:f1:9d:b5:
94:bd:94:6c:61:dd:0d:94:57:24:49:37:5f:59:ef:fd:ca:a4:
c9:87:22:cc:3e:9b:b5:f3:6e:8f:6f:ef:10:0d:9c:3e:99:0f:
42:8c:3b:ef:55:1e:98:3a:00:ff:06:7b:d7:bf:ab:a0:de:c4:
b0:58:8c:77:c1:57:f7:d3:6d:19:2a:9e:43:96:c8:28:d5:de:
d6:71:e6:29:b6:26:fb:82:97:a2:c4:e9:c6:59:b6:a4:1a:7d:
41:b0:b2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:56 2026 by rpki-client