Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9D8D2858D811F1A6B0A5BCCE1D38B0.roa
File: DD9D8D2858D811F1A6B0A5BCCE1D38B0.roa (raw, json)
Hash identifier: lxSb1+jxzmsCCBgS1pawqqHbWl2kBpFhZTEXlHTz6G4=
Subject key identifier: 2C:12:5D:EA:0D:2C:B9:C8:E6:FA:7F:F4:4A:9A:3C:D9:78:83:4C:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9D8D2858D811F1A6B0A5BCCE1D38B0.roa
Signing time: Tue 26 May 2026 07:59:48 +0000
ROA not before: Tue 26 May 2026 07:59:44 +0000
ROA not after: Sun 28 Jun 2026 07:59:44 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
156.246.151.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113083 (0x1b9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 07:59:44 2026 GMT
Not After : Jun 28 07:59:44 2026 GMT
Subject: CN=6a1552f4-b29c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:8f:8e:ea:e9:bf:6c:ae:51:56:8e:d3:d9:
37:10:df:9f:88:ac:1f:a6:d3:1c:3a:09:91:be:36:
34:08:7b:3e:a4:84:d9:da:2f:43:d4:03:62:8e:fb:
31:de:12:d6:b3:72:fc:dc:46:e0:16:d6:40:54:6c:
41:a0:73:f9:aa:d1:af:83:55:ff:19:40:ea:7d:21:
8e:7c:19:4f:5c:bf:36:df:03:80:14:e2:b0:91:39:
44:84:3d:52:87:06:cd:9b:21:56:d6:7d:4d:1a:e4:
6a:91:fc:62:79:59:ee:b6:e2:8d:d9:0b:57:0e:7b:
75:40:aa:51:cb:16:d4:9a:a9:d1:61:6b:32:b8:2d:
7c:89:de:ee:72:da:4f:21:8a:52:2e:ed:8f:40:f6:
56:8a:78:63:ca:f0:22:f5:47:72:48:e5:54:a0:8a:
22:bb:eb:96:29:61:8b:e2:4b:8a:5e:58:52:57:66:
dd:44:19:dd:47:67:02:c8:48:d8:cb:28:2f:df:ab:
b6:02:ad:df:66:4f:5e:73:01:c2:96:6d:5c:2b:16:
60:0b:3a:9c:30:2e:e3:09:fc:28:54:62:44:36:90:
10:48:d2:3c:d7:4e:7b:c0:3e:17:2f:eb:d0:70:ed:
39:6a:e1:16:56:da:aa:ed:31:75:c4:a4:a0:77:90:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:12:5D:EA:0D:2C:B9:C8:E6:FA:7F:F4:4A:9A:3C:D9:78:83:4C:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD9D8D2858D811F1A6B0A5BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0-156.246.159.255
156.246.199.0-156.246.208.255
Signature Algorithm: sha256WithRSAEncryption
11:c6:b7:7d:34:10:82:da:51:fe:3f:62:09:7b:de:08:e5:28:
6d:59:cd:bf:02:78:85:76:e9:11:e9:80:85:29:0d:95:ed:72:
10:69:98:57:e9:c8:d0:ba:d5:25:5b:46:94:b5:d9:94:ed:b7:
75:97:6d:f2:94:c9:2b:7f:f3:44:8b:8c:06:9c:bc:d8:eb:bb:
02:6f:b3:2c:63:93:1b:6f:0f:73:15:78:36:52:08:bd:9d:a7:
a6:2e:2d:e1:13:4d:12:ef:70:9b:57:c5:d5:6e:57:87:ef:db:
fa:02:17:82:a9:11:4a:b2:47:60:3d:22:01:2d:ba:b8:f9:24:
5e:52:87:2b:77:e7:05:f5:b4:eb:a7:5b:2b:f9:ad:65:01:33:
6b:d9:6c:b5:87:60:c8:d5:56:66:e6:45:bf:d3:1f:1b:37:ec:
4f:8f:9b:eb:47:bb:e1:22:f4:84:89:57:b3:3f:7d:1a:b9:0b:
47:ab:7d:fc:0b:d7:34:03:1c:00:98:68:4c:2d:c6:08:2a:db:
dc:c5:be:17:43:3a:c2:e8:26:9a:23:63:a1:61:6a:21:57:2e:
b9:68:e3:0c:cb:92:5d:11:f0:3b:52:e2:c8:31:bd:16:f9:b2:
2d:a8:1d:87:35:74:c9:8e:89:d9:39:3c:dd:0c:4b:e7:4a:94:
c7:f3:16:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:59 2026 by rpki-client