Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E909F23A545C11F1B4639AD6CE1D38B0.roa
File: E909F23A545C11F1B4639AD6CE1D38B0.roa (raw, json)
Hash identifier: gziI/KENDyr6hnHr9HdarQQTGYuEamlaK5YgiwbKTzs=
Subject key identifier: 3A:34:B9:38:CF:3B:C7:39:8A:35:32:6C:53:C9:A6:4D:64:BC:36:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B668
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E909F23A545C11F1B4639AD6CE1D38B0.roa
Signing time: Wed 20 May 2026 15:02:25 +0000
ROA not before: Wed 20 May 2026 15:02:21 +0000
ROA not after: Fri 26 Jun 2026 15:02:21 +0000
asID: 63139
IP address blocks: 156.225.121.0/24 maxlen: 24
156.227.9.0/24 maxlen: 24
156.227.14.0/24 maxlen: 24
156.227.15.0/24 maxlen: 24
156.227.192.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.194.0/23 maxlen: 24
156.227.196.0/24 maxlen: 24
156.227.197.0/24 maxlen: 24
156.227.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112232 (0x1b668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 15:02:21 2026 GMT
Not After : Jun 26 15:02:21 2026 GMT
Subject: CN=6a0dcd01-c409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a2:28:75:29:75:12:ed:16:e1:e6:4d:8c:12:
d8:a4:4a:0e:e0:63:1d:c6:55:61:e5:b0:59:13:aa:
6b:a9:c1:cc:ea:c0:b4:85:68:16:8b:c0:57:76:f3:
4c:ca:3a:e2:a9:76:63:fa:61:1c:e6:7b:0f:c9:4e:
65:82:34:6f:88:02:e9:10:26:e4:80:f9:5f:64:50:
b2:de:92:3d:59:20:55:9a:74:d2:4a:7a:0a:97:9f:
8e:5e:48:d5:75:42:cf:28:06:46:f1:e4:c5:fa:1e:
e4:a9:be:4b:11:b7:cf:7e:21:fa:4b:bb:8e:28:10:
64:c9:aa:9b:c5:15:d6:94:1a:a7:65:d0:ce:de:6b:
94:80:92:29:31:d0:ca:54:54:97:f4:12:14:eb:95:
18:ae:1a:84:35:b4:8a:51:d6:ed:0d:d7:a8:8f:95:
bf:e9:98:ca:12:41:44:f3:6b:e5:47:24:cc:1d:6a:
ac:2f:36:fa:3c:b8:74:62:0d:ce:a9:2a:89:ea:84:
e8:70:91:b9:c6:70:30:08:74:13:39:4f:1e:ca:2c:
80:46:f5:e1:1e:92:4b:f7:c9:62:8f:30:93:42:bd:
eb:53:7b:74:a0:90:6e:1c:16:00:b1:6d:cb:c0:0e:
36:cc:0b:d3:92:af:e3:7a:44:65:62:04:1a:e3:c1:
a3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:B9:38:CF:3B:C7:39:8A:35:32:6C:53:C9:A6:4D:64:BC:36:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E909F23A545C11F1B4639AD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.121.0/24
156.227.9.0/24
156.227.14.0/23
156.227.192.0-156.227.198.255
Signature Algorithm: sha256WithRSAEncryption
0a:bb:0b:e4:75:6a:fa:23:e9:35:4b:bf:2e:6c:7c:ac:00:ff:
ec:06:e1:9b:70:f3:03:07:6f:40:24:1a:87:ed:df:3c:de:f2:
70:05:87:74:27:16:e6:af:89:55:91:73:8c:15:c4:44:2d:61:
d0:0f:44:4d:d0:3c:da:52:be:f5:c5:81:f2:b6:b2:61:3b:b2:
40:39:65:7b:67:09:7a:b0:22:18:81:f9:30:6f:6c:56:6d:ff:
8c:e9:d1:91:23:f8:e6:79:4f:0f:54:f0:49:a4:67:9b:e2:85:
9b:9a:08:89:85:55:21:df:9b:0e:e5:87:9f:c4:51:14:d1:98:
c3:6b:cf:fc:f9:30:16:35:ca:a6:6b:5a:86:0d:ec:c1:3f:76:
e2:75:1d:98:1b:83:f7:e3:c8:64:de:04:66:af:dc:f6:1f:61:
62:61:8e:4d:e5:c7:ff:55:0b:c5:d7:02:52:a4:e1:91:e0:a8:
3c:1f:38:85:61:82:ff:69:18:12:89:33:d2:d5:5c:71:71:77:
bb:7f:c4:e6:04:ce:50:9f:9d:04:65:3a:70:10:97:8a:bb:45:
bb:33:36:1f:da:30:63:cf:90:41:12:63:62:c2:b3:ac:12:f0:
72:a8:4b:a5:f7:47:ff:dc:e0:97:8b:98:01:e5:2c:db:d5:33:
d8:ed:e5:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:04 2026 by rpki-client