Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE27324E79E311F189A13ED3CE1D38B0.roa
File: EE27324E79E311F189A13ED3CE1D38B0.roa (raw, json)
Hash identifier: C9TZnqWIh8LTOkbh+7x6pEV7HYXvueWhApxPFNZtw9c=
Subject key identifier: 81:46:94:BD:24:62:87:84:86:EE:1C:C2:24:70:12:97:DA:3F:23:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C36A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE27324E79E311F189A13ED3CE1D38B0.roa
Signing time: Tue 07 Jul 2026 09:12:09 +0000
ROA not before: Tue 07 Jul 2026 09:12:04 +0000
ROA not after: Mon 03 Aug 2026 09:12:04 +0000
asID: 17497
IP address blocks: 156.255.20.0/24 maxlen: 24
156.255.22.0/24 maxlen: 24
156.255.23.0/24 maxlen: 24
156.255.24.0/24 maxlen: 24
156.255.25.0/24 maxlen: 24
156.255.26.0/24 maxlen: 24
156.255.27.0/24 maxlen: 24
156.255.28.0/24 maxlen: 24
156.255.29.0/24 maxlen: 24
156.255.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115562 (0x1c36a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:12:04 2026 GMT
Not After : Aug 3 09:12:04 2026 GMT
Subject: CN=6a4cc2e9-0d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:af:26:ee:0d:5b:01:8e:a2:86:6b:f9:4a:
1c:2a:bf:36:12:a0:f5:76:ba:69:a7:71:61:2a:9d:
6d:40:04:ab:2f:92:a6:34:f8:27:1e:dd:e7:31:53:
cd:8d:b4:42:c2:b2:5b:cf:dd:23:25:e8:10:3e:56:
e8:b2:94:b1:88:be:61:79:56:93:1b:38:0a:f2:a8:
f2:b4:b3:87:90:f0:e1:1a:71:73:30:cc:31:11:d4:
da:a0:20:78:06:7b:f1:3d:3d:3c:78:63:1e:37:38:
62:6b:33:ff:aa:2d:ef:3a:18:74:f9:08:6a:ce:f7:
3f:06:d2:63:9e:b9:d7:f8:de:c4:9b:27:aa:51:cc:
8e:d4:6a:a3:93:fa:86:e6:85:63:55:fe:5d:1c:b0:
f3:21:e4:2f:94:bc:b2:03:b1:e1:55:25:94:3c:bb:
6c:89:f5:12:e1:9a:b8:f7:35:5f:42:28:27:e1:de:
fb:01:23:bf:39:0c:27:a4:4d:d0:fe:55:8e:9e:6a:
07:64:3b:8d:79:32:8e:72:ec:4a:74:df:8c:00:41:
2d:8e:ba:3b:84:94:29:20:49:3e:a7:15:13:2d:65:
87:c5:5e:04:90:8b:08:5e:a3:b9:5c:1b:6f:d3:63:
0f:d2:1a:e6:e2:65:52:7c:b0:09:ac:f5:f9:b7:8d:
81:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:46:94:BD:24:62:87:84:86:EE:1C:C2:24:70:12:97:DA:3F:23:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE27324E79E311F189A13ED3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.20.0/24
156.255.22.0-156.255.30.255
Signature Algorithm: sha256WithRSAEncryption
02:5e:66:47:54:68:42:90:77:1c:fa:4a:d3:7c:fe:a6:19:7c:
3f:9b:ea:b7:28:73:fc:85:61:76:6e:29:87:e6:97:1b:e6:d8:
4c:6c:fc:d6:b8:be:31:40:01:3f:db:9c:1f:0f:1a:52:40:33:
a6:bd:91:88:a8:52:eb:56:73:6d:1a:50:8f:85:ab:47:12:ca:
c2:d8:57:cd:dd:bf:09:ac:4a:00:08:ac:77:b8:c3:3e:8e:ca:
33:f5:35:6c:61:b8:88:a4:79:f3:af:c5:b6:f7:ee:13:e5:38:
e6:a0:ef:72:68:44:8b:7d:9c:cd:76:22:9d:59:58:d3:94:5a:
ab:91:15:22:d7:65:b6:49:8e:c5:a2:4a:13:ee:0e:a3:09:82:
08:34:5e:47:8e:f4:43:49:f1:a8:b8:f7:d5:6e:37:e9:56:e7:
53:cb:10:09:97:64:8d:93:36:6c:79:25:f7:1d:fc:b4:4d:4d:
63:5c:00:15:ac:9a:c0:20:d4:b6:61:42:55:08:3a:58:ef:60:
6d:c3:19:06:15:12:fd:ea:1b:85:5c:15:8d:b9:78:45:6c:6b:
9a:c4:f1:bb:fe:53:7f:b0:96:6c:67:66:5f:a4:03:03:5f:31:
e6:fd:77:92:57:c6:95:c5:03:3a:52:9b:9b:20:6e:54:8e:e9:
e6:a7:ca:8e
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAcNqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA3MDkxMjA0WhcNMjYwODAzMDkxMjA0WjAYMRYw
FAYDVQQDEw02YTRjYzJlOS0wZDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2MivJu4NWwGOooZr+UocKr82EqD1drppp3FhKp1tQASrL5KmNPgnHt3n
MVPNjbRCwrJbz90jJegQPlbospSxiL5heVaTGzgK8qjytLOHkPDhGnFzMMwxEdTa
oCB4BnvxPT08eGMeNzhiazP/qi3vOhh0+Qhqzvc/BtJjnrnX+N7EmyeqUcyO1Gqj
k/qG5oVjVf5dHLDzIeQvlLyyA7HhVSWUPLtsifUS4Zq49zVfQign4d77ASO/OQwn
pE3Q/lWOnmoHZDuNeTKOcuxKdN+MAEEtjro7hJQpIEk+pxUTLWWHxV4EkIsIXqO5
XBtv02MP0hrm4mVSfLAJrPX5t42BfQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIFG
lL0kYoeEhu4cwiRwEpfaPyPyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTI3MzI0RTc5RTMxMUYxODlBMTNFRDNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnP8UMAwDBAGc/xYDBACc/x4w
DQYJKoZIhvcNAQELBQADggEBAAJeZkdUaEKQdxz6StN8/qYZfD+b6rcoc/yFYXZu
KYfmlxvm2Exs/Na4vjFAAT/bnB8PGlJAM6a9kYioUutWc20aUI+Fq0cSysLYV83d
vwmsSgAIrHe4wz6OyjP1NWxhuIikefOvxbb37hPlOOag73JoRIt9nM12Ip1ZWNOU
WquRFSLXZbZJjsWiShPuDqMJggg0XkeO9ENJ8ai499VuN+lW51PLEAmXZI2TNmx5
Jfcd/LRNTWNcABWsmsAg1LZhQlUIOljvYG3DGQYVEv3qG4VcFY25eEVsa5rE8bv+
U3+wlmxnZl+kAwNfMeb9d5JXxpXFAzpSm5sgblSO6eanyo4=
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:53 2026 by rpki-client