Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9A789D07F5A11F1A3B8B2CDCE1D38B0.roa
File: F9A789D07F5A11F1A3B8B2CDCE1D38B0.roa (raw, json)
Hash identifier: cpW7uSKDJGW9C1HMV64ErCYXtMBGX4ChdFpdJUJ3t0c=
Subject key identifier: E1:2E:E5:AC:AC:95:8B:CF:35:56:A5:1D:36:75:23:90:D8:71:EC:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9A789D07F5A11F1A3B8B2CDCE1D38B0.roa
Signing time: Tue 14 Jul 2026 08:06:54 +0000
ROA not before: Tue 14 Jul 2026 08:06:49 +0000
ROA not after: Sun 16 Aug 2026 08:06:49 +0000
asID: 22773
IP address blocks: 156.238.142.0/24 maxlen: 24
156.238.143.0/24 maxlen: 24
156.238.145.0/24 maxlen: 24
156.238.146.0/24 maxlen: 24
156.238.147.0/24 maxlen: 24
156.238.148.0/24 maxlen: 24
156.238.149.0/24 maxlen: 24
156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.189.0/24 maxlen: 24
156.239.56.0/24 maxlen: 24
156.242.0.0/24 maxlen: 24
156.242.1.0/24 maxlen: 24
156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115951 (0x1c4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 08:06:49 2026 GMT
Not After : Aug 16 08:06:49 2026 GMT
Subject: CN=6a55ee1e-382d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:10:c5:90:ad:9b:fd:28:8b:90:52:be:5d:34:
cd:25:7d:de:a6:11:e1:f6:eb:a4:ed:2b:fc:b8:3f:
99:ae:9a:91:f4:b1:34:cf:c4:f0:77:00:c8:6e:f9:
10:98:cb:ae:e2:c5:00:64:a6:47:29:04:04:a7:bd:
88:5d:c7:81:50:0a:de:11:9a:4f:4a:c6:26:99:0a:
94:bd:53:bc:3e:60:05:7c:74:24:01:6b:ba:7a:cd:
02:61:e4:57:7b:7c:64:9e:fc:f5:e9:58:eb:0b:03:
2c:6c:d9:4f:87:57:d2:d3:e4:1e:7a:e4:00:6a:5f:
ec:a7:f0:07:94:28:6f:95:14:40:10:01:2d:b4:2c:
4c:c0:f2:9d:d3:68:be:77:58:41:2a:22:40:72:51:
5b:00:db:5d:9f:c3:cb:c7:c2:ce:9f:ba:7e:f5:63:
37:79:8f:97:56:b5:ab:2f:d6:90:07:53:0e:89:bd:
72:77:06:98:6c:80:4c:06:61:02:ad:e0:e5:e0:fb:
19:d7:b9:0d:bd:30:10:bf:41:e0:8a:55:c8:3a:dd:
7e:27:a7:1f:07:75:5b:5d:f8:03:fb:c7:13:32:ba:
b9:87:db:4a:48:ef:ad:a7:b4:62:6f:62:de:1c:93:
a6:0a:c8:e3:b6:8b:95:51:0a:2a:8b:4a:7a:9a:a6:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2E:E5:AC:AC:95:8B:CF:35:56:A5:1D:36:75:23:90:D8:71:EC:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9A789D07F5A11F1A3B8B2CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.142.0/23
156.238.145.0-156.238.152.255
156.238.189.0/24
156.239.56.0/24
156.242.0.0/23
156.242.23.0/24
156.242.28.0/22
156.242.48.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:77:15:ef:48:32:74:ad:f7:ad:0f:e1:d7:e0:8b:49:d0:ae:
8b:62:12:6c:7d:b8:01:51:e3:bf:d7:52:ac:7d:79:72:9d:92:
2b:db:65:93:32:d4:35:05:42:f7:15:b3:cb:67:5e:aa:28:43:
67:f0:4c:16:35:12:ae:c7:b6:81:48:87:51:14:b8:c2:95:1b:
0e:a2:f4:fa:1a:1d:fd:c3:fe:b4:a3:35:32:d8:50:25:d8:cc:
ae:5d:f5:16:92:f7:8b:bf:e4:a2:c9:ac:e8:b2:f7:ea:35:96:
a7:03:8f:69:1c:05:0d:23:9c:97:bc:aa:e0:9b:64:55:a0:34:
ec:fc:16:e4:d6:e5:55:eb:2d:cd:f0:b6:f6:1c:57:3d:23:85:
e2:1f:54:14:f9:44:bd:ac:4d:16:e4:c3:88:36:46:e7:64:51:
6e:f9:36:24:94:3f:76:bc:94:e6:50:54:ad:95:1d:2d:ee:bd:
f9:41:93:ef:c3:55:59:b8:1f:08:51:41:da:39:34:c3:b1:f7:
d9:2d:1c:2e:a6:36:dd:ad:42:13:ee:d3:76:5f:6e:b9:60:1d:
4f:da:94:aa:a2:ce:49:5a:96:6f:6d:64:c4:ea:3f:ff:ea:7b:
f7:1e:c9:6f:13:11:1b:0e:c9:17:63:46:21:39:ea:99:f3:70:
89:6a:f4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:43 2026 by rpki-client