Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD074C26FBD11F1A1CF561CCF1D38B0.roa
File: FFD074C26FBD11F1A1CF561CCF1D38B0.roa (raw, json)
Hash identifier: uUjQdAxnOi3u5zEwl+pijZizsBjb/Y7iRyzKjAeOuX0=
Subject key identifier: FE:8F:E6:6E:A3:0C:4A:A4:D6:67:64:81:43:7F:B0:F3:BF:1F:2D:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C024
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD074C26FBD11F1A1CF561CCF1D38B0.roa
Signing time: Wed 24 Jun 2026 11:15:26 +0000
ROA not before: Wed 24 Jun 2026 11:15:21 +0000
ROA not after: Sat 01 Aug 2026 11:15:21 +0000
asID: 44559
IP address blocks: 156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
156.243.242.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.244.209.0/24 maxlen: 24
156.244.210.0/24 maxlen: 24
156.244.211.0/24 maxlen: 24
156.249.19.0/24 maxlen: 24
156.249.80.0/24 maxlen: 24
156.249.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114724 (0x1c024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:15:21 2026 GMT
Not After : Aug 1 11:15:21 2026 GMT
Subject: CN=6a3bbc4e-5525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:29:27:0a:22:60:c3:57:f2:59:68:db:c5:
9e:7b:21:3b:50:ab:96:55:9d:95:5c:e3:5f:eb:9f:
a1:91:ee:af:27:79:fd:f4:ff:0e:e2:1d:aa:a7:c9:
ca:ec:33:70:96:9d:dd:f3:09:ac:0b:da:d6:dc:40:
57:2c:5c:eb:e0:c4:8c:e3:2c:48:e1:72:e6:8c:12:
0d:7c:51:56:c9:0e:0a:2e:31:69:dc:61:42:87:74:
b9:ee:88:ad:f5:e7:2c:51:db:c0:17:58:66:79:4d:
da:e1:e7:e6:cf:01:6a:7c:16:89:7d:7f:96:0e:bc:
30:98:99:ae:22:e9:cd:f3:e1:df:75:ba:1f:36:ab:
f3:07:2d:d3:bc:0a:08:82:a2:09:77:94:7c:b0:9f:
a0:b2:8b:d8:ed:a5:99:ad:38:f3:50:6a:46:0e:f5:
e8:c9:b3:05:7d:2c:26:18:d0:92:9d:c5:f5:23:94:
24:8e:58:f8:89:a5:e7:71:55:15:e9:fb:ae:b1:db:
62:e9:fc:4b:c4:4c:70:60:0e:db:48:11:69:1e:6c:
98:22:ff:c8:93:12:1f:56:f1:48:17:0e:42:ea:33:
b4:cf:12:87:a2:4e:89:8b:9d:4f:dd:dc:14:b0:85:
bb:e2:8f:95:6d:45:6d:35:bf:8e:c7:e1:52:37:7b:
d1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:E6:6E:A3:0C:4A:A4:D6:67:64:81:43:7F:B0:F3:BF:1F:2D:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFD074C26FBD11F1A1CF561CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.234.0/24
156.243.240.0/24
156.243.242.0/24
156.243.255.0/24
156.244.209.0-156.244.211.255
156.249.19.0/24
156.249.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:6f:7b:0d:14:c6:9e:bc:bd:03:b5:c1:3e:fc:12:54:e4:9b:
df:c3:cc:9d:0b:ba:f3:5a:59:0e:16:17:b4:7e:88:8c:25:f5:
16:5a:70:ce:06:eb:37:f5:79:21:a4:0f:03:6a:65:be:d1:ee:
61:11:a0:20:78:0b:8b:c1:43:d1:ff:b6:9d:d3:95:c3:18:60:
7f:0b:8a:94:57:1c:20:23:13:d8:8f:ae:b9:e8:3d:17:13:6f:
2b:58:93:35:24:f0:02:31:e9:56:c5:a0:aa:30:74:48:5e:4f:
63:e8:00:b2:7d:87:36:fd:bb:0c:e6:d9:d0:e4:5e:2c:6a:1b:
f9:e5:22:ee:92:6d:5d:c8:b5:81:ff:1c:d4:5d:e7:d7:a4:5f:
39:e4:fe:81:ce:e2:08:5e:01:fd:01:77:ae:f9:28:d3:82:a0:
bd:8c:5a:31:e1:fd:7d:4a:e3:f4:bf:17:02:10:e9:90:81:54:
e4:8d:16:4c:9d:0f:e4:a8:cc:dc:1e:7a:26:79:10:05:80:c1:
81:22:f2:c7:74:0c:5e:4e:fb:12:ab:86:47:c1:7b:56:d6:7e:
ae:d0:2c:7e:d6:2e:ef:19:8f:95:b7:f2:e3:3d:7d:3f:4f:d0:
7a:79:33:15:7d:f1:18:47:7b:19:4e:08:88:e2:37:be:f1:cf:
f0:51:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:39 2026 by rpki-client