Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08C8AA803E8211F1A750D8CDCE1D38B0.roa
File: 08C8AA803E8211F1A750D8CDCE1D38B0.roa (raw, json)
Hash identifier: yEGiJUFpB/qHgESCnsPvRXmwepkiYH/lZe6LIapw5Qc=
Subject key identifier: F4:10:92:38:41:EF:F5:87:EB:59:42:63:5C:58:5A:AC:95:B8:B3:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08C8AA803E8211F1A750D8CDCE1D38B0.roa
Signing time: Wed 22 Apr 2026 19:32:44 +0000
ROA not before: Wed 22 Apr 2026 19:32:40 +0000
ROA not after: Thu 28 May 2026 19:32:40 +0000
asID: 44559
IP address blocks: 156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110163 (0x1ae53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 19:32:40 2026 GMT
Not After : May 28 19:32:40 2026 GMT
Subject: CN=69e9225c-028d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:8c:df:e4:89:c6:de:59:49:c3:e0:1c:5d:e4:
5d:86:7a:67:f3:f4:b7:1d:15:70:fb:0b:98:88:4f:
4e:fe:5d:77:c9:94:80:f2:5f:49:24:89:b4:a9:96:
fe:b2:37:5e:76:51:83:7d:ff:60:7d:ff:e5:a2:42:
36:ab:49:95:d5:93:fd:78:b6:a0:ff:f5:95:df:1a:
bd:11:77:2a:c1:b5:b8:59:74:80:01:da:f4:d5:60:
da:05:d4:72:83:c6:a3:8b:1c:70:1d:b2:8a:d7:c2:
ac:ff:09:cb:e5:3f:98:cc:e2:97:6a:3e:a3:7c:2b:
29:3c:37:6e:72:eb:5c:1a:37:de:80:4a:59:ba:29:
a2:2b:cd:b3:2c:f2:69:7b:6e:c7:4d:e5:29:a3:c1:
af:17:6b:d8:7c:e4:f8:08:47:11:b0:c3:8e:99:78:
63:6c:b6:7d:69:31:f4:e4:6c:6a:f6:63:42:29:e0:
f4:a9:9f:15:85:1c:e7:a2:6c:e4:e3:c4:9b:92:be:
ac:a2:88:ae:c4:5b:0d:18:97:9d:24:1f:0e:29:82:
06:6a:ef:31:07:fc:50:98:1a:7d:01:fe:09:49:3c:
b8:a9:1f:ae:6f:de:e6:d4:cc:5e:0d:92:cc:27:9b:
5b:7c:90:f0:cc:93:cb:49:64:52:ad:37:c3:3f:ef:
13:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:92:38:41:EF:F5:87:EB:59:42:63:5C:58:5A:AC:95:B8:B3:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08C8AA803E8211F1A750D8CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.209.0-156.246.228.255
Signature Algorithm: sha256WithRSAEncryption
a8:9f:d4:fd:e5:17:e2:0f:fd:f9:04:ac:fd:d7:d0:b5:16:4e:
9c:0f:5a:4a:8c:46:cc:ee:6a:ea:00:16:c0:96:97:f0:1b:34:
bb:cf:08:55:44:72:7a:10:8a:0b:10:24:36:6d:e1:d0:bf:c8:
bf:af:78:88:8b:69:75:b6:b2:7d:13:fa:db:6a:01:f8:2d:b3:
21:38:71:2c:f0:18:a3:46:e2:c6:94:c9:42:35:c4:77:87:c7:
ae:3e:d8:c7:68:a3:6c:a7:58:3a:aa:f4:8a:e4:5d:4f:b9:8b:
d4:a6:40:89:ed:43:74:f3:ad:68:d2:d2:fe:87:1b:3f:71:34:
88:23:a3:11:32:8f:f6:69:3e:6a:a4:6e:54:63:8e:a2:35:80:
31:63:d4:0d:d7:70:4f:f9:e2:f6:fd:a0:b6:b7:01:d7:a2:b5:
ad:d2:b7:86:a2:c2:d5:fe:d6:4b:de:2e:70:48:29:44:f3:0e:
cf:c9:00:26:68:6e:6a:13:c6:16:d5:df:d5:d3:28:ac:31:1d:
19:5c:fd:f2:14:79:5c:8d:37:6a:bd:ee:4a:27:ac:e0:ed:3b:
ff:b7:6a:df:ba:15:26:70:b2:33:95:24:b2:7b:83:d1:9f:37:
44:31:ad:6c:4e:89:c9:e1:59:7f:28:f9:b5:9f:c9:81:16:cc:
19:e0:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:38 2026 by rpki-client