Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A797D4C456611F1AA518ED8CE1D38B0.roa
File: 0A797D4C456611F1AA518ED8CE1D38B0.roa (raw, json)
Hash identifier: Vyk+8RDt1ROjRyPdMFmIzisl+bBGs64IMHmedYHdVUo=
Subject key identifier: 12:89:50:D8:C9:4D:DA:C0:DA:00:23:BE:A9:94:4D:E2:BC:E1:0A:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A797D4C456611F1AA518ED8CE1D38B0.roa
Signing time: Fri 01 May 2026 13:59:59 +0000
ROA not before: Fri 01 May 2026 13:59:54 +0000
ROA not after: Mon 25 May 2026 13:59:54 +0000
asID: 271355
IP address blocks: 156.236.195.0/24 maxlen: 24
156.236.196.0/24 maxlen: 24
156.236.197.0/24 maxlen: 24
156.236.198.0/24 maxlen: 24
156.236.199.0/24 maxlen: 24
156.236.200.0/24 maxlen: 24
156.236.201.0/24 maxlen: 24
156.236.202.0/24 maxlen: 24
156.236.203.0/24 maxlen: 24
156.236.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110770 (0x1b0b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 13:59:54 2026 GMT
Not After : May 25 13:59:54 2026 GMT
Subject: CN=69f4b1df-60ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:ac:48:18:4e:80:35:19:51:d4:88:6f:73:
ad:ac:30:bf:0c:19:31:f9:c7:f8:63:92:7b:b5:cc:
1b:7f:2c:70:b8:b4:4e:0f:c3:25:55:db:9d:6d:d7:
fa:5b:1c:12:32:ab:06:57:dc:80:95:2e:32:61:87:
65:13:52:ce:9d:5b:cb:f3:28:73:61:f0:57:4b:af:
f8:20:be:21:eb:dc:84:cf:f7:3b:34:08:87:69:e5:
8c:d4:37:ca:ff:89:47:97:9d:fc:ae:cd:cb:ab:6b:
2c:75:39:8c:df:ff:db:be:9e:f2:63:6d:02:13:c3:
b0:36:7f:b1:50:51:81:59:a8:c6:b9:00:14:89:a5:
3c:3c:0b:d4:27:0e:3a:09:ae:02:74:e7:12:fb:55:
17:03:24:42:25:aa:13:0b:f0:03:4a:0a:e2:d3:ed:
8e:62:00:78:65:44:47:9d:77:ed:df:6a:5f:6d:aa:
a2:50:f7:ec:81:a0:63:6a:dd:6f:9a:86:f6:6e:5f:
7a:45:06:e7:b5:88:78:c4:17:d8:6f:13:54:c4:27:
5b:8b:47:f6:3c:6e:71:32:91:40:15:eb:ea:d5:ec:
40:06:93:f6:6e:5d:82:45:a2:53:36:c7:af:09:3e:
57:cf:a9:e5:e5:56:51:67:04:54:c6:13:44:44:9f:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:89:50:D8:C9:4D:DA:C0:DA:00:23:BE:A9:94:4D:E2:BC:E1:0A:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A797D4C456611F1AA518ED8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.195.0-156.236.203.255
156.236.207.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3f:26:da:99:69:77:b4:29:6f:84:37:c8:9d:dc:03:c8:f9:
a1:b4:94:19:9b:7d:fc:a3:b1:de:7a:86:dd:e2:71:be:19:0c:
ee:5f:aa:b1:44:4f:f7:48:a6:73:94:dd:21:5c:0f:36:63:fe:
92:82:50:d1:3e:64:2d:70:2e:d9:f4:2b:a9:b0:82:28:16:63:
80:0e:97:62:f5:01:c1:f2:aa:22:7f:de:d7:bc:1f:55:5f:f9:
4f:0a:05:b3:e8:ec:d7:46:d9:2f:69:37:d5:f9:0b:0a:b8:bb:
79:6a:18:d8:ea:de:c8:f0:1f:32:05:fb:77:e4:eb:d9:c1:42:
2a:33:99:96:83:13:f0:ad:b1:a5:7d:54:d6:4f:66:5e:f0:3c:
32:7f:53:6d:70:30:78:c5:1b:62:c5:65:a9:fc:13:26:b9:d0:
f0:91:7b:f3:93:5b:2d:99:a7:b7:bc:13:e3:6c:c2:2b:95:c7:
a9:a1:68:ff:c8:9e:ea:66:e8:9d:18:c4:d5:bb:6d:87:0c:19:
02:d3:68:e2:78:58:53:3f:63:c1:3f:c7:4d:fd:ac:15:f4:01:
4a:ba:d4:fd:38:c4:53:d5:a6:11:71:2e:bb:09:d8:37:f8:94:
86:68:e9:87:f9:5a:6a:b6:76:15:59:00:ff:f8:e2:32:e4:81:
94:4d:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:57:17 2026 by rpki-client