Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF68DF8459D11F1AE43A5A1CE1D38B0.roa
File: 1BF68DF8459D11F1AE43A5A1CE1D38B0.roa (raw, json)
Hash identifier: WJnvjH6EFsFls/FVFEFPGifxd0fTTFnzsqh/MGUIOPI=
Subject key identifier: 82:F7:B1:03:23:FE:F6:02:F0:B5:92:1B:12:7E:09:3E:DF:42:CA:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF68DF8459D11F1AE43A5A1CE1D38B0.roa
Signing time: Fri 01 May 2026 20:34:11 +0000
ROA not before: Fri 01 May 2026 20:34:06 +0000
ROA not after: Tue 09 Jun 2026 20:34:06 +0000
asID: 48031
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.246.23.0/24 maxlen: 24
156.246.87.0/24 maxlen: 24
156.247.16.0/24 maxlen: 24
156.247.20.0/24 maxlen: 24
156.247.21.0/24 maxlen: 24
156.247.22.0/24 maxlen: 24
156.247.23.0/24 maxlen: 24
156.254.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110828 (0x1b0ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 20:34:06 2026 GMT
Not After : Jun 9 20:34:06 2026 GMT
Subject: CN=69f50e43-e4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:c5:11:fe:58:a4:3f:b7:df:55:33:62:4d:
c0:a3:4a:40:e5:0f:1c:0b:bb:85:2c:28:bf:aa:a2:
bb:26:03:d7:5e:b7:03:94:1c:35:d4:e9:1b:17:0a:
ba:6e:f6:da:67:90:9a:b3:fe:8b:44:7e:38:85:f9:
7e:63:3c:c8:9c:c6:d2:f5:9a:63:38:95:65:dd:0d:
52:9c:84:11:2a:ec:fa:88:0f:dc:7b:5f:b4:4e:50:
3e:b8:4e:5e:8e:79:d1:13:4c:b5:12:da:f9:9b:d6:
3c:c8:27:cb:1f:12:7c:98:9c:a2:df:88:18:8e:e1:
98:8e:b8:04:66:22:a3:5e:87:7e:1b:bc:24:00:16:
fc:23:59:7a:b3:69:ba:e1:0b:f5:fd:4f:e7:77:a5:
73:e6:f2:fc:7e:d7:1c:f1:5b:fb:97:ed:5e:71:0c:
b8:7e:5e:e7:23:a8:a1:3b:66:a2:3b:2f:69:60:a6:
a1:e4:94:5c:ae:22:44:b4:a0:75:8e:41:8a:f8:55:
29:48:1e:97:7d:d5:4b:01:6d:fb:ef:e6:4d:b2:c8:
2c:e7:4b:7b:21:a9:a1:47:b0:08:23:e5:66:d1:93:
79:89:99:1c:d8:9f:21:41:e1:20:2e:9e:8a:28:c9:
41:f9:8a:27:d3:13:35:b0:b4:e0:7e:59:f4:3c:a5:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:B1:03:23:FE:F6:02:F0:B5:92:1B:12:7E:09:3E:DF:42:CA:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BF68DF8459D11F1AE43A5A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/23
156.246.23.0/24
156.246.87.0/24
156.247.16.0/24
156.247.20.0/22
156.254.96.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d9:6a:51:be:40:a3:bd:85:7e:b2:66:cc:70:da:42:ed:ee:
fb:d6:5e:3b:a3:32:68:58:37:d3:e2:87:e4:81:e5:2a:f3:d0:
26:31:4a:c6:92:fd:f9:94:1f:03:80:42:ad:b1:80:29:d6:34:
0e:3b:cb:b3:43:95:82:16:c1:fb:70:c4:df:a5:05:f5:81:fc:
17:a2:af:4d:2c:1b:17:9b:92:77:46:ca:8d:6c:ea:4e:10:e9:
68:59:95:9f:f5:17:d7:e8:9b:42:a8:22:c4:3b:5e:7f:26:c6:
3d:72:d8:7b:6f:e4:f2:d6:b0:1d:5f:d5:cc:e3:4e:38:e3:90:
62:5a:ef:59:f3:12:3d:b6:c6:73:03:d6:a6:50:90:a5:1f:2e:
00:c6:85:e9:54:aa:03:09:22:70:e0:3e:55:07:f0:8a:1a:40:
82:a0:e0:39:4e:d6:eb:41:4f:88:a7:c1:ff:d2:13:03:4d:aa:
d9:6d:9d:e9:8e:49:75:d5:aa:96:ea:b4:87:24:0e:fb:2d:25:
0f:b1:ce:a2:39:bc:04:6a:13:3f:60:03:62:56:13:e1:83:a2:
9b:3a:e2:b8:17:02:be:67:8e:bf:89:d4:f5:42:1e:ce:a9:39:
dd:cf:44:97:98:6f:1c:ce:ef:27:f7:e3:b3:8f:dd:6b:84:42:
1f:88:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:08 2026 by rpki-client