Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB917B24C8511F189195EA8CE1D38B0.roa
File: 1CB917B24C8511F189195EA8CE1D38B0.roa (raw, json)
Hash identifier: R4+3UOsuCAt48lmnv+tOYB4JMwvEvyqkax4yN/4ApYs=
Subject key identifier: E2:02:D5:64:59:12:38:11:DA:20:A2:3E:C3:A7:EE:3D:AB:63:5C:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B361
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB917B24C8511F189195EA8CE1D38B0.roa
Signing time: Sun 10 May 2026 15:30:02 +0000
ROA not before: Sun 10 May 2026 15:29:57 +0000
ROA not after: Sun 21 Jun 2026 15:29:57 +0000
asID: 401783
IP address blocks: 156.252.9.0/24 maxlen: 24
156.252.177.0/24 maxlen: 24
156.252.178.0/24 maxlen: 24
156.252.179.0/24 maxlen: 24
156.252.180.0/24 maxlen: 24
156.252.181.0/24 maxlen: 24
156.252.182.0/24 maxlen: 24
156.252.183.0/24 maxlen: 24
156.252.184.0/24 maxlen: 24
156.252.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111457 (0x1b361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 15:29:57 2026 GMT
Not After : Jun 21 15:29:57 2026 GMT
Subject: CN=6a00a47a-5219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:da:08:f6:51:80:80:c0:37:96:af:22:d0:1a:
4a:1a:a8:52:eb:25:36:f5:cf:ff:d0:5a:4c:cd:4f:
76:39:48:d1:0e:65:38:95:b9:2f:80:5f:1d:23:b9:
9c:39:cc:e2:56:d3:3b:a5:39:e8:7c:5d:f0:99:16:
18:89:f8:35:a9:70:06:97:09:33:30:e8:82:d2:61:
23:a6:42:2d:24:b2:97:7b:b2:aa:f5:f5:fe:25:dd:
87:74:07:61:f5:18:47:73:1f:19:e2:3d:53:21:97:
e9:83:2b:02:f7:05:e7:dd:50:0b:2a:65:a5:4d:f9:
c0:71:d0:56:b0:a6:6b:6d:23:66:bf:9d:38:3c:e3:
ec:46:c8:80:ad:df:9b:b1:0a:e2:f5:32:5b:b8:e8:
04:d1:f5:aa:17:4b:33:24:ce:d3:98:e1:0f:fb:2a:
c6:ef:d2:2d:1b:69:8d:bf:ce:69:2c:1e:84:cd:9d:
6b:b6:39:f6:43:87:dc:4c:b1:2c:c4:a8:10:fb:24:
95:be:ab:80:cc:1b:c1:90:7b:a5:14:1a:9c:ce:0f:
b4:37:ac:93:44:e2:54:83:1f:53:17:7d:8e:ce:1d:
3f:ba:90:db:b0:70:b6:24:39:7a:22:69:97:6b:61:
e3:14:db:7d:e0:f2:20:34:0c:55:7b:a8:f1:ff:c2:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:02:D5:64:59:12:38:11:DA:20:A2:3E:C3:A7:EE:3D:AB:63:5C:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB917B24C8511F189195EA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.9.0/24
156.252.177.0-156.252.184.255
156.252.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e9:bf:09:bb:04:f2:eb:0e:7a:66:83:82:12:fb:9f:a1:f4:
f7:fe:ad:d7:07:e1:96:d9:1a:32:b6:d0:8f:b0:f1:58:a4:5d:
b3:d9:4d:f0:8d:80:53:05:8e:2c:02:de:f0:64:a2:c4:32:cb:
38:0e:7a:96:0e:80:fc:40:38:08:52:7c:74:0d:5b:2c:58:50:
86:87:c1:29:45:2d:6b:96:ad:22:d2:2f:6d:ab:4d:8f:b9:98:
0b:36:9c:fc:96:b8:2e:e0:29:1f:ef:e1:9e:f5:32:98:6a:ea:
ab:37:09:e3:a0:23:c5:0c:10:bf:60:ef:cc:f7:45:fa:a9:30:
4d:66:e2:fd:36:9d:7a:d4:d0:4f:fc:dd:54:2b:a2:08:55:6e:
b8:94:6d:a4:b3:ed:be:ba:9b:ce:06:61:8c:29:c3:c1:f3:e6:
6b:ab:92:5d:01:e1:8f:df:ce:03:29:67:c8:57:52:74:55:c6:
4e:17:1a:1d:29:91:8a:f4:7b:97:8f:dc:67:c3:bb:e7:c1:50:
41:f7:a0:8d:53:20:0b:05:e5:e9:15:35:17:11:0f:e3:7b:fa:
80:bc:7d:46:e1:54:11:72:f5:6d:8d:19:e0:aa:a1:ab:0b:40:
3b:b4:93:a0:1d:f7:b0:9c:98:6e:48:c7:ca:c2:4f:b5:63:b1:
6e:3b:22:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:40:20 2026 by rpki-client