Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D19C6C84CE11F182B6C8C3CE1D38B0.roa
File: 20D19C6C84CE11F182B6C8C3CE1D38B0.roa (raw, json)
Hash identifier: tmfSUcYygRptCkLAf5CXC88lOxp0cS9VN1Y7IhVzkk8=
Subject key identifier: 6A:55:2E:EF:E4:6D:2A:3E:F0:01:5B:D8:33:30:D8:BF:BB:42:9A:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C694
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D19C6C84CE11F182B6C8C3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:33:48 +0000
ROA not before: Tue 21 Jul 2026 06:33:44 +0000
ROA not after: Tue 01 Sep 2026 06:33:44 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.242.66.0/24 maxlen: 24
156.242.67.0/24 maxlen: 24
156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116372 (0x1c694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 06:33:44 2026 GMT
Not After : Sep 1 06:33:44 2026 GMT
Subject: CN=6a5f12cc-33ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:fe:5a:c7:c4:08:1c:e3:8c:07:87:f1:b6:
f1:00:59:8a:a1:3d:bb:39:34:10:7a:fc:74:98:15:
24:eb:c3:54:86:f3:a2:5d:26:a5:2b:44:8e:7a:8b:
97:c7:ef:77:5a:8e:e2:6e:6c:c7:85:88:fb:7d:11:
6c:2f:d7:5d:8b:68:cf:b3:79:0f:fc:eb:6d:0c:ee:
b3:38:a0:d5:9e:1d:b9:b6:5e:4c:69:c1:1b:3f:b0:
a2:59:c9:9f:c2:5b:33:2a:12:e9:ae:ea:d5:18:ee:
05:40:8f:3a:7c:6e:fd:b1:ad:68:b0:31:6a:d0:c1:
fd:a9:92:ba:52:36:56:d5:02:74:60:60:39:2f:13:
8c:4a:50:f4:db:e6:d4:09:eb:49:a0:34:ae:8d:39:
53:87:a2:b5:3e:dc:f8:cc:a9:e5:62:14:0e:88:29:
ef:00:5b:75:1d:cf:69:bd:24:bf:9e:34:04:9d:cc:
69:41:f3:d0:f1:82:0a:4c:a9:53:78:46:b8:b0:d5:
04:5d:80:af:82:c8:7b:39:c6:5c:da:a0:7d:35:af:
3a:7d:7d:1e:0d:9b:af:4c:bc:4e:5d:58:60:6d:67:
5a:dd:20:5d:f8:67:0c:6f:66:ff:01:08:36:7a:fd:
ec:e1:05:0e:e3:71:0f:d1:46:3b:a6:7b:51:a6:24:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:2E:EF:E4:6D:2A:3E:F0:01:5B:D8:33:30:D8:BF:BB:42:9A:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D19C6C84CE11F182B6C8C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.242.66.0-156.242.68.255
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:eb:d1:8b:31:17:be:4a:58:8e:03:bc:d8:82:f4:f0:37:dc:
7e:f7:7b:17:7e:42:f4:9c:df:fa:12:20:57:bd:45:a6:43:c7:
76:fd:a8:05:b7:03:0e:0f:1a:bf:43:0b:e6:27:f5:62:a6:b0:
f4:2f:43:17:84:5e:67:1d:40:75:da:71:d2:91:8f:db:7b:5f:
a7:7b:3c:32:f2:c3:27:ca:28:3c:48:cb:6a:80:87:78:c7:3d:
3a:39:31:09:7e:e9:a7:60:46:b7:be:c6:3e:1b:60:fd:fd:fa:
76:23:e2:12:87:2e:01:d7:2b:b5:cd:94:77:cf:a5:19:61:32:
6e:08:44:19:fd:32:1a:69:8d:b2:25:e4:df:20:1c:3f:fd:a2:
0f:d6:b3:35:1d:34:61:be:b3:c1:cc:af:75:04:ef:7a:50:ae:
40:e6:c4:b7:56:8b:32:b7:1f:65:54:47:e4:19:1c:af:83:f6:
57:a0:fe:72:01:4a:8a:c1:a0:2c:ec:cd:ed:57:38:bc:d2:a3:
b6:ee:46:7b:b7:cb:4c:6f:e7:44:59:35:fa:bc:19:06:42:ae:
aa:cc:55:03:71:e2:a9:d6:1b:b7:59:b6:60:f0:0d:2c:dc:6c:
2e:7a:0f:e5:25:2d:a8:bd:8b:57:56:81:54:9a:3a:bd:dc:a6:
ff:5c:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:57 2026 by rpki-client