Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D221BE3FE111F181D3DABACE1D38B0.roa
File: 20D221BE3FE111F181D3DABACE1D38B0.roa (raw, json)
Hash identifier: o0pajxTvjrHjNOcHZbC1hblHR0XOjL0o0AKXcZ9Usec=
Subject key identifier: 38:67:E0:71:E4:AE:9C:33:04:94:C7:17:D7:03:5C:DF:F6:A1:F2:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D221BE3FE111F181D3DABACE1D38B0.roa
Signing time: Fri 24 Apr 2026 13:25:58 +0000
ROA not before: Fri 24 Apr 2026 13:25:53 +0000
ROA not after: Mon 01 Jun 2026 13:25:53 +0000
asID: 11427
IP address blocks: 156.229.192.0/19 maxlen: 24
156.233.128.0/20 maxlen: 24
156.233.160.0/19 maxlen: 24
156.241.16.0/20 maxlen: 24
156.241.48.0/20 maxlen: 24
156.243.160.0/20 maxlen: 24
156.243.184.0/22 maxlen: 24
156.243.236.0/22 maxlen: 24
156.248.32.0/19 maxlen: 24
156.248.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110336 (0x1af00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:25:53 2026 GMT
Not After : Jun 1 13:25:53 2026 GMT
Subject: CN=69eb6f66-f9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:24:da:ce:b4:5a:d1:0b:e0:ea:d1:94:b8:
f0:bd:39:5d:50:21:ae:38:b1:dc:24:38:fc:cb:92:
7b:87:22:2b:7f:7e:6f:d4:be:89:53:0d:d4:fe:8e:
15:80:a7:0e:06:5e:5a:f8:5b:ca:a3:f6:e2:71:74:
d6:c3:1d:a3:50:70:78:e1:9a:eb:4b:e2:22:dd:58:
39:8d:3d:45:d1:be:eb:10:0e:12:20:4d:05:ad:e8:
7b:24:06:23:d7:22:d3:cd:29:7a:24:ae:ec:49:54:
86:a2:4c:34:10:75:ff:8f:07:a8:b0:8b:24:4d:50:
91:ac:10:8c:e2:eb:d3:e3:02:22:8a:49:e9:86:b6:
4a:59:cb:a8:20:37:c6:7c:fe:6f:f5:c5:4d:fc:76:
04:ed:f5:35:a6:ec:d7:40:5f:f2:d8:86:05:1e:80:
7c:ab:17:21:6a:6c:82:cb:c2:7c:0f:6d:3d:01:ea:
a8:21:ea:e4:e6:f9:15:63:b8:0d:c8:90:c9:c3:ef:
fc:b6:43:3f:cb:5b:b0:1f:f5:e8:5d:b4:8d:ab:ff:
97:c8:72:ad:46:60:42:44:4e:1d:70:b8:8e:94:9d:
79:05:3d:a2:c3:b9:1b:c0:12:1b:f1:26:fb:92:d8:
8e:17:c1:77:06:e4:53:f6:92:c1:25:75:29:98:3f:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:67:E0:71:E4:AE:9C:33:04:94:C7:17:D7:03:5C:DF:F6:A1:F2:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/20D221BE3FE111F181D3DABACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.192.0/19
156.233.128.0/20
156.233.160.0/19
156.241.16.0/20
156.241.48.0/20
156.243.160.0/20
156.243.184.0/22
156.243.236.0/22
156.248.32.0/19
156.248.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:d0:5f:41:63:00:0e:7d:a1:92:63:0a:0d:8a:02:1b:b6:b6:
ea:48:61:3c:73:51:0b:e5:88:bb:e0:dd:b5:6d:61:ef:8a:c1:
7b:09:35:01:73:ed:99:37:2e:71:2e:2a:0e:44:0b:07:1e:8d:
b5:22:14:91:08:bf:ab:84:44:72:f3:f9:b9:35:73:8b:f9:73:
2c:1d:9f:32:e8:f1:c4:ba:b5:55:5e:bb:66:41:b3:ce:f2:81:
c8:1e:5d:2a:7d:95:08:33:f7:95:65:7d:03:6d:c6:99:33:8a:
0a:88:47:c3:78:5c:c3:a7:57:f3:fb:ac:bf:b8:91:4b:15:59:
ec:e4:f0:01:18:61:92:99:e9:43:ac:9a:cf:c7:40:3e:44:68:
e0:f1:4a:41:c2:7d:20:18:4c:97:34:0a:e4:37:60:bb:52:d4:
73:b7:fb:cf:59:d0:5a:e5:5a:3e:c5:ec:2c:fa:9a:2e:2e:bc:
08:02:4f:21:a4:87:12:f7:da:2d:ad:39:d0:7f:be:92:d8:70:
9a:eb:1c:79:d6:43:ef:d2:4e:9c:8f:99:1e:bd:94:26:88:69:
a7:ac:7b:a6:a1:41:7e:ca:ba:db:22:27:e1:cd:c2:1d:d1:bd:
ec:81:c2:44:4d:e9:7c:aa:68:62:e6:cb:ac:5f:75:b3:d6:7d:
35:14:b0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:05 2026 by rpki-client