Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E6C78E3E9C11F1A8ADA2EBCE1D38B0.roa
File: 27E6C78E3E9C11F1A8ADA2EBCE1D38B0.roa (raw, json)
Hash identifier: JbJsozp6t9cJtyxv56EYZSObLoR/lcQOmQ9zylESmtw=
Subject key identifier: 4E:43:DA:34:F6:5B:39:EB:61:04:9B:A8:7F:31:61:C9:44:11:8A:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E6C78E3E9C11F1A8ADA2EBCE1D38B0.roa
Signing time: Wed 22 Apr 2026 22:39:43 +0000
ROA not before: Wed 22 Apr 2026 22:39:38 +0000
ROA not after: Thu 28 May 2026 22:39:38 +0000
asID: 44559
IP address blocks: 156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110196 (0x1ae74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 22:39:38 2026 GMT
Not After : May 28 22:39:38 2026 GMT
Subject: CN=69e94e2f-7e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:6e:60:ef:3c:fe:77:1f:6e:66:4f:ba:ca:
4d:0f:fd:78:92:68:5b:76:1c:5c:76:de:8d:37:9e:
c8:24:cb:17:80:2d:9a:dd:e4:26:9b:b9:c2:a7:e3:
9d:d9:8c:f7:4e:5e:69:ef:d6:6a:45:99:1e:84:e0:
de:e9:1a:f5:55:70:e3:dc:8c:0d:28:3d:0d:3b:15:
96:cf:24:d9:a0:d7:e1:3b:a3:a1:b7:ca:75:b9:a2:
d2:25:d6:0b:d2:6c:16:17:10:3b:44:e8:2f:58:92:
1a:15:a1:39:78:b9:72:c5:34:d2:35:6e:ca:d7:d3:
6f:a2:dd:af:4a:28:82:59:0e:2a:d9:26:4e:77:a2:
8b:30:35:f0:ff:2a:cf:b7:fe:7c:f1:e7:bf:63:2c:
ae:d1:6b:ae:89:40:fa:9a:7d:9b:6a:f5:3a:7e:1b:
b7:b4:26:e9:88:5e:e3:b5:7e:ec:56:b9:4a:40:f0:
f7:38:14:a0:9a:80:df:ba:64:cc:62:a6:d0:d0:00:
b5:e4:98:70:02:4d:b0:86:57:71:a4:d2:51:f7:23:
c1:fc:e7:7b:85:f5:61:a1:7e:73:03:55:9f:27:cb:
df:68:76:a2:a1:81:28:75:bc:35:09:9b:1a:d9:01:
2b:b2:e4:71:14:b7:6a:a5:4b:da:bc:a0:7c:45:16:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:43:DA:34:F6:5B:39:EB:61:04:9B:A8:7F:31:61:C9:44:11:8A:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E6C78E3E9C11F1A8ADA2EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.209.0-156.246.228.255
Signature Algorithm: sha256WithRSAEncryption
97:dc:0c:02:b7:f4:37:56:13:c0:30:1f:1b:a6:10:88:68:52:
b4:8e:b7:3c:d6:73:84:4b:df:d7:3d:8c:45:f2:30:92:ff:67:
0c:d2:29:37:e8:0f:ef:e5:5b:db:b7:3a:6d:0e:7b:de:ae:cf:
69:37:f8:1e:48:9f:f8:1b:01:e9:50:18:fc:0c:11:ab:9f:35:
a5:29:b6:38:07:3d:df:98:49:b0:5c:cb:98:1d:bf:29:04:bf:
3d:5a:02:b7:b2:dd:e5:a6:11:e6:9f:d1:66:4f:be:d0:20:76:
0b:3d:89:bf:a8:6c:25:e0:8b:30:dc:a8:d6:e0:eb:76:ca:e2:
79:04:05:34:5e:9c:e8:61:6f:9f:f1:ef:59:7e:d7:30:2d:e4:
35:91:80:8d:2e:04:a2:2d:2e:ee:7f:b2:58:02:77:d5:d0:7b:
1e:0f:35:cd:9b:83:ad:7b:02:fa:ed:e3:a6:a7:82:74:9d:aa:
c6:ba:15:69:87:88:7e:f1:d2:a0:aa:09:d4:85:10:12:61:01:
85:8a:12:f8:4b:a2:b5:71:d4:fa:7a:0c:3d:bc:2d:e3:00:7d:
81:08:08:66:04:66:5a:c3:35:5e:63:1e:9e:a3:5b:10:3d:0c:
45:35:3f:4b:41:0d:ad:3e:90:71:86:22:7d:f8:61:45:07:c7:
1a:8b:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:28:41 2026 by rpki-client