Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AB1D2C49F511F19FDA7619CF1D38B0.roa
File: 29AB1D2C49F511F19FDA7619CF1D38B0.roa (raw, json)
Hash identifier: 7naV1aID4PWF6r6DKxyIhj6fORNh6QDyGmo3ZKYPd4M=
Subject key identifier: 99:AB:91:57:B2:5E:7D:16:D7:E8:BB:3A:C3:00:6B:18:69:35:33:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B222
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AB1D2C49F511F19FDA7619CF1D38B0.roa
Signing time: Thu 07 May 2026 09:14:34 +0000
ROA not before: Thu 07 May 2026 09:14:29 +0000
ROA not after: Mon 07 May 2029 09:14:29 +0000
asID: 17561
IP address blocks: 156.232.179.0/24 maxlen: 24
156.232.180.0/24 maxlen: 24
156.232.181.0/24 maxlen: 24
156.232.182.0/24 maxlen: 24
156.232.183.0/24 maxlen: 24
156.232.184.0/24 maxlen: 24
156.232.185.0/24 maxlen: 24
156.232.186.0/24 maxlen: 24
156.232.187.0/24 maxlen: 24
156.232.188.0/24 maxlen: 24
156.232.189.0/24 maxlen: 24
156.232.190.0/24 maxlen: 24
156.232.191.0/24 maxlen: 24
156.232.192.0/24 maxlen: 24
156.232.193.0/24 maxlen: 24
156.232.194.0/24 maxlen: 24
156.232.195.0/24 maxlen: 24
156.232.196.0/24 maxlen: 24
156.232.197.0/24 maxlen: 24
156.232.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111138 (0x1b222)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:14:29 2026 GMT
Not After : May 7 09:14:29 2029 GMT
Subject: CN=69fc57fa-6c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:7f:d8:c0:c5:0c:d1:10:c1:30:d3:32:5d:
1a:e4:e1:f6:00:e3:6f:38:49:17:db:fd:fc:f1:f1:
ff:cf:d5:05:8c:7b:66:2c:53:77:b8:8a:e4:43:3e:
b7:7c:6f:0c:b5:49:28:17:91:73:87:a8:b7:a2:f8:
a8:db:6c:e4:50:1d:51:fd:6d:94:15:24:71:4e:9f:
2e:8f:c6:3d:78:c2:64:33:9f:04:b5:8c:3a:29:94:
f2:13:44:f6:6a:98:ae:26:f7:28:cf:ac:4d:f0:63:
b7:c2:38:fc:21:32:6e:0a:34:89:aa:85:45:b1:0a:
44:e5:6d:8b:ab:71:da:52:a6:2e:35:72:c6:92:a6:
5b:fc:ee:0f:83:04:87:2c:86:63:e0:0f:80:e8:3c:
c1:5a:87:46:51:99:d8:01:a7:b9:79:c0:da:b3:0f:
dd:6f:d4:c8:44:99:d0:d1:56:77:e0:a0:fe:fd:b1:
a6:3e:61:0c:6e:99:3a:60:8c:08:61:7b:05:db:a1:
32:c6:40:44:53:fc:af:a9:3b:c9:97:7e:ae:c8:05:
3d:44:66:5f:37:3a:08:ba:d7:02:1b:1f:a1:ec:8e:
d5:cc:51:23:79:a2:9b:65:ec:e5:02:2d:2a:dd:85:
e9:bb:41:9a:97:58:13:a8:6d:bb:d7:ff:3e:e3:ed:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:91:57:B2:5E:7D:16:D7:E8:BB:3A:C3:00:6B:18:69:35:33:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29AB1D2C49F511F19FDA7619CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.179.0-156.232.198.255
Signature Algorithm: sha256WithRSAEncryption
88:7c:70:b0:b0:5e:6d:6b:df:be:5a:fe:3d:6a:9c:24:f2:b2:
c9:e5:0f:0e:b1:af:6f:22:a0:49:0c:67:c4:66:cf:ee:69:4f:
a3:30:ec:c5:e4:1c:e9:a1:a0:5c:47:d2:6c:5b:24:b3:f3:f0:
40:c9:f7:28:74:bd:d4:3c:e1:ba:f9:1a:56:03:f0:68:60:0e:
10:df:16:bf:bf:2f:8d:1d:0e:47:17:fe:73:a2:32:f4:0d:48:
2b:f3:e5:03:5e:f9:5a:2f:7f:42:c0:29:d5:b4:54:32:8c:a8:
d5:78:c3:53:10:70:b5:10:18:ca:dc:5d:72:80:24:dd:db:23:
f6:15:be:3c:78:0a:7c:0d:62:e9:f8:36:84:80:e4:7a:99:89:
ce:46:a9:44:f1:90:ae:79:09:ba:e9:87:92:5d:1c:f6:82:7a:
a6:5c:35:58:d3:c1:72:6f:1d:22:1d:26:54:4a:79:fa:24:20:
fa:a7:03:83:ab:ad:73:f8:dc:eb:dd:cd:fe:cf:5d:31:b7:ab:
d5:fd:a7:2a:9c:19:15:6d:2b:14:79:69:c8:4c:6c:ab:8b:1c:
f6:c6:b2:71:ec:5b:d5:55:f3:40:a2:69:8b:4e:01:6e:10:6c:
af:1a:c3:ec:1b:09:60:2e:87:e6:2d:ba:55:39:12:26:8f:90:
8e:a0:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:07 2026 by rpki-client