Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BDD75649D511F1813B5FDBCE1D38B0.roa
File: 34BDD75649D511F1813B5FDBCE1D38B0.roa (raw, json)
Hash identifier: LynxYse9M8Lwymuhgy7i8vQNlwLismFxqsVeDksPZXg=
Subject key identifier: 0F:8D:D3:74:8D:EE:18:95:22:66:81:2C:F6:CE:69:DB:BB:85:2A:CA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B209
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BDD75649D511F1813B5FDBCE1D38B0.roa
Signing time: Thu 07 May 2026 05:25:49 +0000
ROA not before: Thu 07 May 2026 05:25:44 +0000
ROA not after: Fri 15 May 2026 05:25:44 +0000
asID: 137443
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111113 (0x1b209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 05:25:44 2026 GMT
Not After : May 15 05:25:44 2026 GMT
Subject: CN=69fc225d-de67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a1:68:12:36:dc:6b:9a:cf:51:fd:85:e0:cc:
8c:7a:a2:2d:40:e7:ce:94:19:03:d0:9b:5f:80:56:
25:51:74:ba:c9:43:88:fe:8c:ab:a1:9c:85:ff:de:
a6:fa:4c:ad:3a:3f:b1:61:f5:fc:e5:be:bf:4d:6e:
b4:a7:53:2b:84:3f:ba:c2:d4:11:d4:7f:be:a2:6d:
6f:70:6b:ce:f9:2c:fc:6a:3a:7c:6f:7e:d7:17:45:
09:cd:c3:b5:d6:43:52:48:4c:6c:76:20:19:7c:4c:
9c:f7:e7:f0:c7:96:53:26:73:f2:80:98:55:0e:97:
d5:5d:42:e4:56:92:9e:29:41:66:f4:e6:63:d0:b9:
ca:5a:65:b7:48:e4:ff:59:23:63:23:e7:22:57:23:
4b:69:b6:19:42:cd:84:39:16:e9:5f:bc:64:90:48:
be:f0:f4:7f:85:d6:5b:f8:cb:d4:3e:0d:02:34:dd:
3a:28:db:e7:e6:52:19:18:eb:a3:56:3b:0f:79:e9:
67:72:f8:6a:1e:2a:03:00:87:66:88:6b:d5:c2:3d:
6c:83:2e:cd:f0:23:d3:bd:15:c1:18:6c:4d:b0:f7:
3d:fc:5a:2b:33:7b:fa:78:a5:82:00:24:86:04:08:
13:ef:09:96:7c:d0:ef:f6:07:a4:4d:34:9a:87:b9:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:8D:D3:74:8D:EE:18:95:22:66:81:2C:F6:CE:69:DB:BB:85:2A:CA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34BDD75649D511F1813B5FDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:1d:88:53:af:44:73:dd:c8:8c:72:97:cf:4b:96:85:23:a1:
a8:2a:d8:33:13:1e:1f:32:f2:66:5b:cc:a8:8a:6a:31:a3:d4:
75:f8:48:c3:a8:b4:e2:bc:46:af:2c:06:ff:40:e6:d1:5d:92:
7d:ff:78:54:cf:2a:72:58:07:a7:b6:3e:55:4b:2f:3f:31:41:
98:60:d1:bb:17:2b:4b:de:45:b4:8b:b9:60:8c:6c:c4:7e:50:
10:be:29:54:a2:02:64:6a:d9:dd:f3:91:9e:17:42:d2:be:ce:
56:82:bb:fb:62:1a:14:40:e0:87:6e:40:5d:47:eb:84:a0:aa:
c9:58:2e:70:83:55:34:e7:77:bd:95:04:34:d8:ba:3d:36:4a:
8a:f0:aa:e2:b6:30:82:e7:ee:aa:06:4c:0c:0b:a9:8e:57:b8:
4a:3c:f0:5b:c3:35:19:12:19:d9:67:7f:ff:e3:9b:d2:c4:98:
d8:5c:3f:9c:c8:f7:68:94:b5:a5:15:a4:33:a8:0c:66:4e:24:
5a:08:6b:28:5d:9c:31:bd:ad:47:e6:fa:1b:db:5f:31:a2:4a:
f1:de:55:18:8b:1d:f0:0a:cc:16:27:d8:dc:cf:d9:36:c6:d8:
88:49:d4:4b:a4:57:ac:3f:ee:b5:6f:89:58:90:3c:6a:b0:9d:
75:39:be:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:39:32 2026 by rpki-client