Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CACEAC842711F1B92F71C3CE1D38B0.roa
File: 39CACEAC842711F1B92F71C3CE1D38B0.roa (raw, json)
Hash identifier: Y175WqRU5ST8YhVHNC8UyEiiUIdxjxU2q5kUZRgfAGk=
Subject key identifier: 15:11:36:78:C5:F4:1D:2D:0E:90:10:2F:4F:85:C1:1D:1E:D9:F7:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C66D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CACEAC842711F1B92F71C3CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:39:04 +0000
ROA not before: Mon 20 Jul 2026 10:39:00 +0000
ROA not after: Thu 27 Aug 2026 10:39:00 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116333 (0x1c66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:39:00 2026 GMT
Not After : Aug 27 10:39:00 2026 GMT
Subject: CN=6a5dfac8-abd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:0f:c3:5d:ee:12:74:2c:4f:95:b5:f5:7f:
a3:a7:ed:97:3a:54:e5:d8:6f:db:98:4a:b5:c1:91:
b2:a7:9b:75:36:4d:f2:93:32:4c:80:9a:3b:9e:dd:
9f:24:5f:a8:e5:85:df:2d:bc:76:57:c4:5c:df:90:
69:2c:f4:b9:3c:c5:29:70:ba:50:e0:c9:17:78:6a:
2b:6f:3d:02:6c:6a:b3:a2:38:4e:81:e4:2a:63:fa:
e7:8f:0f:53:f1:38:fb:06:f2:fc:5a:da:32:d1:15:
43:7e:b3:8a:f3:71:40:bf:3c:c8:4a:2c:e6:84:b7:
8b:1c:13:a6:79:2a:c7:ba:8b:a5:cf:d1:47:0d:2c:
35:b8:58:3c:92:36:7a:63:8e:b6:16:3d:d1:0d:df:
32:d5:0c:38:e1:e6:0c:57:3a:e7:4c:6d:f8:78:a4:
ff:1b:2c:11:00:38:d4:b2:0c:e5:45:19:c0:73:f6:
84:3f:f6:65:d7:9f:c0:02:fe:94:bd:c7:cb:60:65:
4f:b6:3c:5b:2b:f4:fa:fc:f8:03:2c:5b:1f:7f:83:
88:41:91:40:87:a3:03:15:7a:0a:d5:2d:03:80:db:
ba:82:09:9a:6f:8b:08:17:a4:02:a7:36:4c:75:49:
ce:73:c4:1e:b2:97:9a:18:6b:c1:12:1b:72:72:7f:
8e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:36:78:C5:F4:1D:2D:0E:90:10:2F:4F:85:C1:1D:1E:D9:F7:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39CACEAC842711F1B92F71C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.114.255
156.225.116.0/22
Signature Algorithm: sha256WithRSAEncryption
46:3d:5f:81:cf:9d:14:47:05:fd:d8:fc:66:7a:fa:09:36:96:
58:ff:f8:56:27:40:7a:67:30:7c:67:e8:00:6b:66:e2:9a:fc:
28:41:e5:58:53:85:5f:59:a8:59:f4:eb:1e:20:9a:51:63:f1:
0b:e5:78:dd:c6:9e:06:87:81:e5:bb:af:1c:c6:c7:22:98:11:
e2:55:8d:7f:06:c7:c9:77:4e:16:97:7b:26:ff:06:a1:45:7e:
4e:06:1a:6c:d5:2d:31:6b:8f:6b:c1:52:74:8a:d1:dc:dc:2c:
aa:bf:51:b2:59:86:b5:45:6e:98:36:8e:c2:2a:1a:b7:83:e3:
20:5e:81:31:22:f5:fc:e9:15:90:f7:07:28:6b:f0:d7:5d:3e:
07:01:47:6e:67:2f:fb:83:14:65:87:65:cd:66:0a:93:82:02:
82:07:d4:38:c5:3b:e0:a0:00:1d:58:74:e1:52:a5:c7:e8:d0:
40:9e:51:a5:5a:e8:5e:78:43:83:d7:7c:3d:82:f0:81:af:34:
f3:2b:c7:1d:76:d5:fc:0b:e5:6f:0d:68:73:78:df:a2:f8:4a:
61:36:70:5b:d7:7e:ef:bd:0a:e9:fc:16:61:83:3d:0c:7b:0b:
7f:08:d4:ae:4f:c2:a0:c5:d0:78:33:ea:8e:a0:9f:22:70:76:
80:fa:8c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:59 2026 by rpki-client