Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C772964831111F1B2632717CF1D38B0.roa
File: 3C772964831111F1B2632717CF1D38B0.roa (raw, json)
Hash identifier: BF0oEqAj+xTsrnsWDkB7D5Lli2x4I1D1jJ7ku0U+g3U=
Subject key identifier: 3B:2A:2C:06:A7:0A:58:B4:2D:25:2F:65:5E:AC:5F:F3:9D:6E:09:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C611
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C772964831111F1B2632717CF1D38B0.roa
Signing time: Sun 19 Jul 2026 01:29:08 +0000
ROA not before: Sun 19 Jul 2026 01:29:04 +0000
ROA not after: Sun 26 Jul 2026 01:29:04 +0000
asID: 17497
IP address blocks: 156.231.70.0/23 maxlen: 24
156.231.70.0/24 maxlen: 24
156.231.88.0/22 maxlen: 24
156.231.88.0/23 maxlen: 24
156.231.88.0/24 maxlen: 24
156.231.92.0/22 maxlen: 24
156.231.92.0/23 maxlen: 24
156.231.92.0/24 maxlen: 24
156.238.12.0/23 maxlen: 24
156.238.12.0/24 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.28.0/23 maxlen: 24
156.238.28.0/24 maxlen: 24
156.238.60.0/22 maxlen: 24
156.238.60.0/23 maxlen: 24
156.238.60.0/24 maxlen: 24
156.242.64.0/23 maxlen: 24
156.242.64.0/24 maxlen: 24
156.242.100.0/22 maxlen: 24
156.242.100.0/23 maxlen: 24
156.242.100.0/24 maxlen: 24
156.242.104.0/22 maxlen: 24
156.242.104.0/23 maxlen: 24
156.242.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116241 (0x1c611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 01:29:04 2026 GMT
Not After : Jul 26 01:29:04 2026 GMT
Subject: CN=6a5c2864-594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:0b:9a:8f:f2:1c:fd:d9:d5:3b:83:ea:46:
0e:fc:50:ba:27:2d:24:2b:60:f0:25:dc:09:4f:94:
34:23:26:f1:8d:78:2f:d5:15:43:a8:41:4e:12:5f:
07:77:11:47:99:3e:f8:d5:26:b8:2e:18:4b:aa:1a:
05:dc:19:dc:31:5f:7f:df:c6:54:52:9f:34:15:39:
21:40:15:1c:00:a3:6d:73:61:83:e0:e3:aa:3a:a8:
9b:51:c2:52:93:44:60:f0:ae:80:47:3b:de:20:14:
2c:49:d5:fd:aa:3f:b6:b0:60:94:31:f9:4b:7b:ca:
c5:ce:60:1d:7d:2b:6e:3c:19:f3:42:b3:46:2c:fa:
a1:ef:89:19:8c:d1:69:de:81:ac:dc:91:f2:56:77:
2c:8f:c6:e5:f6:1b:2b:21:88:19:c2:3c:b5:56:3d:
db:2e:1d:b1:02:c6:47:3b:db:71:f3:f1:78:da:51:
16:a5:dc:b1:7f:65:0d:54:0d:d8:76:21:cd:91:43:
a8:f0:22:d6:50:9e:5c:5e:b1:ae:26:b2:a3:b3:16:
3c:69:52:b2:d7:6f:24:63:29:89:eb:86:84:35:ff:
80:02:84:83:db:79:8d:b0:44:ee:4a:58:7a:eb:20:
a0:fc:71:d0:e3:34:58:88:e6:9c:64:ee:eb:08:8b:
e5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:2C:06:A7:0A:58:B4:2D:25:2F:65:5E:AC:5F:F3:9D:6E:09:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C772964831111F1B2632717CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.70.0/23
156.231.88.0/21
156.238.12.0/23
156.238.28.0/22
156.238.60.0/22
156.242.64.0/23
156.242.100.0-156.242.107.255
Signature Algorithm: sha256WithRSAEncryption
7e:c5:62:79:82:e0:39:0d:03:41:ee:77:7c:4d:d7:3a:68:fd:
ee:c5:8f:75:d9:5a:b3:0c:f5:15:57:48:dc:0f:0f:c6:f4:43:
f0:90:4a:a1:95:29:b0:c3:a3:a4:d0:a3:ce:9a:32:1c:45:e0:
c9:4e:a2:66:0c:ec:ee:c2:f9:c8:45:f9:6b:a1:73:53:1c:94:
be:ec:8d:b9:a7:a7:23:c8:bc:9e:f3:6e:ec:80:81:fe:40:b9:
41:83:e4:93:d6:71:02:32:c6:0b:7c:f5:b6:55:dd:d8:6d:07:
e8:4c:0a:1d:9b:84:e3:09:d6:13:fc:fb:67:ee:7e:83:9f:46:
e0:03:80:b8:f8:65:5f:58:ff:c3:cd:51:0b:e8:f6:2a:eb:9a:
ac:56:95:66:47:b5:1a:e7:cb:7f:d1:d4:9f:e1:d6:bc:5e:77:
7c:69:c6:7d:3d:c9:84:a5:38:a9:da:4d:00:2a:90:b5:0f:ea:
e1:ef:b2:b9:7e:e2:bb:f9:64:0f:ab:b4:a1:45:5b:23:b8:75:
f8:c9:a3:6f:51:7c:2c:27:1e:99:86:d8:08:cf:7a:a5:db:71:
cd:6d:5e:45:8c:52:ce:1f:6e:36:56:68:32:45:41:e6:09:d3:
88:a7:7b:37:f3:79:ab:58:6b:b5:62:54:b2:a2:5f:88:1b:df:
a1:bf:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:00:33 2026 by rpki-client