Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F08D986850C11F1B3C4CFB7CE1D38B0.roa
File: 4F08D986850C11F1B3C4CFB7CE1D38B0.roa (raw, json)
Hash identifier: 5fbuR36wmY2YUjpij7FNeAiMsLKXjPynk128cyQXxxY=
Subject key identifier: 6C:43:D6:3A:5B:00:10:D9:67:2A:27:E1:77:5A:BB:57:9E:99:8D:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C730
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F08D986850C11F1B3C4CFB7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:58:54 +0000
ROA not before: Tue 21 Jul 2026 13:58:50 +0000
ROA not after: Wed 09 Sep 2026 13:58:50 +0000
asID: 32043
IP address blocks: 156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
156.243.241.0/24 maxlen: 24
156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.249.140.0/24 maxlen: 24
156.249.141.0/24 maxlen: 24
156.249.142.0/24 maxlen: 24
156.249.143.0/24 maxlen: 24
156.249.144.0/24 maxlen: 24
156.249.152.0/24 maxlen: 24
156.249.155.0/24 maxlen: 24
156.249.156.0/24 maxlen: 24
156.249.157.0/24 maxlen: 24
156.249.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116528 (0x1c730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:58:50 2026 GMT
Not After : Sep 9 13:58:50 2026 GMT
Subject: CN=6a5f7b1e-b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:0f:c1:24:ee:04:9e:80:b2:a4:ab:59:61:
3c:f0:15:c6:4d:d0:49:ed:a5:d3:e5:d3:c0:3c:88:
63:19:79:6e:cb:ce:c5:94:33:0e:bf:c5:33:16:1c:
ef:4e:23:fc:26:bb:90:02:99:58:27:a8:00:ff:ad:
36:c5:63:98:f0:37:e0:58:a4:69:f5:70:12:9f:33:
1c:13:ba:04:86:04:3c:f8:f2:37:04:54:fe:a2:90:
93:12:fb:9b:aa:ac:15:09:30:63:6b:12:b8:fc:16:
03:dd:54:13:3c:25:28:6f:88:89:17:c3:18:b3:2f:
86:c4:36:5a:58:97:70:69:61:52:f2:75:3e:e5:c8:
7f:77:98:a8:00:bb:e1:30:f7:51:0e:d0:1d:c1:f6:
72:af:69:68:34:4c:18:64:9b:ea:0c:fc:80:bb:20:
e2:9c:38:82:da:68:b5:63:15:bc:7a:8a:f9:30:39:
33:e4:37:ef:51:a1:74:2a:9b:37:45:8e:4e:22:10:
48:20:e8:6e:d6:90:60:86:11:72:90:c1:6b:d2:ae:
1f:78:a6:70:ee:76:00:f0:d8:71:ad:0a:01:cb:74:
58:1a:a8:04:82:4f:ce:3e:73:ed:5e:34:f0:8c:1c:
de:00:7a:e8:80:4e:b1:3e:3a:44:74:9b:97:8f:67:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:D6:3A:5B:00:10:D9:67:2A:27:E1:77:5A:BB:57:9E:99:8D:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F08D986850C11F1B3C4CFB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.48.0/21
156.243.241.0/24
156.249.137.0-156.249.138.255
156.249.140.0-156.249.144.255
156.249.152.0/24
156.249.155.0-156.249.157.255
156.249.160.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c3:ea:59:f3:f1:b1:24:92:25:9d:e2:f8:b0:55:27:a0:5b:
80:8c:fc:7d:6d:f4:33:80:2f:2e:34:5d:d1:8e:5d:80:19:e9:
ee:45:0c:ce:a8:0f:9d:50:59:ba:0f:fa:5c:a6:60:76:c1:bd:
71:ed:4c:c6:74:69:55:63:f4:b6:f8:aa:43:5e:89:21:fc:17:
b0:e6:c3:83:74:fd:9c:60:73:24:d4:c2:10:3f:94:a8:79:85:
4c:64:f8:8c:8f:63:ec:33:94:56:c1:af:96:00:33:98:35:56:
a9:0a:d3:5f:f9:98:4d:57:c1:1f:16:c3:32:1f:5d:14:e9:be:
87:62:f9:65:0f:8f:3d:ef:f5:32:17:8f:a7:ca:7c:2a:ca:d2:
d2:2e:a4:24:05:d6:ff:7f:15:e7:5e:c7:0c:a8:b1:c0:dc:80:
57:e9:87:eb:db:63:30:75:5b:14:f4:15:59:04:5b:fc:93:90:
55:ab:5f:c7:79:47:79:88:c9:ef:b4:fc:44:c8:1f:af:ed:f4:
10:6d:f9:8b:96:8a:49:ed:f8:6d:dc:12:5c:5a:f6:cf:3f:94:
41:81:1f:5e:38:5c:32:c2:40:35:4f:5b:0c:50:57:76:59:e2:
14:b0:50:38:c8:b8:70:da:38:b3:f9:b0:f3:78:14:e2:fd:74:
ae:7d:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:06 2026 by rpki-client