Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587529224E3711F182D72CF2CE1D38B0.roa
File: 587529224E3711F182D72CF2CE1D38B0.roa (raw, json)
Hash identifier: gSKQ2x4+dOUcEFEuCczYZn3c+1Xin5X7ShyZzunOBpA=
Subject key identifier: B9:6C:0D:33:E7:EE:C0:47:41:79:FA:99:48:41:AD:18:39:98:54:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B401
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587529224E3711F182D72CF2CE1D38B0.roa
Signing time: Tue 12 May 2026 19:18:24 +0000
ROA not before: Tue 12 May 2026 19:18:19 +0000
ROA not after: Tue 16 Jun 2026 19:18:19 +0000
asID: 22773
IP address blocks: 156.233.243.0/24 maxlen: 24
156.233.244.0/24 maxlen: 24
156.233.245.0/24 maxlen: 24
156.233.246.0/24 maxlen: 24
156.233.247.0/24 maxlen: 24
156.233.248.0/24 maxlen: 24
156.233.249.0/24 maxlen: 24
156.233.250.0/24 maxlen: 24
156.233.251.0/24 maxlen: 24
156.238.161.0/24 maxlen: 24
156.238.163.0/24 maxlen: 24
156.238.164.0/24 maxlen: 24
156.238.165.0/24 maxlen: 24
156.238.166.0/24 maxlen: 24
156.238.167.0/24 maxlen: 24
156.238.168.0/24 maxlen: 24
156.242.120.0/24 maxlen: 24
156.243.193.0/24 maxlen: 24
156.243.194.0/24 maxlen: 24
156.243.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111617 (0x1b401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 19:18:19 2026 GMT
Not After : Jun 16 19:18:19 2026 GMT
Subject: CN=6a037d00-b830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:15:78:30:57:fc:94:42:d3:23:78:f5:09:e1:
b6:ab:6e:bd:1c:3c:5e:03:bc:e5:29:2f:79:f6:e5:
97:07:30:85:2d:30:aa:7b:75:5f:14:63:2a:0b:1f:
7d:35:34:4b:c8:c1:cc:bf:8b:3d:43:bc:19:d0:b2:
a4:dc:50:f5:ea:39:87:40:52:6e:d9:51:62:2a:26:
6b:79:a3:60:b9:28:23:6a:95:f0:ee:a7:95:49:45:
a2:e2:82:81:6c:ea:2b:5d:a3:97:6b:7c:a9:f3:63:
e1:1c:83:ef:da:4e:03:36:45:86:5e:e5:16:47:dd:
68:0f:a5:64:5d:24:39:36:cf:7d:de:e8:d4:44:2f:
c4:22:4a:8b:fc:19:25:2d:0d:23:43:5d:a6:36:e2:
69:0a:9b:b4:4e:18:8d:c4:15:3a:72:00:73:83:25:
6e:f4:3e:65:86:c7:dd:e3:6e:c4:a6:c8:c1:0a:9f:
04:6f:50:ef:21:89:e7:e3:55:65:c9:21:be:38:34:
5a:31:71:32:b5:cf:d8:6d:75:71:ee:be:16:bf:f6:
3e:ca:41:9e:9d:12:40:8b:bf:1f:ee:c6:fe:47:f9:
4b:8e:3e:d9:bc:98:47:72:6a:79:a0:f5:36:c1:33:
7f:3f:80:66:91:ea:76:de:3a:b2:da:56:7a:3d:9b:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6C:0D:33:E7:EE:C0:47:41:79:FA:99:48:41:AD:18:39:98:54:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587529224E3711F182D72CF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.243.0-156.233.251.255
156.238.161.0/24
156.238.163.0-156.238.168.255
156.242.120.0/24
156.243.193.0-156.243.195.255
Signature Algorithm: sha256WithRSAEncryption
7f:a0:86:cd:c8:7d:45:d3:ea:d3:6f:b1:7b:ba:93:38:bd:03:
c5:34:30:b3:3c:69:86:c5:6a:b0:74:6c:c5:2c:02:1a:d1:74:
3b:6d:b2:92:07:f1:64:cf:65:1e:89:b2:62:83:33:d8:67:c9:
0f:39:5c:e8:a0:29:16:78:35:33:68:73:df:a9:8f:75:85:2b:
f8:62:c4:ec:72:ff:e2:0c:b3:2b:63:13:77:85:db:90:d5:c0:
31:6a:95:c4:da:37:2c:f5:32:16:0d:b3:74:d1:cb:e9:39:b7:
fe:54:ff:ba:30:95:ed:78:c7:a0:30:de:b7:c9:0a:af:cf:8b:
59:c4:23:65:8b:16:7c:69:7b:1a:d4:ed:50:46:ee:69:bf:fe:
03:46:3e:26:8e:d1:46:a0:0d:19:d5:b7:6b:36:be:17:ec:a3:
93:3a:43:41:82:65:e8:7d:ee:4d:0b:37:02:c4:d7:8d:e3:b9:
74:14:e8:f0:8a:dc:4e:55:12:ad:3f:8a:8d:80:53:b3:24:84:
01:0a:4d:91:ee:34:80:c7:61:24:e9:b5:fe:e3:92:2f:3f:03:
6c:08:97:9a:1a:97:05:16:e7:bf:56:4b:70:24:7d:d9:6c:85:
28:5b:a9:1e:57:a0:1d:81:e0:5f:76:c0:e8:f0:74:65:b6:64:
1e:07:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:13 2026 by rpki-client