Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6675A8164DD911F18C4271C4CE1D38B0.roa
File: 6675A8164DD911F18C4271C4CE1D38B0.roa (raw, json)
Hash identifier: dKiWt9GnYqiViFdsvss9zdEIPIf838nSoBEIoCO+j2M=
Subject key identifier: 55:78:4A:EF:A0:B2:C5:2F:2A:F0:2C:E8:5E:DB:60:B1:E2:DB:9A:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6675A8164DD911F18C4271C4CE1D38B0.roa
Signing time: Tue 12 May 2026 08:05:55 +0000
ROA not before: Tue 12 May 2026 08:05:50 +0000
ROA not after: Tue 16 Jun 2026 08:05:50 +0000
asID: 22773
IP address blocks: 156.233.252.0/24 maxlen: 24
156.242.19.0/24 maxlen: 24
156.242.231.0/24 maxlen: 24
156.242.232.0/24 maxlen: 24
156.242.233.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.102.0/24 maxlen: 24
156.243.103.0/24 maxlen: 24
156.243.104.0/24 maxlen: 24
156.243.105.0/24 maxlen: 24
156.243.106.0/24 maxlen: 24
156.243.107.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111587 (0x1b3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 08:05:50 2026 GMT
Not After : Jun 16 08:05:50 2026 GMT
Subject: CN=6a02df63-e82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3a:bf:d8:59:fe:77:b3:4b:94:75:51:5c:d6:
2d:5c:53:5b:5b:7c:bc:60:d9:03:fd:eb:40:c5:fe:
bc:65:ca:0c:04:f5:61:f5:b5:9e:2c:a1:1b:26:83:
3b:f5:20:87:f5:ac:e4:1e:97:d6:01:ea:1a:29:55:
e6:92:60:96:43:7a:c5:7b:96:80:31:3e:98:18:2e:
f8:25:e8:25:e8:a6:58:50:99:9c:e5:cc:2e:d1:d2:
59:c4:96:37:97:b9:0b:18:6f:9e:24:6f:15:35:a3:
c3:05:4d:27:15:55:cf:51:2d:20:d2:8f:28:bb:51:
fb:1d:c5:e6:25:1f:1b:72:85:94:7f:8a:6a:21:59:
ad:1d:60:c0:01:9f:b6:97:fd:44:7a:84:c0:b5:03:
03:53:28:96:5d:d5:5f:56:85:82:c8:9b:ec:0c:9a:
2c:b6:f7:ea:97:33:b3:5b:18:7e:8c:6d:03:1d:14:
1b:4a:31:33:07:6d:73:7f:f0:e0:fc:09:ce:3d:72:
2c:8d:51:51:21:f4:dd:50:86:f5:35:23:7b:45:65:
b8:80:b9:5e:c6:0c:07:d9:ce:01:58:b5:fd:67:83:
e8:6d:da:1c:ef:1c:4d:1b:27:8d:23:fd:8e:ab:bb:
7f:85:c8:8b:0b:d5:d0:f3:52:4f:54:fc:ae:9d:c3:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:4A:EF:A0:B2:C5:2F:2A:F0:2C:E8:5E:DB:60:B1:E2:DB:9A:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6675A8164DD911F18C4271C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.252.0/24
156.242.19.0/24
156.242.231.0-156.242.240.255
156.243.102.0-156.243.107.255
156.243.115.0/24
156.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:db:2a:42:29:d3:ff:d9:a9:89:86:8d:1b:fd:6c:3d:b2:c5:
59:55:72:f2:18:d0:61:3d:ef:80:33:83:e0:1f:30:8f:c9:cf:
7b:58:83:b9:1d:70:bb:23:0f:f1:8f:ad:b7:95:00:51:1e:de:
78:d4:da:6e:69:eb:38:3c:b0:fc:1f:6d:a3:2a:10:78:9d:7c:
77:e5:08:ce:90:7b:07:7e:cd:6c:29:59:e4:c1:aa:7b:45:e9:
fe:62:a2:f0:a7:84:ce:7f:bf:94:c6:67:47:39:86:29:af:f6:
f6:d9:e8:ab:cc:e9:1e:83:bc:3d:c0:d5:e7:f4:74:98:1b:ad:
e7:4a:f8:1e:b2:a8:b9:e9:80:e7:1b:df:43:2c:58:34:ac:7d:
c7:b5:ac:a2:b3:83:74:71:19:8e:0b:41:c8:c7:71:ea:7f:0e:
03:8a:3a:96:b6:67:1a:80:74:6d:f5:f9:bd:6a:22:b7:99:1d:
2c:35:a0:64:d4:14:e8:04:bd:9c:ce:39:6c:5e:af:92:8b:bc:
91:41:d3:83:85:b8:17:d7:9e:ed:11:c7:cc:a3:02:d3:dd:86:
f7:53:2c:9b:14:9f:57:9f:43:d3:26:92:80:8a:0d:4d:d0:ec:
08:cd:3c:e5:88:1e:fc:70:4c:ee:6a:c7:61:18:ea:1c:61:d2:
63:9f:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:37 2026 by rpki-client