Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672D7E58491C11F197C9BFF2CE1D38B0.roa
File: 672D7E58491C11F197C9BFF2CE1D38B0.roa (raw, json)
Hash identifier: XIVmazr3vaYHeqZAxu0XMnLA3KG8FcSqYQv9r7bWABw=
Subject key identifier: 41:92:54:E2:ED:42:87:23:64:57:A8:30:3C:5F:36:ED:BA:3D:DE:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672D7E58491C11F197C9BFF2CE1D38B0.roa
Signing time: Wed 06 May 2026 07:22:57 +0000
ROA not before: Wed 06 May 2026 07:22:52 +0000
ROA not after: Sun 06 May 2029 07:22:52 +0000
asID: 17561
IP address blocks: 156.235.138.0/24 maxlen: 24
156.235.139.0/24 maxlen: 24
156.235.140.0/24 maxlen: 24
156.235.141.0/24 maxlen: 24
156.235.142.0/24 maxlen: 24
156.235.143.0/24 maxlen: 24
156.235.144.0/24 maxlen: 24
156.235.145.0/24 maxlen: 24
156.235.146.0/24 maxlen: 24
156.235.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111010 (0x1b1a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 07:22:52 2026 GMT
Not After : May 6 07:22:52 2029 GMT
Subject: CN=69faec51-979a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:87:7e:8e:f2:d7:37:15:82:52:4d:66:97:
fa:11:0b:5e:88:f1:e1:ac:1a:3a:ac:94:9d:c6:cb:
59:a6:e1:b2:e5:82:ac:98:aa:6b:de:15:db:24:50:
79:7a:99:be:0e:8b:4a:51:ce:93:f4:ee:f6:c4:d1:
3e:90:2a:36:78:54:b5:6f:0f:41:b9:86:a4:9d:3f:
bc:8f:f6:75:3b:4d:43:a8:cd:63:a7:5b:cd:48:9f:
17:a5:c2:78:24:7a:c8:46:a9:a4:f6:d9:3a:3b:92:
34:1a:00:2b:f3:10:22:91:4b:c8:da:ac:1e:02:02:
d7:02:7b:75:fb:35:bd:5e:63:c5:53:c2:c3:9a:8a:
eb:2e:e8:92:c1:11:e1:8c:4f:5a:fd:89:c4:96:7d:
58:be:f8:a8:2d:e1:b8:4e:3c:90:7e:74:13:57:a5:
78:3b:0e:1e:5f:3d:fc:ca:b9:11:83:e6:ef:8e:9c:
84:5d:2e:6a:77:6f:98:85:5e:ce:5d:74:be:29:f2:
6f:51:6e:0e:d8:31:16:42:5f:d1:5b:71:c5:ce:a5:
59:6b:24:58:3b:8a:81:a6:9a:e7:aa:cf:cd:91:cb:
86:ac:1b:0d:b7:cc:01:57:4a:f4:6f:57:af:1d:a4:
e4:2b:88:ea:5f:96:4c:2b:94:dd:a3:d4:58:8c:21:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:92:54:E2:ED:42:87:23:64:57:A8:30:3C:5F:36:ED:BA:3D:DE:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/672D7E58491C11F197C9BFF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.138.0-156.235.147.255
Signature Algorithm: sha256WithRSAEncryption
19:f5:d3:06:2f:16:c9:d8:3a:2b:0a:f9:dd:83:2e:27:a0:19:
de:96:31:14:2b:19:81:79:c7:69:e5:f8:ac:1b:04:4b:a3:55:
e6:f6:c0:e9:d3:e1:70:ec:cd:59:a0:06:95:41:a4:37:65:fa:
40:5f:6a:b7:02:97:aa:d7:d4:0c:e9:49:ad:c5:c1:aa:69:43:
7e:a4:4e:39:86:fb:c4:7d:9c:04:26:b6:57:48:f5:79:6d:37:
40:54:40:95:9c:ba:45:ea:5f:98:9e:a8:c3:4d:a1:18:3b:cd:
83:fa:1b:d4:4b:cd:70:61:49:35:6c:6b:cd:95:6c:7b:be:89:
e5:5b:4b:20:e5:9f:3e:b3:71:04:23:85:c9:01:17:8f:30:24:
fe:df:a7:8d:a4:bb:5e:30:82:39:97:35:3c:61:d4:b6:57:59:
79:9f:c1:7f:01:de:09:9f:bd:b7:37:d7:93:e5:f6:1e:6d:ac:
86:88:f2:09:b8:7d:65:09:f8:f1:d6:9c:18:dc:56:1e:3d:83:
9d:dd:1e:96:09:1e:d8:8f:27:37:63:04:47:98:32:f9:df:71:
e4:91:fe:f0:14:58:66:f4:35:06:a6:02:a5:ff:86:07:76:21:
be:7e:4f:81:35:3a:6c:b0:db:7d:ec:13:27:33:bc:05:81:b7:
ed:7a:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:14 2026 by rpki-client