Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B015250493111F1A6F7ACF1CE1D38B0.roa
File: 7B015250493111F1A6F7ACF1CE1D38B0.roa (raw, json)
Hash identifier: Ap/RP071uVHwiDlonl5C+jGHrsLuLNphZU35Vq47Dk0=
Subject key identifier: 61:2A:38:0B:F7:9E:EE:17:0B:07:40:79:3B:BF:4D:EF:26:BC:61:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B015250493111F1A6F7ACF1CE1D38B0.roa
Signing time: Wed 06 May 2026 09:53:49 +0000
ROA not before: Wed 06 May 2026 09:53:45 +0000
ROA not after: Sun 06 May 2029 09:53:45 +0000
asID: 17561
IP address blocks: 156.237.250.0/24 maxlen: 24
156.237.251.0/24 maxlen: 24
156.237.252.0/24 maxlen: 24
156.237.253.0/24 maxlen: 24
156.237.254.0/24 maxlen: 24
156.237.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111068 (0x1b1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 09:53:45 2026 GMT
Not After : May 6 09:53:45 2029 GMT
Subject: CN=69fb0fad-8bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:73:50:e5:3c:29:fa:49:c3:ba:00:e2:c2:
9c:a5:7a:6c:43:07:08:b4:5f:80:8b:2c:47:25:bc:
21:b0:de:70:2b:fd:5c:4c:de:5b:71:5a:50:01:5b:
af:57:f2:7e:c5:f2:92:c8:d8:2f:03:9c:28:40:21:
c9:48:05:e3:89:1a:1c:b6:08:66:11:83:00:85:25:
de:12:3f:ef:85:fc:b8:00:54:d7:10:26:24:f0:f6:
74:45:c9:81:48:58:f4:a2:39:0e:70:1b:13:54:4e:
d2:9f:2a:53:86:7d:8e:c0:9e:c8:a0:8f:c1:48:d6:
26:b2:c8:2d:ad:d1:69:16:62:6e:6b:30:f4:dd:47:
98:aa:53:48:01:66:0f:9e:ca:e4:f7:71:d4:42:e7:
cd:20:f5:dd:97:84:9c:cb:78:04:3a:32:15:3f:34:
d7:d3:25:41:1b:53:0d:f3:d7:e5:f1:4d:0d:ad:7c:
99:d3:e6:c8:a6:f7:be:06:a5:b8:18:a0:fe:09:99:
36:ff:19:28:a9:fa:7a:75:74:f2:b6:06:08:9c:75:
65:24:fd:e6:d9:41:90:09:63:5e:43:6f:a5:0e:b0:
87:53:8e:62:3d:3c:21:a2:76:47:1f:59:b3:c8:7b:
c0:ed:4f:8e:a6:68:c2:fa:ff:b6:0a:11:61:3a:ae:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2A:38:0B:F7:9E:EE:17:0B:07:40:79:3B:BF:4D:EF:26:BC:61:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B015250493111F1A6F7ACF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.250.0-156.237.255.255
Signature Algorithm: sha256WithRSAEncryption
8d:87:c8:15:8d:da:e5:94:b9:5f:72:71:67:eb:79:02:40:24:
3c:c8:b8:1a:a9:98:19:59:61:23:8c:68:7c:7e:7a:47:6c:5c:
ca:d4:4e:28:4b:5b:80:8f:57:0c:15:3e:2b:e3:87:6f:7e:36:
b3:67:63:2e:5e:a4:e0:38:72:25:c3:dd:46:bd:0e:f3:8f:1b:
3d:aa:f9:0e:03:32:96:f1:33:31:dc:f7:43:88:19:ff:38:5f:
c5:96:f4:02:97:05:aa:6f:78:ac:3f:86:dc:22:ef:fd:57:e5:
95:b3:22:e9:c1:51:72:1a:26:dd:f2:56:95:71:80:25:e3:f3:
e7:0c:b6:b3:8b:0b:c8:ad:13:af:89:72:06:63:ee:20:a1:c0:
c6:49:d7:01:fe:97:0b:7e:ec:54:61:ab:97:83:f0:46:e5:36:
9f:98:6f:ea:71:bc:0a:60:f5:34:9b:39:de:8c:59:a8:e7:ac:
62:58:95:c7:70:8f:59:9e:19:30:98:15:f2:90:96:aa:55:f7:
28:fe:f1:54:95:53:99:05:f2:45:35:24:1e:d3:3a:09:43:ca:
02:b6:9d:59:4f:98:6b:a8:e7:a4:07:27:84:cf:24:4c:7a:02:
67:e9:cf:bc:bd:27:c0:ba:fa:84:6a:18:af:7a:88:95:c5:8f:
ad:6d:79:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:08 2026 by rpki-client