Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA9338849F311F1B029A20DCF1D38B0.roa
File: 7EA9338849F311F1B029A20DCF1D38B0.roa (raw, json)
Hash identifier: odu0/6EoradbxZoqfjsfbU/kJuqczHGe3kPx0xGjHrY=
Subject key identifier: 88:4D:B3:07:8C:A0:B6:B6:B7:71:E7:30:42:B7:CB:6A:F0:44:96:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B217
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA9338849F311F1B029A20DCF1D38B0.roa
Signing time: Thu 07 May 2026 09:02:38 +0000
ROA not before: Thu 07 May 2026 09:02:33 +0000
ROA not after: Sun 21 Jun 2026 09:02:33 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
156.231.20.0/22 maxlen: 24
156.252.18.0/23 maxlen: 24
156.252.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111127 (0x1b217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:02:33 2026 GMT
Not After : Jun 21 09:02:33 2026 GMT
Subject: CN=69fc552e-e12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:56:08:28:5c:02:16:e0:1e:77:d9:3e:4d:
ba:5a:0e:f5:fb:50:cd:d6:d5:3d:0d:80:61:b3:d6:
01:bb:6d:c6:f5:0e:33:c5:0b:58:de:5a:6e:8e:6e:
63:02:2d:c6:90:15:aa:72:48:e5:b0:81:65:d6:8b:
8c:9e:54:2e:25:9a:fb:58:2e:55:40:71:11:d9:6a:
2b:a7:e4:13:f5:36:a8:09:2c:5f:54:70:40:c9:54:
5e:3e:12:26:c6:55:8e:e0:a6:87:3e:67:ab:5b:41:
ce:59:fc:02:d7:0c:3b:73:2c:fa:63:8e:b3:d2:0b:
10:c1:c2:86:05:c8:2d:c6:73:93:c3:4b:c5:b8:a1:
c4:01:89:1c:73:bf:c7:45:19:fb:78:09:8e:cc:76:
dc:f6:34:aa:63:23:e9:90:06:1d:23:9a:12:58:75:
94:b4:c7:6c:9d:99:c1:e4:d5:87:c8:21:16:70:c6:
81:a3:01:24:65:63:35:ab:b8:e9:e7:06:24:7f:16:
7a:da:a6:a2:72:db:82:e1:c9:a3:e2:1b:e3:a1:99:
b6:9f:d6:36:59:db:3c:26:82:97:9b:57:e7:ba:bb:
49:f0:5e:5f:d2:5d:77:8c:40:74:47:95:b7:62:99:
5e:91:a0:c5:13:36:cf:0d:80:00:6f:dc:60:7b:22:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4D:B3:07:8C:A0:B6:B6:B7:71:E7:30:42:B7:CB:6A:F0:44:96:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7EA9338849F311F1B029A20DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.231.20.0/22
156.252.18.0/23
156.252.132.0/22
Signature Algorithm: sha256WithRSAEncryption
47:54:dd:b4:e1:e6:7c:1b:d9:93:e4:99:d7:50:d6:3e:64:12:
69:cb:d3:df:1d:ec:98:73:6b:78:ee:40:aa:a9:7f:bb:d9:eb:
74:54:5a:50:7f:f0:e5:ff:97:b3:1d:dc:5f:35:a5:0b:4f:e9:
2a:8b:fc:38:8d:96:db:f1:58:a0:e4:60:0a:8e:74:8d:8a:33:
47:2b:28:01:35:a8:94:ad:81:0f:80:ee:28:c5:69:0b:85:a3:
79:06:e7:95:4b:32:d3:ff:36:6b:94:09:9b:cb:a8:96:aa:2a:
c5:ef:19:c1:8c:aa:b4:bd:9c:9e:ad:f1:41:75:2c:c7:15:1f:
ce:4b:b7:28:34:92:fb:1a:76:cb:23:ed:14:f4:0a:3b:ee:f5:
83:c4:93:d6:27:6a:69:bc:85:23:8e:86:e7:17:93:59:25:f3:
44:02:54:06:f3:b5:3e:0b:6e:9e:68:fc:ee:17:32:df:5a:cf:
e7:83:bb:79:cf:1a:90:2b:be:f3:ec:64:e2:4f:aa:27:ba:14:
ca:c9:24:2a:80:3a:5a:11:87:fb:db:58:fb:4d:f4:58:50:95:
06:22:a7:bc:e8:7e:88:08:5e:7c:3f:54:b3:61:e5:11:5d:55:
b3:db:aa:aa:cd:4f:0c:77:b0:cd:e8:6e:92:23:78:3e:10:39:
56:d5:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:41:40 2026 by rpki-client