Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE65C4A3FCF11F18B7E40D3CE1D38B0.roa
File: 7FE65C4A3FCF11F18B7E40D3CE1D38B0.roa (raw, json)
Hash identifier: ckimATkoyW687o/cF4WhvhfvcVA3tk9Dxc7NNlfOUGw=
Subject key identifier: 19:5B:B7:65:3A:D2:88:52:61:7F:11:21:B5:9E:52:96:84:A4:A1:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE65C4A3FCF11F18B7E40D3CE1D38B0.roa
Signing time: Fri 24 Apr 2026 11:19:47 +0000
ROA not before: Fri 24 Apr 2026 11:19:41 +0000
ROA not after: Sun 31 May 2026 11:19:41 +0000
asID: 44559
IP address blocks: 156.233.83.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.249.98.0/24 maxlen: 24
156.249.99.0/24 maxlen: 24
156.249.100.0/24 maxlen: 24
156.249.103.0/24 maxlen: 24
156.249.112.0/24 maxlen: 24
156.249.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110308 (0x1aee4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 11:19:41 2026 GMT
Not After : May 31 11:19:41 2026 GMT
Subject: CN=69eb51d2-013e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:77:ca:b4:29:42:e0:4c:f2:67:f8:ae:c7:
c6:a6:c7:20:6b:3f:99:66:ff:88:1a:a3:a0:84:ba:
f8:ca:2d:80:cb:dc:be:74:cd:57:15:f7:cf:c2:58:
4e:4f:5e:31:10:b9:23:3b:21:b5:70:a5:70:cd:31:
32:c5:51:11:f0:5b:61:97:aa:b0:51:df:f0:46:82:
0b:38:6f:1e:9a:b3:3b:45:03:74:bc:7d:8c:51:31:
0e:51:bf:85:79:13:60:45:d5:52:75:c4:8d:64:72:
1b:ee:74:84:2a:16:27:55:45:16:3d:56:a2:42:80:
0b:6d:72:32:6d:a7:f4:12:11:4a:1d:9e:95:10:b9:
24:22:3b:c4:93:7e:5d:b9:a1:76:87:26:93:14:4b:
fd:3d:e7:11:9e:de:a6:b5:07:4b:4a:11:20:28:d6:
c4:88:9b:bc:90:74:da:f9:f1:b6:b6:ca:43:91:24:
97:31:e3:9d:f7:37:68:be:b6:f6:e8:65:33:20:a1:
4d:4b:77:94:51:ec:e1:9d:6e:12:35:16:9d:fe:75:
b2:99:76:d2:28:8f:d4:22:a1:2d:cc:5e:da:6b:c1:
1f:3e:1d:33:14:b0:f2:86:17:5e:1d:3b:d3:cc:c0:
f8:34:cd:66:64:3e:68:f4:52:63:90:ad:7b:7a:f7:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5B:B7:65:3A:D2:88:52:61:7F:11:21:B5:9E:52:96:84:A4:A1:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FE65C4A3FCF11F18B7E40D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.83.0/24
156.233.96.0/23
156.233.106.0/24
156.249.98.0-156.249.100.255
156.249.103.0/24
156.249.112.0/23
Signature Algorithm: sha256WithRSAEncryption
95:50:45:aa:02:99:a8:aa:cc:89:be:71:07:94:a4:09:0c:69:
94:77:25:c9:0e:3f:9b:b7:6d:f5:42:0b:93:11:9b:97:2d:b6:
f4:cd:80:d3:6d:ba:cc:69:86:de:84:a7:c7:6f:47:83:92:11:
fc:47:d6:c6:5a:82:26:bc:c2:3e:ce:a5:bd:25:a1:8d:c7:d0:
4e:01:d8:e3:ab:92:f7:60:f1:16:6c:e8:3b:32:a0:e3:fd:b3:
51:4d:c0:32:3f:ce:89:8e:93:e4:f1:e4:38:b7:8f:b0:a0:db:
4c:fe:9d:fb:25:4d:42:4e:fe:c3:7f:86:bc:06:b5:5b:e3:2b:
f6:e0:25:5e:c4:3d:6f:75:73:9d:8d:aa:13:99:7d:ad:25:99:
f2:2a:aa:da:fb:fd:d1:f9:93:36:10:c5:fe:6d:c7:0d:12:d7:
e5:a0:42:d6:9b:28:09:88:82:9b:4c:aa:30:3d:e7:6c:d6:f2:
2d:e6:32:8a:1a:3c:0c:43:20:46:18:c7:a1:5e:10:cb:31:07:
90:ab:34:de:30:ce:25:15:2a:f5:af:45:87:cf:86:15:6e:a9:
23:ae:75:af:79:e8:fd:03:7c:b4:cf:ac:56:94:ac:ef:a4:74:
80:17:a9:dd:67:57:9a:c3:fa:18:db:43:eb:aa:41:cd:e4:d1:
4f:d7:42:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:06 2026 by rpki-client