Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/895D694C850411F19DD14008CF1D38B0.roa
File: 895D694C850411F19DD14008CF1D38B0.roa (raw, json)
Hash identifier: oHOcp53Bbx/HO2uFwpjmumD9KK4yOLhbu/9bcD7sXwg=
Subject key identifier: 6D:9E:AD:4D:08:0C:9D:A8:4B:A5:D6:62:AD:20:DA:1D:0F:D7:39:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C71E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/895D694C850411F19DD14008CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:03:16 +0000
ROA not before: Tue 21 Jul 2026 13:03:12 +0000
ROA not after: Mon 07 Sep 2026 13:03:12 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116510 (0x1c71e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:03:12 2026 GMT
Not After : Sep 7 13:03:12 2026 GMT
Subject: CN=6a5f6e14-1b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:03:cb:40:c4:1e:39:eb:2b:0d:45:1c:df:
0a:2c:9a:7f:86:38:ce:f6:3b:3b:32:93:b7:d0:8b:
7d:4b:87:71:a8:c9:f0:bf:16:10:4b:53:a8:ab:1c:
f1:a9:2a:a7:59:3b:79:33:40:6f:d2:3e:cf:ff:fa:
75:9a:1f:9a:ca:f0:e1:97:ca:64:c7:94:07:5e:64:
7c:9a:36:48:cb:63:b2:37:73:60:1a:79:d0:f6:a0:
b3:25:ec:8a:75:42:b3:9a:68:9e:01:b8:04:ad:58:
ee:49:1f:a5:97:15:15:0c:33:59:fd:e6:7d:ee:9e:
9d:b8:8f:ab:f4:7b:10:e3:54:25:9f:8e:63:b3:40:
37:bd:86:14:85:2c:bc:d9:0c:6f:23:4b:3a:bc:ef:
8e:ac:e5:2a:aa:83:07:75:25:3b:10:8a:cf:eb:87:
07:a9:c2:68:90:46:81:ef:05:25:7e:f8:15:c0:2e:
6b:ac:90:52:d7:d1:83:49:08:7b:a6:1d:82:c2:13:
7c:1e:08:14:95:0a:cf:e5:1b:9c:1e:8c:c6:85:87:
d1:1c:6d:25:3c:64:b2:e1:97:91:6e:97:1d:d8:ef:
c1:1f:82:4c:40:b0:5e:81:ec:fd:4b:fd:b1:4c:80:
0d:6f:66:b8:7e:64:58:5d:f3:2c:1d:e0:95:83:e4:
b6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9E:AD:4D:08:0C:9D:A8:4B:A5:D6:62:AD:20:DA:1D:0F:D7:39:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/895D694C850411F19DD14008CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.249.154.0/24
156.249.162.0/24
156.249.166.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:4c:d1:12:51:ff:2c:6c:01:1b:bb:bc:64:a6:59:ee:f5:64:
d2:01:d3:f7:51:b6:5d:1d:e6:82:a8:0e:7d:9d:1c:5d:76:7b:
49:53:88:82:6a:16:9b:06:59:ec:00:cf:6d:80:ea:8b:79:17:
5d:0e:32:e7:fa:00:d1:ac:f4:4e:5f:77:f3:43:4c:06:64:7f:
96:be:3a:dd:87:51:7c:68:f5:5e:b2:d0:ba:9b:36:90:33:74:
d2:68:ed:bf:72:52:54:d0:6e:b6:39:49:35:1b:87:ee:2d:41:
7a:9a:2c:87:8b:2b:1c:33:45:9e:cf:9e:16:5f:94:48:47:6f:
9a:6c:31:52:45:29:a7:cc:ba:c6:bc:e8:81:8a:91:f5:07:98:
21:7f:df:d3:61:6c:a5:6a:5c:cc:54:81:60:b6:56:2d:c2:3a:
b4:87:8b:a6:7a:68:3d:bc:98:2d:f0:91:4f:8b:64:32:2f:a0:
c6:70:34:a6:45:cc:43:88:04:d6:bd:5a:ff:8e:09:41:f1:a5:
0e:5e:64:72:2b:63:d2:95:82:3e:a0:bc:25:c4:04:79:83:21:
53:7f:86:1a:66:ae:db:a4:e3:a0:96:f8:bf:97:2e:36:3b:d6:
08:c2:9c:c7:10:f9:14:d3:52:fa:b4:1c:2f:65:34:88:ee:8b:
b6:2b:1d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:21:14 2026 by rpki-client