Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B9E43E860E11F1A59396D6CE1D38B0.roa
File: 91B9E43E860E11F1A59396D6CE1D38B0.roa (raw, json)
Hash identifier: Bto3MnL6cDG7namiB6pKS8GjqkvDl+Ev36ov6VCSi7c=
Subject key identifier: 7C:46:BE:06:A4:D6:FC:49:D4:8D:43:FC:84:5B:B7:2F:18:FA:37:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B9E43E860E11F1A59396D6CE1D38B0.roa
Signing time: Wed 22 Jul 2026 20:47:36 +0000
ROA not before: Wed 22 Jul 2026 20:47:32 +0000
ROA not after: Tue 28 Jul 2026 20:47:32 +0000
asID: 273155
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.224.0/19 maxlen: 24
156.236.224.0/24 maxlen: 24
156.236.225.0/24 maxlen: 24
156.236.226.0/24 maxlen: 24
156.236.227.0/24 maxlen: 24
156.236.228.0/24 maxlen: 24
156.236.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116653 (0x1c7ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 20:47:32 2026 GMT
Not After : Jul 28 20:47:32 2026 GMT
Subject: CN=6a612c68-f931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:28:b3:f9:f9:f0:02:c4:17:2a:05:fc:c7:
e2:67:ca:38:a5:fd:b7:06:88:3c:db:1e:d1:e2:02:
6c:88:58:dc:cb:c8:16:45:cb:97:d3:a0:a0:b9:35:
28:b6:46:e8:99:8f:df:fe:2a:dd:94:12:33:99:66:
9c:03:58:41:ac:11:af:be:f0:4e:2a:70:82:43:50:
05:f0:93:ad:ba:93:d3:cb:60:3a:a9:5d:d8:62:03:
e4:6e:cc:cc:de:45:ed:a0:d8:32:04:4d:62:f4:92:
b3:b4:b0:3c:79:42:8e:14:42:15:60:7c:8d:40:c6:
06:bd:42:52:b4:45:21:9f:e6:ef:49:24:ce:84:9f:
9d:eb:94:0e:f2:62:54:3c:38:6c:43:48:8e:99:b1:
c4:e4:e9:f1:5a:da:50:57:0e:88:d4:d1:d2:bc:c4:
fe:fb:6e:55:6d:b6:84:9c:18:e7:98:5b:4d:c9:7b:
d3:d2:dd:cc:09:c2:4c:f7:f8:c2:38:46:54:f0:2b:
48:e6:a2:1f:d7:ed:2f:db:57:db:27:ca:8a:49:d1:
fd:67:39:71:78:c1:7a:16:f6:a7:a8:23:17:f5:44:
ef:37:fa:04:78:87:d5:6b:53:7c:b1:cb:bc:cc:0d:
02:f6:3e:49:61:70:ad:90:b2:71:d5:30:4a:e4:90:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:46:BE:06:A4:D6:FC:49:D4:8D:43:FC:84:5B:B7:2F:18:FA:37:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91B9E43E860E11F1A59396D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
8b:1c:9b:e8:79:c9:cd:70:d4:4b:c4:71:f7:94:68:f1:c3:4e:
63:30:24:c9:9a:10:aa:c4:b1:b0:ed:be:27:37:f1:e4:af:06:
0c:18:f7:65:af:8f:51:e0:2c:6e:d1:1e:7a:52:c9:1a:52:73:
82:3b:f8:87:67:85:af:1d:b6:6d:3b:04:9d:0d:8a:1e:b1:d4:
29:01:b4:a9:14:52:3e:66:3b:81:ff:58:47:f8:99:17:5d:45:
a7:79:2e:f6:a8:a4:b5:63:05:8e:eb:93:55:3b:95:07:a8:d9:
8e:5a:06:c8:b2:12:6b:47:c2:f1:78:64:a0:3e:e3:08:4d:fe:
5a:25:53:6b:72:74:00:aa:0d:78:5f:26:2c:07:ac:6b:3d:e3:
a5:37:fa:ee:10:07:9d:22:89:ed:5f:c0:6c:2f:0d:df:d6:3d:
30:03:bb:f3:98:53:2b:ba:f1:7f:6e:e8:94:3f:42:f0:a7:16:
ce:ea:10:a3:3d:d2:44:51:bf:5f:dd:2d:c2:16:b8:1e:41:3e:
34:1f:51:02:1e:d7:e9:90:b2:c2:31:aa:f9:8d:ce:7a:e1:a0:
17:73:e2:2a:b8:cf:49:70:8d:cb:33:d4:56:0b:2e:05:7e:07:
e8:59:da:f0:db:2f:9f:39:c1:df:19:1d:3f:a5:16:16:b4:41:
cd:e0:05:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:05 2026 by rpki-client