Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CCF1E264AB211F1B6483B1CCF1D38B0.roa
File: 9CCF1E264AB211F1B6483B1CCF1D38B0.roa (raw, json)
Hash identifier: A5hmkcGPJZZGucFZQtpjp5DJyO+8hTrGI9fIXlwIM6U=
Subject key identifier: C6:A8:22:CA:C7:2B:2C:4F:77:D1:8C:BA:95:66:43:BA:88:8A:CD:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CCF1E264AB211F1B6483B1CCF1D38B0.roa
Signing time: Fri 08 May 2026 07:50:42 +0000
ROA not before: Fri 08 May 2026 07:50:38 +0000
ROA not after: Mon 07 May 2029 07:50:38 +0000
asID: 17561
IP address blocks: 156.232.230.0/24 maxlen: 24
156.232.231.0/24 maxlen: 24
156.232.232.0/24 maxlen: 24
156.232.233.0/24 maxlen: 24
156.232.234.0/24 maxlen: 24
156.232.235.0/24 maxlen: 24
156.232.236.0/24 maxlen: 24
156.232.237.0/24 maxlen: 24
156.232.238.0/24 maxlen: 24
156.232.239.0/24 maxlen: 24
156.232.240.0/24 maxlen: 24
156.232.241.0/24 maxlen: 24
156.232.242.0/24 maxlen: 24
156.232.243.0/24 maxlen: 24
156.232.244.0/24 maxlen: 24
156.232.245.0/24 maxlen: 24
156.232.246.0/24 maxlen: 24
156.232.247.0/24 maxlen: 24
156.232.248.0/24 maxlen: 24
156.232.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111285 (0x1b2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 07:50:38 2026 GMT
Not After : May 7 07:50:38 2029 GMT
Subject: CN=69fd95d2-e2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:04:96:aa:25:99:7b:b6:fb:56:8a:d4:0a:
ed:ab:e0:dd:e9:cc:4b:f6:79:0f:68:b0:84:07:ce:
a3:d7:1a:2d:4e:59:d7:07:a3:de:ca:37:eb:c6:1e:
ac:55:b1:c5:97:39:69:04:e4:c5:fe:a5:8b:30:e2:
40:59:3f:be:db:dc:cf:73:41:6c:85:b8:d1:12:a4:
86:b0:cd:23:5c:b9:3c:20:10:ac:75:8b:83:23:d8:
37:b9:be:fe:61:ac:0a:27:b3:88:97:71:21:ba:fe:
66:77:80:44:cf:48:08:35:f6:b5:f7:d7:3d:e1:94:
1b:eb:10:d7:df:44:d2:05:00:aa:86:39:81:0f:a7:
f5:9f:78:10:64:91:8f:5b:23:da:5b:90:c2:b3:65:
9f:3b:3e:fa:e4:ea:f2:22:c5:c5:45:b9:6e:47:d1:
9b:d5:b2:14:12:28:a9:92:b4:70:f4:eb:8c:6a:ed:
49:90:06:bb:fa:80:ac:b2:dd:e0:79:d9:28:05:78:
70:37:48:ae:f7:36:45:2f:c8:46:7d:a0:5c:06:1b:
1e:69:d1:5e:42:d2:ef:9e:81:54:23:11:93:de:d1:
eb:27:85:32:7f:4d:c3:80:e4:31:f6:72:08:e8:56:
66:38:42:6d:e4:a6:51:53:91:47:62:10:36:11:3c:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:22:CA:C7:2B:2C:4F:77:D1:8C:BA:95:66:43:BA:88:8A:CD:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9CCF1E264AB211F1B6483B1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.230.0-156.232.249.255
Signature Algorithm: sha256WithRSAEncryption
4a:ed:eb:a2:3f:49:2c:63:26:bf:15:b5:a4:b0:7e:0d:05:eb:
66:ad:a4:0f:71:11:5b:b6:66:5f:f8:5f:66:84:39:f1:5a:6c:
90:d2:82:11:cc:2f:05:b3:ed:f8:9f:8d:39:33:e3:96:8e:6b:
92:31:f5:8d:71:63:8c:3f:a5:7a:27:cb:61:fc:2b:ba:b1:81:
a6:61:9f:5f:8f:bc:11:1b:80:de:ce:f2:0c:e5:85:a7:6f:c1:
52:99:17:fa:6a:17:5d:85:74:01:19:48:c6:3c:42:1e:28:ea:
77:b9:8f:b6:30:16:e4:41:67:66:f9:68:42:51:26:df:3c:f0:
56:c3:ac:9b:d1:1d:44:e6:9e:5d:2e:42:cf:01:47:08:56:59:
ac:bb:e1:38:de:3d:90:38:71:48:29:9e:4a:d9:99:d9:10:f4:
89:6c:31:e8:cb:62:95:3a:f7:f0:46:eb:cd:bd:18:86:19:0b:
44:84:52:14:bd:ca:ca:d2:7c:a7:e7:9e:ef:5a:66:1a:18:fd:
43:d2:2b:f8:e1:14:db:72:da:c9:ff:be:97:73:f2:3e:89:42:
af:f0:29:5c:b1:e6:d1:b2:9c:9b:83:3d:bb:40:70:c9:c6:c7:
e0:6a:a6:16:48:da:ca:6a:2a:dd:c8:ea:96:3b:29:4d:34:70:
e8:21:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:15 2026 by rpki-client