Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DD8CAE860F11F1851B1FDBCE1D38B0.roa
File: A9DD8CAE860F11F1851B1FDBCE1D38B0.roa (raw, json)
Hash identifier: EglbM+j6oQJnwwBuwYheax6dPGCVSbtmzB61XcpkYQo=
Subject key identifier: D6:E1:C1:AF:C4:4D:B9:D3:01:48:A9:26:6D:C6:14:3D:A3:7B:6D:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DD8CAE860F11F1851B1FDBCE1D38B0.roa
Signing time: Wed 22 Jul 2026 20:55:26 +0000
ROA not before: Wed 22 Jul 2026 20:55:22 +0000
ROA not after: Tue 28 Jul 2026 20:55:22 +0000
asID: 271355
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.192.0/24 maxlen: 24
156.236.193.0/24 maxlen: 24
156.236.224.0/24 maxlen: 24
156.236.230.0/24 maxlen: 24
156.236.231.0/24 maxlen: 24
156.236.232.0/24 maxlen: 24
156.236.233.0/24 maxlen: 24
156.236.234.0/24 maxlen: 24
156.236.235.0/24 maxlen: 24
156.236.236.0/24 maxlen: 24
156.236.237.0/24 maxlen: 24
156.236.238.0/24 maxlen: 24
156.236.249.0/24 maxlen: 24
156.236.250.0/24 maxlen: 24
156.236.251.0/24 maxlen: 24
156.236.252.0/24 maxlen: 24
156.236.253.0/24 maxlen: 24
156.236.254.0/24 maxlen: 24
156.236.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116655 (0x1c7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 20:55:22 2026 GMT
Not After : Jul 28 20:55:22 2026 GMT
Subject: CN=6a612e3e-7e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:28:67:55:51:b8:5d:f7:a1:fe:a0:a0:a3:
67:fc:4d:19:70:99:be:38:69:4f:7b:27:3e:ce:1d:
36:25:8b:73:65:15:95:c5:f8:00:58:e8:69:99:09:
16:09:49:91:36:bc:47:03:92:f9:d0:a7:fb:4a:f3:
76:59:c0:de:3b:15:f6:a9:af:44:c8:9d:0c:f3:32:
68:4f:11:1d:51:85:e9:74:d6:7a:84:ee:a7:c7:7b:
30:1b:28:9f:ce:bc:18:7b:41:f0:46:57:cb:d9:a3:
f1:57:bb:53:9e:f0:8b:82:71:b5:3a:13:f5:72:d9:
ce:4d:36:62:74:84:22:0a:9b:0f:ed:ee:32:21:83:
80:f0:4f:16:fb:f5:08:1b:2d:38:87:a2:1d:9a:e6:
39:af:9e:e0:17:69:be:b4:c3:99:af:e0:e2:b6:cb:
8e:22:45:dc:f0:6f:df:62:2b:ef:a1:8f:7c:cd:bf:
55:1c:43:03:6e:c8:96:55:1f:6e:6e:89:33:93:c4:
36:37:ad:8f:b3:c3:54:6b:f3:2d:8e:b3:a7:90:87:
de:e5:d5:e8:ae:0f:89:f3:ba:7d:11:13:a4:7d:17:
cb:1d:e7:45:e6:4e:0e:df:2d:7e:05:01:2f:6b:44:
fa:ff:d6:0c:22:3c:b2:30:63:9e:43:27:b9:47:08:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:C1:AF:C4:4D:B9:D3:01:48:A9:26:6D:C6:14:3D:A3:7B:6D:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9DD8CAE860F11F1851B1FDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0-156.236.224.255
156.236.230.0-156.236.238.255
156.236.249.0-156.236.255.255
Signature Algorithm: sha256WithRSAEncryption
04:e5:f1:9c:fd:f1:b8:ad:ec:2c:ee:cf:b0:9f:44:c9:d7:0c:
e1:3e:f8:9c:04:ac:fe:ff:f8:3a:51:ca:58:c0:36:20:ee:44:
7b:22:b3:47:39:8f:4d:21:73:18:1f:cb:d6:c2:9f:fe:68:22:
f9:19:1d:43:38:7e:66:03:01:44:5b:75:22:fa:93:33:d6:ee:
d3:c9:17:59:dd:a3:81:bb:80:05:2a:17:93:19:c4:e0:83:56:
31:77:eb:c6:b8:88:20:f5:15:d2:0c:0f:18:8d:7c:be:bf:0a:
34:26:e8:5c:90:1e:7f:ae:f1:83:9b:63:8d:5d:16:21:62:42:
bb:b8:24:21:30:e6:08:21:2b:77:ca:6f:48:a0:59:37:f4:49:
df:ad:3c:93:cc:00:0f:7b:15:de:8c:61:40:91:c0:f1:13:82:
e4:24:04:4f:4b:08:5d:d2:00:98:b0:f2:3c:d5:03:3c:f0:eb:
29:65:05:8c:52:3a:6d:aa:44:ee:51:04:06:96:bd:14:fd:99:
29:83:0d:3b:d6:eb:96:7b:51:dc:75:a0:fa:95:24:ab:34:96:
1b:c6:b2:1b:51:0b:49:0c:68:09:64:f8:c6:70:46:55:15:d6:
c3:08:d6:93:bf:a1:ed:55:06:32:7f:2a:78:ba:d7:18:f8:8b:
8a:47:6f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:46 2026 by rpki-client