Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD8DD624A6311F1B628F3AACE1D38B0.roa
File: AAD8DD624A6311F1B628F3AACE1D38B0.roa (raw, json)
Hash identifier: UfLSKEIBSILq4W6h73H7HtYoWiR+Vjgg9D90+WBlG3M=
Subject key identifier: F9:F3:8F:DA:03:A1:D5:49:5A:58:B4:E9:39:60:62:4A:47:1A:90:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B28C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD8DD624A6311F1B628F3AACE1D38B0.roa
Signing time: Thu 07 May 2026 22:25:36 +0000
ROA not before: Thu 07 May 2026 22:25:31 +0000
ROA not after: Fri 22 May 2026 22:25:31 +0000
asID: 141159
IP address blocks: 156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111244 (0x1b28c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 22:25:31 2026 GMT
Not After : May 22 22:25:31 2026 GMT
Subject: CN=69fd1160-e3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:33:41:e3:19:93:2d:1c:81:31:ed:35:ce:
28:48:f0:c8:47:34:c3:ac:70:01:01:e0:de:03:93:
d6:e5:81:5d:c0:47:1c:7c:de:46:36:20:cd:bb:02:
da:63:f8:bd:c8:5a:3c:a3:56:3c:fa:10:31:20:f0:
60:77:40:6c:7d:75:7d:bc:da:5e:23:8a:79:89:3c:
9d:ba:c3:b4:bf:84:d0:b1:14:ae:12:f0:8f:6c:4c:
43:e7:28:66:2f:bb:1d:37:3a:59:e3:68:bf:1e:fa:
5c:e8:ee:2e:e5:1b:f6:d1:dc:4e:e0:33:8d:54:dd:
da:da:f5:77:51:08:26:7e:aa:7d:03:07:0c:f0:07:
b7:01:53:80:8a:92:2e:b3:56:d5:06:02:07:47:57:
19:aa:c6:b7:09:39:ae:29:8d:e4:1c:dd:42:6c:20:
ad:c9:d7:bf:a2:54:de:4d:d9:ce:00:48:4e:53:4e:
e1:90:4f:a2:a8:35:a3:b9:53:b1:a6:8b:78:2e:17:
05:c1:30:05:4b:8c:fc:54:63:66:70:f5:16:70:25:
e9:3c:69:99:68:78:5a:97:ad:3c:12:98:7c:ee:13:
b1:3f:ce:02:50:cf:5c:90:c8:b5:a3:d2:5c:19:b0:
b6:3d:6c:1d:89:01:4f:c6:b1:0f:d9:9f:8a:30:f4:
80:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F3:8F:DA:03:A1:D5:49:5A:58:B4:E9:39:60:62:4A:47:1A:90:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAD8DD624A6311F1B628F3AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
42:62:15:5b:f0:19:a7:9d:70:9f:b5:4e:2f:63:cc:53:8f:24:
65:01:07:09:36:7d:1e:42:ca:fc:21:16:ce:4b:9f:20:d7:f2:
52:b8:78:84:cd:19:8d:af:1a:39:7a:9a:37:62:6b:11:c9:76:
40:71:8f:d0:33:b3:76:86:2e:ba:c1:f6:b4:49:c6:81:d7:3e:
84:9e:ee:5c:f9:3d:ff:63:dc:c4:3c:be:00:5f:63:0b:7c:69:
db:6e:4f:f2:19:ea:b5:ab:35:f5:02:65:7e:97:36:e8:f5:b9:
62:a0:d7:f8:64:4c:03:42:e8:da:b5:8d:fb:bb:44:3f:85:51:
d9:46:5a:1d:28:e9:ee:48:95:99:db:d6:7e:cc:ab:e7:8f:66:
6c:3e:2c:96:c3:dd:67:bb:9a:1e:c5:8b:67:66:63:b4:8f:c5:
00:86:09:52:8c:f5:74:3c:dc:d9:48:66:66:25:fd:1a:9c:3d:
b9:c1:05:3d:c3:ea:13:e7:40:bd:61:f8:da:09:9a:f3:a1:15:
bb:84:9f:0d:1b:3e:f9:28:80:87:58:55:8a:33:64:cd:1f:92:
81:07:47:d5:4f:02:61:52:4b:cb:28:14:c4:31:5c:43:10:ef:
fd:d8:2d:ed:0b:c5:69:3c:93:cc:ee:80:ee:ec:e2:3c:f9:62:
14:03:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:56:44 2026 by rpki-client