Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31FA93A84EE11F19B5BB906CF1D38B0.roa
File: C31FA93A84EE11F19B5BB906CF1D38B0.roa (raw, json)
Hash identifier: BRINwl05cm06zWRhLqmGMBB6Pb8svCsQ2iu2o2KKipE=
Subject key identifier: 37:1A:F3:A0:9A:38:92:2D:BB:E6:06:99:C5:CC:6E:81:5E:A6:FC:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31FA93A84EE11F19B5BB906CF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:27:24 +0000
ROA not before: Tue 21 Jul 2026 10:27:17 +0000
ROA not after: Sat 29 Aug 2026 10:27:17 +0000
asID: 48031
IP address blocks: 156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116446 (0x1c6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:27:17 2026 GMT
Not After : Aug 29 10:27:17 2026 GMT
Subject: CN=6a5f498c-4619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:85:bc:1d:0b:4e:95:00:1a:fd:6e:7c:39:
51:95:7b:ea:a9:05:74:eb:1d:ad:c5:54:8c:6b:d0:
c8:38:24:cb:80:4b:a9:f8:95:74:bf:c1:7c:e9:89:
72:0b:fb:c4:6f:d6:45:ef:2d:cc:f3:fe:cf:68:8f:
ba:4f:a3:47:da:d0:07:c4:7f:b3:4e:35:d5:20:ae:
17:f0:c0:88:85:b7:a3:25:21:9d:3d:29:61:54:ca:
89:3d:70:c0:58:e8:03:02:fd:77:1f:7c:8c:56:73:
fe:df:1a:0f:28:53:2a:72:f1:bd:a3:76:6c:a3:56:
e6:d7:02:75:b0:4a:50:08:2a:24:96:0d:0a:2c:cf:
21:ec:ff:d3:36:c3:ef:58:da:35:0d:e5:56:5a:d8:
5e:be:fc:05:b8:65:6c:95:56:4a:bf:01:67:2e:f3:
4d:a6:df:41:80:70:d5:6d:8a:22:7f:42:45:5d:0e:
c3:e7:1a:8a:1c:ee:39:4e:d9:a9:89:17:28:6d:77:
f4:fb:7e:97:90:89:39:f3:23:0d:19:a6:35:97:7c:
4d:2d:ad:ce:fc:ce:7d:dd:08:5c:6c:d6:e3:8a:95:
95:fd:a5:ab:2f:d0:bb:96:a3:eb:c7:43:c2:fb:9b:
b5:55:4b:ff:91:e8:6c:7d:a1:8a:d3:41:34:bc:01:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1A:F3:A0:9A:38:92:2D:BB:E6:06:99:C5:CC:6E:81:5E:A6:FC:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C31FA93A84EE11F19B5BB906CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.138.0-156.246.147.255
Signature Algorithm: sha256WithRSAEncryption
98:26:44:d3:1d:4b:70:be:8c:ca:1c:51:4a:2b:e7:91:87:ce:
cc:4a:f0:35:a7:12:b0:db:8f:03:cd:8a:8b:28:51:d4:02:68:
bc:1d:28:23:57:82:5c:94:39:af:a4:ae:1d:79:ae:84:f7:f9:
6c:2a:69:31:04:a3:a2:4d:33:ee:2e:67:1d:5a:18:b5:73:d4:
0d:9f:b8:00:6c:6d:62:ec:28:dd:fc:86:1c:30:3a:14:2b:bc:
f9:f5:e6:3b:6d:ad:01:f9:2d:94:8b:f7:eb:3f:fc:04:b6:d2:
3e:ca:f5:ed:c9:67:a4:78:e7:40:38:ed:21:1d:54:a5:56:8a:
cb:be:f8:bb:f3:01:b7:3b:81:de:ec:93:fc:d6:00:ae:87:ee:
58:9b:f5:1e:ed:30:7b:f7:c0:2a:59:25:60:0b:2e:46:f3:e9:
d8:50:44:0f:9b:62:75:66:31:18:9e:16:81:46:b0:47:4a:33:
d5:56:e4:af:39:d5:d6:91:fc:66:e6:08:e8:fc:98:ad:f6:cb:
e9:67:60:76:88:58:c7:0e:bf:70:6a:cf:84:32:35:8e:73:89:
af:86:2e:87:4b:84:b2:b0:45:58:67:0b:5a:ac:d1:9a:12:c4:
bb:60:bf:1f:15:a3:8d:ba:49:7b:2e:15:9f:aa:67:5f:76:58:
a0:4c:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:02:55 2026 by rpki-client