Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D04C3C12840E11F18A9826B2CE1D38B0.roa
File: D04C3C12840E11F18A9826B2CE1D38B0.roa (raw, json)
Hash identifier: JmzAbDwPm+7d3D/LUeIpNpG278/ND45zMbLpCmo/pd4=
Subject key identifier: 68:E6:E0:03:64:3F:D9:D8:E4:5F:EE:CD:6A:0F:8D:81:6E:C0:5D:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C63D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D04C3C12840E11F18A9826B2CE1D38B0.roa
Signing time: Mon 20 Jul 2026 07:44:19 +0000
ROA not before: Mon 20 Jul 2026 07:44:15 +0000
ROA not after: Fri 25 May 2029 07:44:15 +0000
asID: 17561
IP address blocks: 156.225.72.0/24 maxlen: 24
156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
156.245.164.0/24 maxlen: 24
156.245.165.0/24 maxlen: 24
156.245.166.0/24 maxlen: 24
156.245.167.0/24 maxlen: 24
156.245.172.0/24 maxlen: 24
156.245.173.0/24 maxlen: 24
156.245.174.0/24 maxlen: 24
156.245.175.0/24 maxlen: 24
156.249.124.0/24 maxlen: 24
156.249.125.0/24 maxlen: 24
156.249.126.0/24 maxlen: 24
156.249.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116285 (0x1c63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 07:44:15 2026 GMT
Not After : May 25 07:44:15 2029 GMT
Subject: CN=6a5dd1d3-059f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:68:8c:a3:d9:67:fa:fc:59:75:01:8e:f9:
f1:30:f5:2f:31:7e:4c:cd:b4:90:63:78:dd:90:c0:
7c:62:2a:11:ff:b0:82:10:d0:af:78:91:c1:20:b4:
20:ce:cd:c4:c9:d3:af:b4:dc:8c:3f:ef:b7:f8:2b:
11:57:b5:be:9c:07:3a:a8:ac:c2:70:b1:9e:5e:36:
17:2b:01:38:d4:00:64:7b:23:30:b0:35:bf:b1:68:
91:3c:53:22:6f:10:f0:fd:7c:58:dd:04:12:d6:be:
dd:c7:dd:ca:c2:c6:64:95:98:da:89:87:13:e2:68:
ee:4c:4f:30:c3:bd:0d:e4:64:6e:53:b7:dc:13:64:
c8:b3:4d:57:eb:be:10:23:ce:f9:7f:a9:b0:f5:37:
26:c5:7d:18:bd:9e:b3:cc:0a:38:30:e7:6d:15:3e:
0d:34:bd:4b:10:62:30:d5:2d:2a:4e:e3:a7:2e:1d:
87:e3:28:ea:b7:d8:64:f1:d7:3e:2b:af:3a:09:16:
47:35:4d:fe:f4:ec:65:f8:d0:ee:c4:6f:35:94:2f:
20:d9:01:72:31:1a:0c:ea:be:23:25:5e:c6:b2:d9:
12:39:73:1a:67:cf:55:bc:de:07:ec:e3:e1:4c:6f:
cf:9c:e0:7b:28:68:1e:18:87:85:15:4c:65:31:e2:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:E6:E0:03:64:3F:D9:D8:E4:5F:EE:CD:6A:0F:8D:81:6E:C0:5D:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D04C3C12840E11F18A9826B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.72.0/24
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
156.245.164.0/22
156.245.172.0/22
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
60:e4:98:08:80:83:5f:9f:9e:7c:33:a5:67:b7:08:ac:f3:43:
1b:fc:b8:87:dc:dc:5c:4a:9f:44:52:38:31:6e:4c:31:2e:10:
c2:4b:69:d2:14:e7:47:fb:5f:4f:60:08:37:c6:62:cf:6f:31:
9d:ba:f8:ea:d5:56:ff:31:ec:5c:6a:2c:2f:4d:11:e3:26:57:
f0:83:9d:2a:da:a1:c8:92:6b:8b:40:03:43:a8:5b:f0:9d:72:
aa:86:e8:d4:f0:11:65:ab:85:dd:6d:ba:41:d3:74:7c:3a:65:
35:94:c9:f5:da:9c:25:bc:a2:aa:d1:a8:6b:fb:e5:d9:73:a5:
8e:2f:71:1f:5d:50:70:d6:d0:1a:a5:bb:a4:24:79:9a:0e:a1:
76:1b:7c:43:19:4a:c8:88:ca:da:c4:d6:a6:55:1c:a5:d7:80:
3b:92:93:13:1a:2b:e3:bf:1d:20:38:76:89:d0:34:7d:8e:18:
41:e0:84:2e:57:4a:d6:bb:94:21:ab:f1:5b:72:71:c8:c7:14:
dd:96:bb:58:4b:eb:26:96:24:2b:18:19:44:9f:54:fd:81:a4:
f0:06:16:48:29:f4:86:a5:fc:2f:5d:2a:d2:7b:b7:3c:24:81:
e8:42:96:f3:c7:df:72:63:6f:80:41:78:ac:08:bf:a1:c5:cf:
cb:64:29:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:45 2026 by rpki-client