Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDCD1AE6244011F19EFBC1AEDAE4EC9C.roa
File: EDCD1AE6244011F19EFBC1AEDAE4EC9C.roa (raw, json)
Hash identifier: 6YJdNMUx5shhPURQrJCP+2jgOxDAKOx8kOjaAfxnZNo=
Subject key identifier: 6F:42:FC:8B:57:CD:64:CF:DF:D4:A0:38:97:00:22:31:96:78:1D:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A622
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDCD1AE6244011F19EFBC1AEDAE4EC9C.roa
Signing time: Fri 20 Mar 2026 09:41:12 +0000
ROA not before: Fri 20 Mar 2026 09:41:07 +0000
ROA not after: Sun 26 Apr 2026 09:41:07 +0000
asID: 63139
IP address blocks: 156.225.115.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108066 (0x1a622)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 09:41:07 2026 GMT
Not After : Apr 26 09:41:07 2026 GMT
Subject: CN=69bd1637-404c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:82:26:65:92:6f:31:f0:c0:be:4e:dd:9a:
a9:ce:55:e7:5c:ec:15:01:36:14:b9:ac:f0:6e:58:
7f:16:6c:4e:2b:5b:70:fc:3b:b7:27:a9:9f:fd:4a:
87:e6:5e:d4:98:3a:4f:fc:76:0d:a5:66:7a:0e:6f:
36:f2:23:00:65:55:ac:87:4b:b7:1b:b7:4e:f2:cd:
db:ce:7b:66:a1:5a:84:32:38:08:3e:1c:b3:68:f0:
48:db:c7:b4:de:c4:f5:53:32:73:d4:79:d5:ef:fc:
4c:4a:32:58:fc:30:19:2e:3c:0b:cb:15:0b:22:c1:
8b:be:b4:b4:f9:8b:9f:2b:ea:52:b9:2b:89:a0:b8:
41:08:a1:05:bf:d8:a2:cc:c2:c7:3b:ec:92:51:a4:
f1:fd:87:3a:04:89:6b:27:78:e4:65:ea:c5:c0:57:
e0:a8:a7:c4:57:0a:a6:01:33:36:9c:98:9f:46:a5:
40:98:48:e4:c6:c1:2e:b6:0f:3a:b3:32:12:72:ef:
d8:05:f3:42:ee:8f:f0:ad:37:26:73:5b:17:8a:db:
bb:31:d7:ca:86:04:ba:de:12:0f:e9:5e:43:b2:87:
67:5c:07:30:25:ea:1f:fb:9c:ef:75:f3:91:3c:80:
5d:36:0c:c7:6c:fe:d2:3d:ec:72:4f:3a:33:75:59:
9b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:42:FC:8B:57:CD:64:CF:DF:D4:A0:38:97:00:22:31:96:78:1D:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDCD1AE6244011F19EFBC1AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.115.0/24
156.225.120.0/24
156.225.122.0-156.225.127.255
156.229.51.0/24
156.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a4:ea:39:8d:d7:f2:86:91:1d:52:40:11:06:f2:cd:65:88:
1f:9c:33:3a:ef:ee:c2:c6:44:dd:ee:f8:34:e5:1d:44:0f:61:
f6:ce:8e:2f:ca:16:45:36:a6:6a:66:b5:42:28:e4:f2:c4:97:
2f:f3:7a:df:95:55:c6:ec:97:84:b0:9d:40:1d:9f:79:5a:43:
ca:68:9b:12:0c:81:27:4a:9f:e6:50:db:22:c6:07:17:ec:ea:
34:0b:26:3e:d2:56:04:c5:4c:63:de:29:83:69:eb:50:37:c1:
41:e2:e1:13:d9:b8:02:ef:6c:3a:b2:30:a8:cc:af:46:4f:94:
0f:b2:9b:d6:a4:de:3d:b3:ce:0a:a2:22:06:44:c1:d2:3e:2f:
52:00:90:40:ba:e9:6f:c0:0c:97:82:f3:2a:15:3b:94:5b:37:
f6:09:38:ce:de:b9:df:53:dd:64:28:76:0b:d2:4b:f8:f2:34:
d1:07:e8:9a:60:dd:d3:b3:6d:20:a8:4f:69:4e:23:ba:85:24:
e5:e4:4c:47:7d:07:15:f9:16:65:63:60:92:11:2f:04:88:05:
45:2f:44:7f:18:93:99:dc:80:61:98:1a:66:61:ee:f6:9c:cc:
dc:85:b3:4a:5f:27:a1:92:ac:a0:dd:a0:72:3a:7a:a1:e8:ac:
99:f6:9d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:50 2026 by rpki-client