Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5515E284C4D11F18AF5E4E0CE1D38B0.roa
File: F5515E284C4D11F18AF5E4E0CE1D38B0.roa (raw, json)
Hash identifier: hoBVFx9wS0f/e0xFMvMZ3Zip9Xxu97EGI4AqulLPYvA=
Subject key identifier: 37:4E:CB:17:F1:3B:91:A7:58:E8:53:EA:80:46:04:9A:C5:F9:AA:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B32B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5515E284C4D11F18AF5E4E0CE1D38B0.roa
Signing time: Sun 10 May 2026 08:55:14 +0000
ROA not before: Sun 10 May 2026 08:55:09 +0000
ROA not after: Wed 10 Jun 2026 08:55:09 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111403 (0x1b32b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 08:55:09 2026 GMT
Not After : Jun 10 08:55:09 2026 GMT
Subject: CN=6a0047f2-f872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:c1:87:6d:e0:5f:9e:a8:86:c1:a9:6a:61:
c9:f8:63:c6:ab:97:b4:20:50:1b:ee:d2:7a:22:3b:
32:4c:4a:99:02:8d:84:35:32:5f:83:0c:2e:ac:e1:
68:73:29:ed:7c:35:82:36:3a:c3:6b:36:f1:95:be:
46:71:90:65:72:b4:c4:b8:fb:9d:49:63:52:51:ca:
3e:e8:d6:92:0a:ac:ec:da:68:c6:5b:2f:a5:b3:06:
0d:8b:ef:10:93:23:de:2b:01:d2:06:5d:09:ff:1b:
7b:f9:02:18:89:98:df:94:26:f7:83:8a:cc:d9:4b:
ae:14:c9:b9:08:0d:94:ea:26:92:e7:37:7e:5e:15:
ae:fe:dd:f0:70:16:9e:dc:75:bf:b9:f6:41:15:9e:
7c:b3:02:c8:4b:f0:b3:30:97:65:03:30:51:67:a0:
a6:cd:c8:95:cf:10:ba:27:6d:b3:ef:97:9e:0c:09:
33:27:9b:35:d0:18:69:51:28:0e:aa:3f:04:8c:ca:
e1:ec:03:f3:7f:ef:5f:58:65:08:92:e1:7a:f4:56:
75:40:ae:c2:20:7a:41:10:14:79:64:80:2e:39:85:
ac:2c:44:ba:4f:3c:c1:a7:f1:61:97:42:ed:52:dc:
8a:b9:ab:e5:8c:90:d8:d5:68:c1:0b:19:83:da:f4:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4E:CB:17:F1:3B:91:A7:58:E8:53:EA:80:46:04:9A:C5:F9:AA:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5515E284C4D11F18AF5E4E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
88:01:4b:78:35:38:6d:f3:dd:ff:d2:a1:85:d7:fe:d9:15:5e:
18:07:f3:fc:b7:a2:8b:d9:72:25:70:35:39:99:f6:e4:b2:82:
93:94:d3:ce:d7:9f:d3:5c:a0:4f:10:fe:f7:1c:37:3b:cf:82:
23:b4:8f:6b:41:cb:3f:59:a7:87:df:32:f0:9e:9d:df:21:1a:
a1:48:85:8f:cb:28:f3:a6:34:cc:a4:95:32:ad:40:a7:bb:c3:
83:a0:99:ba:c8:fb:47:7e:e8:2d:4f:54:99:8a:2c:9c:1e:2e:
0c:8a:7b:a4:da:82:5f:c7:97:01:e7:04:1a:d5:70:63:c4:78:
82:fd:50:2e:9b:e2:0e:d7:db:31:37:56:f6:61:46:fc:4f:f1:
c2:2b:35:be:b1:85:30:f5:7a:7d:dd:75:3d:62:e3:00:c5:24:
c0:17:87:7b:c2:38:ab:94:4c:22:0d:6f:36:70:51:22:29:e2:
e7:8c:fc:54:82:6f:b6:08:18:ac:73:59:0d:7b:5b:8b:e1:b5:
b7:0f:00:21:5f:ff:56:12:b2:37:a3:ff:11:f8:29:e5:b2:d8:
2d:d4:2c:ff:13:9f:6b:00:db:40:99:d8:fb:c5:3a:cf:11:2e:
84:e6:e8:d4:e2:7e:e0:29:98:23:c2:fb:63:68:68:b6:f1:eb:
59:00:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:59:34 2026 by rpki-client