Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3213F93E624B11F184CFFBA6CE1D38B0.roa
File: 3213F93E624B11F184CFFBA6CE1D38B0.roa (raw, json)
Hash identifier: ZNxoUcu0WrEz2jZW8CIEh5cHAszhaLag/JEKHiPZo7I=
Subject key identifier: 64:1D:B1:36:9F:BD:14:A9:F1:2E:30:8F:E7:1F:48:1F:87:14:F7:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3213F93E624B11F184CFFBA6CE1D38B0.roa
Signing time: Sun 07 Jun 2026 08:30:53 +0000
ROA not before: Sun 07 Jun 2026 08:30:48 +0000
ROA not after: Mon 20 Jul 2026 08:30:48 +0000
asID: 214413
IP address blocks: 156.226.131.0/24 maxlen: 24
156.226.132.0/24 maxlen: 24
156.226.218.0/23 maxlen: 24
156.226.243.0/24 maxlen: 24
156.226.244.0/24 maxlen: 24
156.243.113.0/24 maxlen: 24
156.243.114.0/24 maxlen: 24
156.252.30.0/23 maxlen: 24
156.255.59.0/24 maxlen: 24
156.255.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113735 (0x1bc47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 08:30:48 2026 GMT
Not After : Jul 20 08:30:48 2026 GMT
Subject: CN=6a252c3d-7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:9e:b8:83:db:43:a8:ba:7a:13:1d:c5:76:
9f:d7:59:a9:83:09:23:59:c9:d0:61:c1:75:17:90:
32:94:b1:c7:5e:7e:dd:dd:ba:14:b7:fd:3a:bd:fe:
7a:f0:ce:9c:ab:62:15:c5:a0:a3:6d:01:ab:92:7e:
4a:89:d5:0f:59:4d:93:25:23:3e:ee:1d:b2:1b:21:
77:55:ad:da:98:0f:3a:82:67:d4:1f:86:a7:46:5f:
41:32:10:61:d5:34:96:88:65:36:1d:53:c0:18:ef:
4c:e6:66:2e:d8:00:8c:86:a8:b2:5f:d2:73:d7:c8:
75:52:1b:a3:64:88:6c:0e:ba:63:9c:df:c7:ae:b0:
0f:2e:51:4e:13:14:8e:7e:75:3c:63:65:b0:67:cc:
1f:89:cd:ba:27:67:91:e4:d1:9f:d6:e2:0c:b3:7e:
b7:9b:67:8a:81:91:6c:df:66:98:7b:ad:13:de:02:
d7:9f:27:02:29:80:e7:ac:07:8f:d3:de:d4:9e:81:
c4:27:1e:23:08:91:a8:43:3e:9d:3d:40:c6:f6:1b:
9a:f8:70:e4:b8:bd:1b:3c:1f:ea:be:f6:60:57:08:
e6:34:25:3b:8f:97:7d:e5:78:6f:3b:99:1a:3f:6f:
86:4f:86:92:29:17:08:bc:12:f3:28:0f:ce:7a:dd:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:B1:36:9F:BD:14:A9:F1:2E:30:8F:E7:1F:48:1F:87:14:F7:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3213F93E624B11F184CFFBA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.131.0-156.226.132.255
156.226.218.0/23
156.226.243.0-156.226.244.255
156.243.113.0-156.243.114.255
156.252.30.0/23
156.255.59.0-156.255.60.255
Signature Algorithm: sha256WithRSAEncryption
8d:be:bb:b0:51:bf:54:70:02:17:fe:93:36:9c:2f:9e:b7:e2:
6f:73:0d:ed:c9:7c:d0:80:a1:1b:80:da:21:22:7f:6f:ab:1f:
d6:62:4f:a7:e1:e2:2e:eb:a9:bf:f1:58:87:bf:38:b4:50:09:
31:ca:20:15:1f:34:3c:39:23:d3:d8:01:d9:57:c1:e9:66:a0:
42:8f:a2:2c:22:e1:0e:84:b1:1b:60:12:15:ba:2e:4b:aa:67:
7e:89:bd:1c:53:4e:4b:8e:52:60:0f:5c:2a:7a:97:46:3a:26:
c5:6f:cb:57:ae:dc:4d:37:17:65:f3:6a:bf:89:d4:33:56:49:
4d:51:0a:5b:95:0c:3c:48:80:bf:d9:98:b4:9e:47:a6:ee:1b:
9c:1f:99:17:9f:f9:aa:a8:cc:cb:54:71:35:94:40:96:a9:21:
a7:5f:fa:62:e8:1c:84:94:8f:4c:9b:35:0f:4e:b5:08:59:4f:
8e:0f:4d:bc:be:ca:a0:37:ba:54:fc:75:2f:39:0f:b3:86:fb:
e8:a5:5b:34:23:32:8f:87:44:27:b5:48:20:ff:74:e3:b9:e7:
93:f7:a8:d9:3e:9e:bc:26:e8:0b:6d:08:5e:f5:90:16:82:54:
d5:85:72:27:b2:9d:d3:2a:2a:30:87:2f:b5:47:3c:b5:be:58:
c7:d3:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:55 2026 by rpki-client