Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633F428C38DB11F18D631FB3CE1D38B0.roa
File: 633F428C38DB11F18D631FB3CE1D38B0.roa (raw, json)
Hash identifier: ljfy56v1XOI+e0EZkdmRI4uXawDwpsGgMK1GFPxCU34=
Subject key identifier: 2D:D4:57:B2:30:A3:69:61:3D:CA:B2:CA:5C:B5:13:CD:E6:AD:D5:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633F428C38DB11F18D631FB3CE1D38B0.roa
Signing time: Wed 15 Apr 2026 14:57:14 +0000
ROA not before: Wed 15 Apr 2026 14:57:09 +0000
ROA not after: Thu 15 Apr 2027 14:57:09 +0000
asID: 328608
IP address blocks: 156.255.73.0/24 maxlen: 24
156.255.74.0/24 maxlen: 24
156.255.77.0/24 maxlen: 24
156.255.78.0/24 maxlen: 24
156.255.87.0/24 maxlen: 24
156.255.97.0/24 maxlen: 24
156.255.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109814 (0x1acf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 14:57:09 2026 GMT
Not After : Apr 15 14:57:09 2027 GMT
Subject: CN=69dfa74a-30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:e5:e1:1c:78:8f:72:2a:f6:9f:a5:6b:c1:
73:ad:12:a9:c2:93:45:54:23:ef:3a:b6:2d:bf:a4:
e5:64:71:49:19:58:fe:4e:e5:5e:33:a2:89:1f:f7:
e4:fc:da:61:d4:9f:12:90:9f:9d:17:6e:7d:e5:f4:
59:c0:5d:f8:7f:c7:aa:27:e3:4a:0d:7f:d0:f5:83:
96:6a:ed:b4:4e:68:0a:fa:66:c5:0f:57:28:10:b2:
76:5e:85:d4:7e:5c:40:72:dc:1c:3d:12:0b:75:de:
14:3a:55:d5:a6:a2:f6:8c:ba:25:b2:cd:ff:87:e5:
e1:f2:f0:b6:c0:3d:d7:6f:2a:41:84:3e:9a:dc:88:
36:db:db:6d:0a:85:7c:3a:83:ef:d7:b8:cc:a7:af:
67:c4:f6:9b:e6:c3:bc:11:4e:67:62:06:57:75:fb:
1e:89:ff:65:95:8f:5a:9f:fb:6b:00:a1:54:9b:08:
cc:da:75:9e:d2:24:2c:34:96:44:1f:66:f0:b7:8b:
d7:c2:cc:dc:18:99:9c:50:91:cb:bb:57:e2:59:01:
10:f0:32:4e:46:fb:d3:63:af:d0:4a:c7:3c:e6:49:
6b:bc:9c:42:be:3b:ea:35:8a:a5:e2:b1:8c:ae:ed:
ff:69:ac:15:64:e6:a4:a9:5f:29:f9:65:f6:60:f4:
17:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:57:B2:30:A3:69:61:3D:CA:B2:CA:5C:B5:13:CD:E6:AD:D5:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/633F428C38DB11F18D631FB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.73.0-156.255.74.255
156.255.77.0-156.255.78.255
156.255.87.0/24
156.255.97.0-156.255.98.255
Signature Algorithm: sha256WithRSAEncryption
a7:52:5f:6d:c7:90:bd:4b:d7:ec:23:b7:2f:f4:a2:d7:7f:18:
67:55:05:f4:b4:0f:eb:dc:da:32:1d:fb:e2:8f:a4:b9:8a:6e:
8c:98:35:2a:27:96:ca:18:aa:b8:56:50:7f:61:46:cd:ca:97:
f6:8e:9e:4a:b4:a4:26:d7:f1:d9:24:3f:c1:5a:88:17:c8:f4:
f1:e5:2d:87:6a:bf:aa:a0:41:49:9d:1e:36:34:8d:7c:3d:1b:
39:1b:a8:ca:1b:e5:18:90:5c:4b:a4:4f:87:08:56:41:84:d0:
40:2c:a7:41:b7:ba:fb:89:11:ac:98:da:98:9a:2f:19:e6:e3:
f0:d9:27:83:d9:f7:5a:d4:3d:34:1e:b3:7f:12:86:6b:cb:4f:
cb:f0:f6:9c:0c:4d:39:42:c8:9f:dd:99:f6:c3:b6:5e:0e:2d:
55:46:e1:87:b7:f2:a8:0e:85:72:15:2e:0d:d8:af:8e:ec:8c:
73:59:d4:25:56:02:27:94:8e:7d:41:e3:de:22:3c:cb:4c:bd:
ce:b8:3c:f6:f3:ff:0b:f7:7a:bc:25:50:de:b1:6c:2a:00:85:
7e:6e:29:4b:9e:44:3f:99:0f:ff:da:98:51:ec:aa:4d:69:22:
84:90:26:61:1e:d9:3c:c9:73:a0:24:9c:7f:c5:50:2a:12:37:
7b:30:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:55 2026 by rpki-client