Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638E20922E8A11F18913D4E5DAE4EC9C.roa
File: 638E20922E8A11F18913D4E5DAE4EC9C.roa (raw, json)
Hash identifier: PvpS3gRiRDdLvkC7pNdb+mF5gQVxYGyxzzIYRR2Ayik=
Subject key identifier: BA:6A:B2:69:05:87:A7:4C:39:18:67:7F:E7:5E:44:A3:9D:A1:AA:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A937
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638E20922E8A11F18913D4E5DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 11:52:14 +0000
ROA not before: Thu 02 Apr 2026 11:52:08 +0000
ROA not after: Sat 09 May 2026 11:52:08 +0000
asID: 48031
IP address blocks: 156.236.22.0/24 maxlen: 24
156.236.23.0/24 maxlen: 24
156.254.97.0/24 maxlen: 24
156.254.98.0/24 maxlen: 24
156.254.99.0/24 maxlen: 24
156.254.100.0/24 maxlen: 24
156.254.101.0/24 maxlen: 24
156.254.102.0/24 maxlen: 24
156.254.103.0/24 maxlen: 24
156.254.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108855 (0x1a937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 11:52:08 2026 GMT
Not After : May 9 11:52:08 2026 GMT
Subject: CN=69ce586e-cdae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:68:7a:eb:3a:48:2b:79:a9:13:eb:de:a7:8b:
d7:d6:99:40:d1:04:40:c9:87:23:50:2b:9b:5e:db:
45:54:48:ee:84:b6:29:07:b8:ec:0a:f1:58:b9:fc:
91:38:d4:66:bc:f7:37:d1:fb:dd:bd:09:5c:3a:d4:
fe:41:17:39:cd:10:17:50:ef:f8:78:a5:f1:50:c5:
1d:b0:85:bc:79:ef:14:48:f9:6e:87:d1:d7:7a:72:
fd:47:6c:8f:11:ef:3c:a6:72:90:a5:70:68:ad:81:
52:dd:c8:ed:e0:99:0e:cf:0d:85:86:4e:f4:69:6c:
47:46:7c:48:54:0c:47:6e:09:96:ec:01:d8:61:c5:
ec:e7:32:9d:b9:6b:1f:cc:e8:30:3e:41:fd:8b:f9:
4f:cb:e9:bc:e9:91:6b:26:13:c3:0e:2a:2a:cc:0f:
25:d4:8d:64:29:fb:11:21:1c:4d:36:7a:98:f8:07:
12:d6:10:f3:26:e4:b2:f5:60:91:07:8d:44:9d:a8:
02:c2:1e:cf:7b:35:14:22:63:fc:7b:2c:75:06:6f:
04:37:6f:8c:2b:cf:8b:c7:b5:a8:aa:a1:77:e1:56:
2b:f8:f2:53:f5:87:a9:e7:88:bc:c2:72:35:e9:a8:
4a:d5:f6:ba:25:8a:d9:6d:97:ab:88:41:10:b3:42:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6A:B2:69:05:87:A7:4C:39:18:67:7F:E7:5E:44:A3:9D:A1:AA:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/638E20922E8A11F18913D4E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.22.0/23
156.254.97.0-156.254.104.255
Signature Algorithm: sha256WithRSAEncryption
4e:a6:4a:6a:ad:af:9e:5d:3a:c0:95:d1:23:67:ca:a4:40:6a:
36:99:2a:9a:ad:a7:d7:11:55:8e:39:c4:82:de:31:3c:09:16:
d8:a2:ca:13:e8:11:d7:4e:bf:47:30:2e:a0:ec:8c:3a:d6:35:
18:46:aa:2b:d3:a0:bf:b8:c5:f2:65:01:d8:a6:73:65:71:fb:
a5:07:34:ef:33:8b:fc:a4:eb:85:24:36:c6:57:2b:1b:25:7a:
f7:59:ca:2c:a4:41:b1:bb:c7:cf:8a:8d:1f:40:2f:8f:85:3f:
c5:36:38:a3:ca:87:53:77:d8:d7:05:a8:ae:6f:74:ae:13:50:
f8:df:dc:b3:8a:b8:a5:af:e6:a7:58:b1:92:71:ef:64:d1:90:
ac:20:cf:c3:1f:a5:48:ea:9c:28:ca:53:f7:d9:ca:59:52:97:
fa:d2:52:9f:27:42:b4:e0:eb:52:ce:d1:26:0f:a1:68:71:ad:
70:e9:d1:38:48:1a:e0:69:cb:1b:f3:60:ed:5a:19:7d:f1:64:
1e:69:ec:d7:9b:29:72:2f:d3:4b:59:e5:52:45:c3:03:a6:d1:
3e:2e:d5:b1:8d:63:07:dc:95:3d:7e:31:a8:53:df:bd:7c:ca:
25:0b:bd:34:c3:ba:57:f1:72:db:a8:c4:66:7a:6e:36:30:8f:
80:6f:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:11 2026 by rpki-client