Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E9BBA82D9A11F180EAE5F4DAE4EC9C.roa
File: 79E9BBA82D9A11F180EAE5F4DAE4EC9C.roa (raw, json)
Hash identifier: f6Kem6hZt6QMg87DiFlyyMJIDgS8OBkyIgiJdbeXJ1o=
Subject key identifier: F2:8E:1F:F3:5D:BE:9E:47:E3:30:57:31:FC:BD:32:BB:FE:F9:B5:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E9BBA82D9A11F180EAE5F4DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 07:14:52 +0000
ROA not before: Wed 01 Apr 2026 07:14:47 +0000
ROA not after: Sat 02 May 2026 07:14:47 +0000
asID: 11427
IP address blocks: 156.233.12.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108792 (0x1a8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 07:14:47 2026 GMT
Not After : May 2 07:14:47 2026 GMT
Subject: CN=69ccc5ec-0712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:ce:e2:6e:95:25:47:16:cc:54:17:85:50:
6e:0d:66:55:33:53:aa:f5:e7:68:88:f0:38:3c:c3:
76:da:61:5f:4a:00:b4:c4:84:38:5d:43:9f:8d:c0:
49:18:48:df:88:6d:22:11:3c:67:77:d6:07:9b:85:
68:cd:f3:aa:01:56:fe:36:71:16:6f:5f:02:0a:04:
d7:aa:12:8a:10:cb:2c:cf:b9:13:54:15:d0:a5:e0:
fb:ee:9b:24:be:6b:26:01:6c:38:2c:9e:58:d2:20:
8f:f9:99:bd:6b:7b:6e:4a:d6:0e:a8:b6:57:2b:fc:
05:af:05:e3:30:0a:c7:5c:81:0e:e4:2b:ee:75:ca:
5d:a3:51:b6:c2:75:c6:6d:a9:24:26:17:24:c4:31:
0d:32:fe:8b:be:64:12:7f:50:13:9a:bd:49:8d:68:
bc:ad:d9:c6:54:98:5c:8f:d7:1e:61:9c:a4:e8:9f:
59:29:b1:09:b1:3e:e0:0f:ee:0a:3b:26:71:2e:51:
77:79:b8:09:2a:8e:70:1a:66:0c:fa:41:36:4a:e4:
8c:ae:e0:af:10:af:a3:02:70:98:ee:54:3c:98:5c:
6e:93:b3:17:cb:22:7a:ce:89:0c:22:78:f2:6a:ca:
99:88:d9:63:f2:f8:ba:34:13:bf:e7:8a:01:a3:08:
56:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:1F:F3:5D:BE:9E:47:E3:30:57:31:FC:BD:32:BB:FE:F9:B5:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E9BBA82D9A11F180EAE5F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/22
156.233.24.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
57:0a:e9:90:ed:45:ea:a2:d7:ea:86:b3:13:7d:e9:b4:99:35:
91:95:53:f3:10:06:53:91:6f:a2:77:83:b6:07:5c:54:e7:37:
ec:e1:80:48:66:30:99:fa:53:5c:b1:2e:bf:c2:f7:e2:00:70:
1c:c2:f1:93:4c:43:20:e6:45:74:92:22:ca:70:02:a4:6b:03:
a2:a1:21:dc:4f:ac:2d:24:27:b2:73:06:bb:97:8c:f0:4f:58:
4e:f4:92:04:d0:cd:ff:b6:9c:5d:6c:3b:99:37:02:90:f9:56:
9e:07:db:0d:15:1c:6f:3c:61:56:21:1e:e2:ba:78:d6:68:4a:
1f:7f:89:f9:47:a1:4a:d0:9b:96:72:fd:e3:22:d4:0a:59:8e:
f5:13:e9:7d:49:f5:8e:f0:b7:c3:b0:38:32:e2:a2:af:4b:38:
be:7c:61:ed:f1:91:5f:48:6a:06:3d:7a:63:9b:b0:8e:f7:f7:
38:5f:c6:15:8b:6d:7b:b3:50:46:04:c7:32:f1:94:cc:58:48:
03:6d:87:c7:12:8d:35:7f:f5:2b:6e:8a:53:c7:36:24:91:10:
67:cd:10:fd:8c:3e:cc:2a:96:fd:91:0f:c3:6e:99:e4:fb:2e:
98:ff:5a:c0:5f:a9:6c:29:37:45:7a:07:91:14:93:24:d4:b9:
16:30:54:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:48:45 2026 by rpki-client