Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA72BA9A873B11F18D6D4B12CF1D38B0.roa
File: AA72BA9A873B11F18D6D4B12CF1D38B0.roa (raw, json)
Hash identifier: 2zZWhbOUtyOB0haP7Q1wr/Rasn3XBOVP6JCB6xuJOdc=
Subject key identifier: 13:44:1B:27:A1:10:4F:43:05:93:1A:9F:69:7C:BD:7F:77:34:F6:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA72BA9A873B11F18D6D4B12CF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:42:56 +0000
ROA not before: Fri 24 Jul 2026 08:42:52 +0000
ROA not after: Tue 01 Sep 2026 08:42:52 +0000
asID: 11427
IP address blocks: 156.233.200.0/22 maxlen: 24
156.238.172.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116714 (0x1c7ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:42:52 2026 GMT
Not After : Sep 1 08:42:52 2026 GMT
Subject: CN=6a632590-6a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:d3:18:04:fd:73:6c:9f:cd:ab:06:1f:db:
87:c0:0f:42:69:ae:8f:fa:03:14:b0:95:89:5b:22:
e5:c7:fe:15:5d:7b:16:c5:2f:50:d0:e2:0e:07:b6:
47:4d:ff:d0:6c:da:10:bb:43:a4:22:8c:29:c0:21:
4b:25:a3:a8:16:c5:59:3c:c6:06:8a:b1:b4:49:3e:
5a:9a:1a:29:16:49:f9:47:61:f5:79:df:20:50:e2:
e2:c1:80:fe:f6:31:7c:af:9a:5a:27:1b:46:00:97:
08:7d:56:05:0b:7f:fa:1e:99:ea:86:ce:6d:ce:23:
8e:b8:f8:c8:33:5b:38:d9:3d:f9:1f:90:60:b6:e0:
28:98:8d:4c:54:6d:73:ee:8d:1f:1a:22:b2:27:04:
ac:15:a7:29:91:1d:1c:72:4d:f0:56:47:54:eb:9e:
a2:b4:6a:e2:42:74:e0:0a:29:bd:05:db:48:e8:40:
a9:35:f4:01:ed:62:d3:6d:6a:5e:44:f2:da:52:f9:
51:5e:2d:22:d2:5a:ab:65:d5:87:2d:b7:d2:b1:ea:
65:d2:91:73:04:e5:7a:a2:38:85:fa:ed:32:d5:ff:
0b:8d:b4:ec:b5:08:b8:d0:b7:05:62:0c:9d:b5:da:
21:0d:80:e5:f5:13:78:e3:60:cd:4e:9c:78:57:fb:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:44:1B:27:A1:10:4F:43:05:93:1A:9F:69:7C:BD:7F:77:34:F6:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA72BA9A873B11F18D6D4B12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.200.0/22
156.238.172.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:3e:c2:44:7e:03:ee:09:7f:46:76:e8:c4:d3:23:de:70:14:
bc:6d:0f:65:56:8f:4d:5d:e0:39:5a:a1:d6:1c:ff:c5:7c:d9:
05:e0:4d:d6:a0:33:78:49:93:8c:f4:c4:f9:bf:d2:fe:1f:b9:
6a:0e:51:4a:21:c1:13:5f:f0:c0:01:99:53:f1:1e:f2:3a:3a:
27:fa:b7:e7:31:82:11:31:53:0d:e2:28:f5:50:a6:88:38:d3:
ea:7b:f5:9b:52:40:4b:b5:23:62:a8:02:f1:f3:7b:94:72:9c:
d9:b5:18:21:5b:c6:07:5c:c6:b6:c7:c8:7e:53:45:e0:b1:ac:
bf:8b:98:c2:c3:e3:5b:97:55:09:46:3d:c9:73:22:b1:6c:ce:
8d:74:a6:9b:4e:ae:2c:8b:b9:ee:87:e5:0d:78:1d:69:ca:08:
6a:81:0f:4a:df:b4:a7:04:fc:89:80:d1:9f:14:96:89:2c:2c:
cf:8c:d7:58:4b:f1:7d:41:26:e2:56:c9:cd:f2:90:8d:7e:7e:
e2:32:b7:91:c5:80:4a:c0:99:3f:c9:1b:9b:c3:71:55:30:a3:
b2:60:55:60:11:6e:30:b9:90:07:42:15:bc:2c:89:79:f6:8e:
f8:d4:d8:40:86:68:0f:8d:92:58:3f:45:44:b4:0c:00:41:a0:
27:db:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:16:12 2026 by rpki-client