Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8033AF4873A11F186AB160ECF1D38B0.roa
File: C8033AF4873A11F186AB160ECF1D38B0.roa (raw, json)
Hash identifier: d3mYLzX1rSIV7K69iPvlajyDYcIK3FMJ2dLCsx4Z+Ko=
Subject key identifier: 34:30:13:F8:F9:6D:05:2D:1B:77:4C:B3:1E:77:02:31:82:03:E1:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7E6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8033AF4873A11F186AB160ECF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:36:36 +0000
ROA not before: Fri 24 Jul 2026 08:36:32 +0000
ROA not after: Tue 01 Sep 2026 08:36:32 +0000
asID: 11427
IP address blocks: 156.229.228.0/22 maxlen: 24
156.233.12.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.233.36.0/22 maxlen: 24
156.233.76.0/22 maxlen: 24
156.233.84.0/22 maxlen: 24
156.233.112.0/22 maxlen: 24
156.233.196.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116710 (0x1c7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:36:32 2026 GMT
Not After : Sep 1 08:36:32 2026 GMT
Subject: CN=6a632414-1112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:43:16:fd:79:01:b7:b4:fc:2b:5f:35:15:
12:5d:6e:f6:13:e3:cc:1f:47:b1:28:77:05:b7:62:
28:23:35:54:6c:8f:8b:0b:de:b9:2d:eb:8a:73:f7:
4c:0a:db:17:9e:23:94:81:6a:2d:ec:94:01:5b:c4:
8b:b8:7b:50:a1:8f:17:ac:f9:8b:58:cf:29:ce:45:
f3:7d:d8:7a:fb:a7:fe:c2:b5:5f:5a:89:ee:df:d0:
a2:be:75:39:a7:92:9a:dd:e4:cd:9b:b5:ab:76:6b:
a0:6c:33:22:34:6d:f0:9e:49:8e:f3:2c:a4:72:74:
a3:98:69:66:ec:9a:c8:17:9a:a3:5e:a2:59:37:8f:
28:92:8e:e0:21:82:33:cb:a1:14:a7:80:1b:ad:71:
15:6b:86:de:0f:1e:8d:61:0f:bc:dd:8e:e5:92:02:
f9:31:6f:de:a4:b0:97:fb:9a:47:db:58:f4:c7:59:
b3:e4:3c:dc:77:a3:bc:15:bf:ec:d0:f6:49:2f:07:
97:38:ff:d5:0a:df:14:ea:ba:70:cb:e8:26:a0:34:
67:b7:27:29:e7:90:1d:7d:50:ed:de:70:29:6f:09:
cf:b3:88:46:ea:64:ff:22:64:72:33:1a:da:ba:1d:
1f:fc:04:0d:eb:16:a4:e5:09:97:1e:02:cb:6b:38:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:30:13:F8:F9:6D:05:2D:1B:77:4C:B3:1E:77:02:31:82:03:E1:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8033AF4873A11F186AB160ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.228.0/22
156.233.12.0/22
156.233.24.0/22
156.233.36.0/22
156.233.76.0/22
156.233.84.0/22
156.233.112.0/22
156.233.196.0/22
156.244.192.0/21
156.244.216.0/21
Signature Algorithm: sha256WithRSAEncryption
98:9e:14:17:24:b8:3b:e5:0d:69:38:fa:e6:9a:f7:11:df:66:
4b:a2:75:10:d0:71:48:3e:99:77:9e:25:f0:d9:f7:d0:71:7f:
c7:60:da:b8:26:2e:29:2d:ed:2e:84:fa:bd:83:8a:fa:7b:f8:
bf:a5:5e:9b:9f:de:24:89:11:51:af:cf:dd:3b:42:5b:59:1e:
d9:e4:1c:af:87:89:5e:e8:fb:b5:e5:60:62:40:5f:f7:67:55:
77:09:c2:c6:0c:98:64:65:c0:ba:2d:6d:1b:e3:e7:a2:c1:4c:
b4:77:8b:8b:7e:07:f1:42:5a:ba:ab:43:a2:8e:9c:43:91:64:
b8:83:e2:b3:3b:58:c8:0b:c8:9d:55:22:90:a9:c6:4e:5a:ee:
5c:af:33:a5:a0:a2:e8:8b:c2:77:88:94:88:1a:d1:98:1b:61:
0f:3f:18:33:28:83:b7:d9:4b:95:3c:d9:98:86:5b:9e:d6:64:
8e:f6:06:2d:02:c3:7d:fb:ff:e9:0a:35:6b:b3:d0:89:4f:d1:
18:56:66:e8:2e:85:72:52:d3:10:c8:f1:7d:84:4b:9f:21:2f:
c3:72:0e:c1:fa:13:b9:a1:bb:15:53:67:78:1b:4c:9a:82:45:
16:46:0b:f3:eb:8b:d0:75:0d:1c:dd:d2:a4:9c:31:c4:d7:4a:
f9:ab:bd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:29 2026 by rpki-client