Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B845D060D511F193343BC4CE1D38B0.roa
File: E4B845D060D511F193343BC4CE1D38B0.roa (raw, json)
Hash identifier: CvCTG+9p9AH/H25gFkKI4riwQj7WyxivGbs/+DA2Ahw=
Subject key identifier: 9B:1B:B7:B5:B0:BB:22:1B:38:93:72:D4:85:E9:04:24:13:7C:AC:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B845D060D511F193343BC4CE1D38B0.roa
Signing time: Fri 05 Jun 2026 11:58:41 +0000
ROA not before: Fri 05 Jun 2026 11:58:36 +0000
ROA not after: Tue 05 Jun 2029 11:58:36 +0000
asID: 17561
IP address blocks: 156.242.138.0/24 maxlen: 24
156.242.139.0/24 maxlen: 24
156.242.140.0/24 maxlen: 24
156.242.141.0/24 maxlen: 24
156.242.142.0/24 maxlen: 24
156.242.143.0/24 maxlen: 24
156.242.144.0/24 maxlen: 24
156.242.145.0/24 maxlen: 24
156.242.146.0/24 maxlen: 24
156.242.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113679 (0x1bc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 11:58:36 2026 GMT
Not After : Jun 5 11:58:36 2029 GMT
Subject: CN=6a22b9f1-6cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:62:21:bf:31:10:e6:fa:96:60:30:92:ae:
23:1e:ca:d0:75:cb:32:24:6a:58:9e:5b:29:77:e6:
5e:8e:c3:2e:4e:b2:f0:0b:37:c9:98:39:d9:3a:02:
a9:93:6b:e8:25:e4:5b:b2:22:16:7b:ee:63:fe:85:
df:1f:21:a2:9d:50:97:52:22:2f:82:61:52:25:6a:
c0:c0:42:52:00:06:ba:ff:a3:9d:ac:69:9d:20:44:
43:b5:7f:0a:08:4e:29:6d:ad:af:93:28:81:80:ef:
d6:09:ea:55:ba:ce:4a:5c:1a:05:07:b4:2c:15:8a:
19:8d:55:e5:81:24:70:50:c3:dd:68:98:81:b9:a9:
6a:18:72:25:cc:16:76:97:0c:e1:45:f3:d2:49:50:
c3:ee:01:a0:c4:96:f2:62:f0:c3:f1:7f:4f:da:26:
e8:63:fe:10:44:55:90:4a:d7:e3:e2:01:94:0b:19:
45:42:e4:87:2e:31:c0:ed:49:24:8d:07:26:95:b0:
8c:ec:7d:d2:12:ed:ce:6c:fa:e7:f3:34:61:c1:c8:
a6:53:bf:7a:d3:ea:e4:03:e0:99:df:27:0a:40:a0:
79:d5:6b:00:bd:0f:ba:ae:e4:2f:d4:2f:b4:2d:b3:
1b:6c:52:c8:a4:90:6a:2a:1d:4e:57:f1:95:5e:8c:
4e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:B7:B5:B0:BB:22:1B:38:93:72:D4:85:E9:04:24:13:7C:AC:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4B845D060D511F193343BC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.138.0-156.242.147.255
Signature Algorithm: sha256WithRSAEncryption
1d:ba:0e:ab:4c:9d:68:af:64:61:7c:4c:0f:d9:d4:ed:3c:4c:
bb:6d:e9:21:70:c0:f3:de:6a:d6:ef:b1:72:94:78:a4:39:a1:
24:e1:99:95:8b:77:b1:be:d9:38:8a:53:d2:be:19:b4:23:10:
04:ba:e0:75:97:d7:5a:56:7c:b9:56:af:3a:20:08:81:eb:5e:
0c:8d:a4:23:0d:5b:a9:a8:5c:54:a1:92:33:29:f9:bd:b7:6c:
cb:bd:34:d7:9a:06:4a:39:52:82:14:3d:1b:af:06:be:14:a3:
70:8b:6d:fa:84:7b:29:45:d5:fc:9c:71:f7:f7:49:50:af:ca:
a1:b3:5f:e6:01:60:88:30:3b:f3:3a:11:5d:65:1c:d1:40:53:
19:72:6b:55:e7:16:f5:12:08:24:11:82:93:15:98:42:7b:d1:
84:0c:13:70:4e:65:97:a8:20:0f:8e:6b:e5:4f:25:0b:0c:a0:
e1:f3:eb:af:76:45:26:29:34:20:95:3e:20:6b:9c:70:30:44:
0a:41:6f:a3:30:84:05:a2:78:1f:f8:36:7a:1e:eb:30:cd:5f:
38:b0:bc:80:8c:fb:6b:32:07:bc:99:e0:56:dd:67:3e:68:2d:
45:b3:90:de:ca:2f:e3:d9:a2:f0:83:b5:d0:ea:c1:76:dd:22:
c7:30:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:05:48 2026 by rpki-client