Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05AE562826A511F1938F41A0DAE4EC9C.roa
File: 05AE562826A511F1938F41A0DAE4EC9C.roa (raw, json)
Hash identifier: iLCxfj9nrvRj19ctFA0ENK87MDYVnaOVgrusv3fWUOQ=
Subject key identifier: D7:77:78:9C:B2:ED:83:A3:49:54:92:AC:09:4F:3E:56:9D:05:D1:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05AE562826A511F1938F41A0DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 10:42:44 +0000
ROA not before: Mon 23 Mar 2026 10:42:37 +0000
ROA not after: Thu 30 Apr 2026 10:42:37 +0000
asID: 152092
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108270 (0x1a6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 10:42:37 2026 GMT
Not After : Apr 30 10:42:37 2026 GMT
Subject: CN=69c11924-d929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:46:ce:55:68:3c:b9:55:e7:39:e8:80:4d:
14:3c:bd:5d:bf:8d:d3:b3:37:ae:89:55:96:14:75:
2d:9e:de:a0:58:87:d7:68:99:11:1f:62:ce:a5:3d:
99:e7:7d:3d:b3:ce:7d:21:9e:c9:e5:1a:ab:19:c7:
2c:89:58:3b:c3:f7:d4:40:54:60:26:98:47:15:f0:
a2:6a:3c:9e:9f:96:9a:6e:77:10:7d:e7:1a:99:1f:
ff:53:87:7e:69:b7:b8:1b:02:f8:74:b0:1f:9b:f7:
bd:aa:67:46:0d:d3:6b:4a:2b:45:ab:48:9e:d8:fc:
86:e7:9f:f9:59:3c:5f:b3:0a:cd:1d:aa:fe:5e:48:
a5:4d:39:1e:e6:95:58:82:98:fb:87:5b:12:4f:2e:
4f:7b:ed:dc:32:da:83:d3:aa:f7:72:8f:06:1e:d4:
dd:28:57:6f:b2:ae:f7:e9:25:bb:b9:c6:da:4c:1a:
21:f3:78:37:b8:d8:1d:d6:1c:fc:f3:e0:9b:d8:4e:
e0:73:0e:71:d0:dc:2e:20:7a:83:36:f4:71:0d:b1:
07:cc:5f:3f:ad:5e:2a:18:51:8e:62:36:c4:66:0b:
3c:2a:be:4f:4d:e6:5a:10:fb:6c:4f:14:c9:63:6f:
1c:a4:b8:28:5c:26:99:af:1b:aa:9b:be:f2:ae:9b:
ee:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:78:9C:B2:ED:83:A3:49:54:92:AC:09:4F:3E:56:9D:05:D1:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05AE562826A511F1938F41A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.198.0-156.245.203.255
156.245.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:5f:79:35:ac:25:9e:54:75:67:1a:7d:c1:6a:4c:b1:bf:ae:
90:29:1c:94:a1:82:05:42:6e:7f:02:ba:75:0f:5a:09:c1:16:
b8:c4:57:c0:5e:b2:70:56:a2:85:80:d0:b9:b7:17:bf:65:8b:
2b:58:9f:b8:c7:ce:14:2a:d0:23:96:6c:97:ba:41:38:23:49:
70:37:82:aa:85:02:52:1d:6d:00:46:5c:fc:3d:3d:8b:e2:c2:
51:ed:41:37:b4:f5:3b:e4:27:5b:c5:22:db:f5:67:83:16:38:
c7:d5:67:20:f5:33:2a:7b:ee:99:e7:1e:ba:71:85:1f:42:a7:
f8:1b:61:b4:ce:79:20:7a:65:64:e0:d7:2f:dc:3b:b5:e3:49:
7f:0d:71:f9:bf:27:c6:53:0f:18:e6:4f:04:02:86:57:88:f3:
f2:11:2c:7e:ad:8d:5e:ec:ad:4f:9b:cf:19:70:1e:ab:d1:03:
fe:5d:40:38:b5:50:74:6f:54:71:08:a1:5b:98:c0:9d:54:49:
ef:7e:38:90:3a:0c:a6:22:cb:58:98:bc:8f:6d:e4:3d:d5:a4:
47:63:36:e5:f9:6a:32:f5:b9:37:1c:10:a9:0e:cf:0c:2d:43:
50:3a:2d:3d:90:71:f1:5a:67:96:57:b8:b0:15:2e:04:7c:7e:
ec:ed:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:44 2026 by rpki-client