Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315213763F2011F1BC951A1DCF1D38B0.roa
File: 315213763F2011F1BC951A1DCF1D38B0.roa (raw, json)
Hash identifier: xUgkceudTpeTkQyUc1O1drp5pLCZfVohNgLgLx6NstE=
Subject key identifier: 17:CF:15:61:EE:78:45:88:EF:33:42:2C:E7:9C:97:C5:8F:E5:21:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315213763F2011F1BC951A1DCF1D38B0.roa
Signing time: Thu 23 Apr 2026 14:24:53 +0000
ROA not before: Thu 23 Apr 2026 14:24:48 +0000
ROA not after: Sat 30 May 2026 14:24:48 +0000
asID: 9304
IP address blocks: 156.233.66.0/24 maxlen: 24
156.245.163.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110275 (0x1aec3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 14:24:48 2026 GMT
Not After : May 30 14:24:48 2026 GMT
Subject: CN=69ea2bb5-e72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:2f:39:93:65:b2:71:5e:2c:d4:66:c7:a1:
7c:52:0c:8f:b1:84:4d:8b:09:0c:f5:e9:70:db:1e:
b8:13:57:a0:79:78:aa:ca:9a:30:ea:f6:fe:64:54:
00:e0:29:44:e8:f8:35:ee:f7:47:47:e0:72:67:f2:
74:94:24:02:59:bf:32:9b:1c:f1:02:15:de:c2:ed:
28:93:48:10:3a:de:f7:1f:a4:ac:4c:23:7e:36:74:
9b:be:b4:c2:51:ec:9d:49:fe:18:b0:39:9b:2a:37:
f6:c9:fa:a5:3c:2a:04:b4:9b:b2:6c:c5:3a:1c:61:
01:8d:e6:f2:fe:56:f0:d6:20:96:5e:08:9c:ff:2f:
48:89:d3:13:6a:d8:71:84:80:02:11:d1:52:75:ba:
0d:6f:49:e2:4c:79:3b:03:08:4a:92:1c:73:78:76:
76:91:0a:c1:1a:3e:4c:9e:72:fc:d8:13:23:52:f7:
8a:94:4a:50:57:b2:74:20:05:8e:a2:f6:28:99:a8:
a3:05:ad:83:00:37:28:22:bc:40:bc:bc:10:a9:ec:
f9:dd:52:dd:8c:9c:7f:30:60:d3:b4:98:55:a4:6b:
33:f8:75:ac:4e:3f:f5:41:e8:b4:89:a7:28:c0:1f:
69:10:62:91:c1:c8:e3:d7:0d:97:ef:78:4e:91:9e:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:15:61:EE:78:45:88:EF:33:42:2C:E7:9C:97:C5:8F:E5:21:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/315213763F2011F1BC951A1DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.66.0/24
156.245.163.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.183.0/24
156.249.185.0/24
156.249.190.0/23
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:fc:dd:70:f8:b0:9e:93:0c:ce:4a:8f:81:e7:46:b9:93:
16:04:c4:0b:6f:51:a1:63:44:ba:20:c5:88:d8:13:1e:e1:ad:
f9:f6:aa:84:75:77:1f:9a:e8:f5:b7:c5:24:97:4e:7d:cb:40:
34:24:8c:d5:6b:4f:05:05:2b:cc:28:47:95:7d:41:fe:ad:37:
0d:4d:fb:22:1a:be:2e:c1:0e:d1:d0:43:50:0a:bc:94:11:8d:
d4:13:a3:75:6b:0e:8a:11:4d:c4:4b:ec:32:d6:ad:75:69:e0:
0b:f0:62:b7:44:da:90:67:f5:11:ba:58:4f:cf:56:04:06:be:
1e:30:48:81:05:22:68:3c:54:76:a6:58:e0:87:de:0b:3e:a0:
5c:99:21:dd:98:26:9a:7e:3b:7c:c9:db:6d:2f:69:47:46:d2:
67:df:4d:65:cd:04:b3:f2:fb:ff:6d:14:0b:3c:16:55:1c:33:
4a:44:e9:83:e4:72:67:5b:89:11:f5:2c:be:00:91:5d:8f:f1:
d1:4b:d7:97:b5:d1:0d:d4:fa:59:ac:49:af:6f:78:75:f6:47:
f8:cc:43:f3:08:14:2a:0f:c9:50:40:07:34:2d:c9:92:0f:a1:
a8:35:69:fb:e3:de:da:d8:bc:32:7b:8f:f0:f5:b1:47:22:dd:
f6:6b:82:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:51 2026 by rpki-client