Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52016558487711F1B2232A03CF1D38B0.roa
File: 52016558487711F1B2232A03CF1D38B0.roa (raw, json)
Hash identifier: f28pcY0KBmJFgiNlP6IZ8p+XQ3QcsbWsB9uluwsDMjE=
Subject key identifier: 48:F3:93:FF:3D:A6:4C:2D:B8:22:D4:00:B6:E1:E5:8C:F2:B7:B2:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B179
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52016558487711F1B2232A03CF1D38B0.roa
Signing time: Tue 05 May 2026 11:41:14 +0000
ROA not before: Tue 05 May 2026 11:41:09 +0000
ROA not after: Mon 08 Jun 2026 11:41:09 +0000
asID: 44477
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110969 (0x1b179)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 5 11:41:09 2026 GMT
Not After : Jun 8 11:41:09 2026 GMT
Subject: CN=69f9d75a-c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:3e:e2:1e:5b:36:eb:21:62:1f:9f:d2:d7:
eb:09:1e:db:cf:98:52:26:27:be:50:ff:45:45:df:
1e:54:fd:ce:69:6b:c5:8b:e0:0e:18:96:cd:8a:a1:
3b:9d:bc:06:14:8f:f9:c5:58:8f:69:e4:d5:b2:d4:
51:b7:75:95:55:ed:4f:21:74:a3:c6:b4:12:36:1a:
b6:17:49:b2:98:d5:11:ea:bf:3f:8c:b7:88:e1:8b:
78:43:51:01:11:f1:cf:c2:08:3d:6f:5d:2b:b5:2d:
da:d6:ba:1f:76:53:a7:0c:ef:08:c9:9a:53:78:9a:
3a:7a:6a:3c:2d:55:08:20:64:26:f1:16:45:09:7e:
31:81:3c:f3:cf:7b:85:65:fa:fe:9f:a2:23:87:fa:
ae:eb:a6:9d:9c:55:fc:55:a5:ad:aa:19:49:e9:f9:
f2:6a:b4:60:4e:cc:37:ad:00:0b:d7:4d:7f:f6:f9:
46:8c:a5:9e:70:03:90:c0:ef:46:85:fc:88:dd:73:
44:ee:5c:b5:0f:8c:79:e1:52:e6:06:07:a5:77:4d:
83:1c:4a:fe:a9:f4:24:bd:73:6b:f2:7d:8c:ee:8d:
39:a3:6b:1f:3e:0c:d3:9d:cf:d4:cb:94:2e:d5:c3:
a2:c1:cb:c6:1b:ba:38:a4:07:a6:25:23:0a:d9:0c:
65:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:93:FF:3D:A6:4C:2D:B8:22:D4:00:B6:E1:E5:8C:F2:B7:B2:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52016558487711F1B2232A03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
96:0f:e6:a4:84:61:ce:46:9e:ed:aa:bb:0a:03:68:a8:c9:81:
86:27:ed:07:f2:6b:24:0f:af:be:f9:5e:c9:1b:04:1f:af:15:
d6:a8:09:3c:d3:7f:40:3c:a4:4f:7c:47:46:0b:ce:f5:ba:3d:
44:a9:41:97:ef:a1:21:f9:c5:d5:79:11:0f:fb:d4:e8:61:52:
9e:a0:cd:24:a1:71:99:fa:8f:ee:9f:83:98:98:3e:59:89:f6:
68:2a:1c:2a:4e:1c:0c:43:c6:4b:ac:d9:b8:6d:bf:94:f1:b2:
7e:e5:95:95:66:fd:9e:b7:66:f6:6e:29:a2:b5:a0:2e:08:ca:
57:ad:b2:a6:d4:ce:67:5c:4f:78:7a:a0:83:7c:b4:3a:1b:d4:
de:d2:96:7f:f8:1b:77:4a:4a:7a:1a:b1:f1:67:94:da:48:7b:
4d:9e:83:7d:a0:c5:16:6a:b0:f9:f5:dc:44:01:ed:97:f8:14:
05:86:cd:1d:6e:26:08:8c:b7:e1:73:b7:83:bd:3b:dc:34:71:
9b:75:f5:04:a7:47:3f:a4:a9:5f:cd:42:cc:25:2c:10:da:76:
0e:fb:6f:00:8e:a8:b7:5c:0d:c0:ea:45:8b:ed:32:1c:e4:7a:
d5:6b:1b:9c:60:29:8d:f4:75:ef:d5:53:53:23:b9:f0:4d:7e:
70:3e:fc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:34:32 2026 by rpki-client