Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537F45F63E6511F192D1F7A1CE1D38B0.roa
File: 537F45F63E6511F192D1F7A1CE1D38B0.roa (raw, json)
Hash identifier: x0JOm7rIZeqXpM/mmh0heQ2KQT7PCggdEUQlVePmRRA=
Subject key identifier: 53:B0:85:5E:C3:31:7B:C3:EC:35:29:61:DC:D0:D1:90:79:AC:82:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537F45F63E6511F192D1F7A1CE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:07:14 +0000
ROA not before: Wed 22 Apr 2026 16:07:09 +0000
ROA not after: Tue 09 Jun 2026 16:07:09 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
156.230.159.0/24 maxlen: 24
156.236.14.0/23 maxlen: 24
156.243.223.0/24 maxlen: 24
156.243.225.0/24 maxlen: 24
156.243.230.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110135 (0x1ae37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:07:09 2026 GMT
Not After : Jun 9 16:07:09 2026 GMT
Subject: CN=69e8f232-6fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:88:7a:bb:0a:a7:59:d9:e2:8d:10:11:e3:ee:
be:fa:0c:ab:25:40:b8:11:ae:03:6f:b2:4c:04:e6:
e1:f2:aa:f9:91:d0:f6:b6:23:bb:0b:6c:84:56:a6:
c2:6c:95:15:cc:4a:24:40:85:97:cb:f7:ca:d0:24:
cf:e7:e5:94:af:93:26:bf:5e:4e:95:43:ea:c8:a1:
52:7d:b4:41:21:ca:8c:61:55:31:a2:bb:ff:2e:3b:
f7:0c:7f:f4:b6:14:fb:ac:cb:4f:e2:37:a3:7a:9d:
da:ce:29:4b:f0:58:00:e8:b6:45:eb:9c:a1:d3:4f:
6c:0d:38:f3:b7:97:12:13:70:5e:dd:e4:c7:af:de:
44:ba:df:bb:e8:31:63:59:52:9f:7b:52:b7:d6:1c:
ac:98:a2:3f:4b:3c:88:d0:e2:57:2d:b9:31:2f:a1:
4e:82:02:f8:05:8b:8f:27:bf:71:c6:fc:f8:f0:ab:
18:a8:bd:45:c7:07:38:64:59:e3:54:ad:84:ee:ba:
fd:5d:12:af:73:d1:44:33:3d:46:ea:5d:c9:3d:89:
96:ea:e5:cc:02:7a:fd:ce:30:f5:c7:22:c7:7c:47:
eb:46:bd:79:5b:b8:90:49:07:cd:bb:16:7d:9f:f3:
11:46:82:56:3b:ab:3f:02:26:be:8f:f1:bf:0f:bd:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B0:85:5E:C3:31:7B:C3:EC:35:29:61:DC:D0:D1:90:79:AC:82:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/537F45F63E6511F192D1F7A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
156.230.159.0/24
156.236.14.0/23
156.243.223.0/24
156.243.225.0/24
156.243.230.0/24
156.243.241.0/24
156.243.245.0/24
156.243.250.0/24
Signature Algorithm: sha256WithRSAEncryption
07:57:20:9c:4c:8c:2b:70:bf:22:b0:a6:7e:dc:a4:e3:42:f9:
27:0f:cf:d2:88:7b:77:4d:cd:a7:22:c9:7f:76:58:1d:7c:61:
09:f2:66:9e:2d:7a:d0:be:2e:18:4c:13:33:08:ba:03:ec:ac:
f7:7b:c7:16:22:8c:17:13:87:f6:8b:c6:9b:fc:4c:94:ec:71:
3e:55:76:35:e8:d8:53:09:f7:4c:31:db:04:ba:74:a1:87:32:
6e:7a:44:ef:71:33:9f:cf:11:de:01:d1:bd:f7:bf:d0:59:7c:
17:0f:f9:05:16:43:09:3e:e1:89:7d:42:64:0b:26:fb:99:9f:
ac:c2:46:09:b8:4f:b5:ee:0c:1c:9a:45:fe:8c:06:08:45:c1:
e4:8a:dd:27:dd:a4:5b:a1:f9:4d:d4:e8:16:bb:79:a7:af:bd:
4c:d1:d4:00:1c:f7:2f:8b:f0:7b:e9:98:34:b7:c2:8e:a7:a5:
7f:5d:41:76:33:38:40:49:73:37:07:42:34:f2:15:9f:86:75:
ee:b3:59:13:36:59:6f:7c:51:73:cb:35:0f:1e:5e:40:42:a6:
8e:d9:e9:77:21:77:ef:3d:bf:5b:9a:f0:1f:80:de:00:bc:82:
c1:42:44:4e:52:29:c6:1a:68:c4:5f:c8:67:87:ea:08:e1:ee:
94:df:45:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:20 2026 by rpki-client