Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E28CE27BE11F1824EF07ADAE4EC9C.roa
File: 572E28CE27BE11F1824EF07ADAE4EC9C.roa (raw, json)
Hash identifier: 3qycIqBIw9M/iP3UYaqQv+n29Qxoq8zdYnkFfkriF9I=
Subject key identifier: F9:52:E8:24:63:ED:86:87:44:DE:03:CA:7B:1E:44:6E:73:61:8C:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A734
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E28CE27BE11F1824EF07ADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 20:16:29 +0000
ROA not before: Tue 24 Mar 2026 20:16:24 +0000
ROA not after: Fri 01 May 2026 20:16:24 +0000
asID: 44559
IP address blocks: 156.233.35.0/24 maxlen: 24
156.233.40.0/24 maxlen: 24
156.233.46.0/24 maxlen: 24
156.233.49.0/24 maxlen: 24
156.233.50.0/24 maxlen: 24
156.243.227.0/24 maxlen: 24
156.243.231.0/24 maxlen: 24
156.243.233.0/24 maxlen: 24
156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108340 (0x1a734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 20:16:24 2026 GMT
Not After : May 1 20:16:24 2026 GMT
Subject: CN=69c2f11d-cdf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:bd:c0:d6:0a:4b:a5:2b:79:90:71:bb:3a:
c2:16:03:ff:22:00:ac:bd:51:a3:8b:fc:34:76:fa:
c7:17:a8:8a:77:9e:8d:2c:40:be:78:6a:34:d0:2b:
71:d9:dc:9e:7c:e2:16:0f:65:82:66:25:d8:af:96:
6d:09:53:fe:31:42:04:a8:bc:98:bf:be:46:78:0f:
56:a7:37:7e:73:37:7e:d9:21:39:59:7c:fa:39:9a:
5f:ea:75:76:56:ca:dc:91:ba:ff:4a:8a:98:80:70:
af:1f:e5:17:39:33:f5:a5:76:3c:32:ed:da:a7:ee:
cf:af:5b:c6:69:7d:73:62:5c:ff:5a:90:55:2d:5e:
f8:05:a9:cd:f7:19:d9:0b:51:a8:b1:b0:5f:4f:3c:
6a:f1:4a:f4:60:e7:f4:61:05:a3:b6:6a:d3:14:ac:
97:07:92:c8:ff:d2:1e:49:8d:65:5e:15:8c:d3:ed:
bd:9c:ce:51:5b:d3:88:34:9c:e3:be:d1:7c:dd:55:
ad:6b:2b:1d:42:83:d4:d5:ac:1f:25:ec:43:ff:e9:
81:12:73:3c:38:b2:5a:1a:84:30:fd:b1:f9:fb:6f:
98:69:1f:bb:c3:0e:13:a5:88:6e:14:be:e0:4f:5f:
a5:b4:e9:9a:e3:1e:d3:6b:05:12:d1:fc:a9:fb:fe:
60:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:E8:24:63:ED:86:87:44:DE:03:CA:7B:1E:44:6E:73:61:8C:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E28CE27BE11F1824EF07ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.35.0/24
156.233.40.0/24
156.233.46.0/24
156.233.49.0-156.233.50.255
156.243.227.0/24
156.243.231.0/24
156.243.233.0-156.243.234.255
156.243.240.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e0:ba:39:65:dd:e1:07:d4:0f:b4:e4:bf:8f:69:3b:44:db:
27:0d:aa:a9:36:eb:e4:e4:24:1f:19:8a:6e:2d:54:5f:de:a7:
0d:56:2a:9c:88:8c:ad:40:c4:f2:ba:09:d2:19:e6:b0:6a:8b:
f2:15:78:45:90:5b:cf:71:af:2a:d1:f2:95:ed:75:ad:73:2d:
9a:5a:ee:1f:08:d5:62:35:93:68:55:0e:5e:58:91:be:c2:ca:
2a:d0:b5:4f:34:2a:68:24:f9:85:50:c3:43:27:66:d1:c0:9c:
80:f6:48:26:1d:99:22:53:7f:5a:19:09:99:f0:98:fb:4e:96:
5e:34:37:fa:6e:8d:5c:c0:67:85:85:c6:4c:ea:ec:8f:0d:37:
11:57:d8:52:0c:18:c9:1a:70:d0:9a:86:17:2c:30:45:9b:7e:
6d:25:f6:33:25:39:8e:f9:22:12:a7:3a:2b:0f:8e:99:6f:f1:
d4:a4:f0:88:ac:f1:df:d0:ed:7f:a1:e5:61:01:f9:a8:8e:da:
b2:68:f8:91:ab:38:49:2c:80:8e:73:f4:b4:5e:93:9a:8a:98:
01:8a:45:83:2e:99:93:2a:c8:13:7f:84:b6:09:52:54:94:ca:
e7:b7:52:08:af:a1:cd:91:1a:98:95:89:c9:dd:4d:37:16:56:
e7:c6:97:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:37 2026 by rpki-client