Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0CE790210711F1BC6356E4DAE4EC9C.roa
File: 5B0CE790210711F1BC6356E4DAE4EC9C.roa (raw, json)
Hash identifier: hNSDidxgptGt/vIk3o/L1uW4kw+zAyVkpavK7N0nxjc=
Subject key identifier: D1:DA:97:AD:83:91:53:DC:8F:62:F2:4B:C5:D2:C8:6B:1D:95:F2:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A55C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0CE790210711F1BC6356E4DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:11:31 +0000
ROA not before: Mon 16 Mar 2026 07:11:26 +0000
ROA not after: Fri 16 Mar 2029 07:11:26 +0000
asID: 17561
IP address blocks: 156.255.168.0/24 maxlen: 24
156.255.169.0/24 maxlen: 24
156.255.170.0/24 maxlen: 24
156.255.171.0/24 maxlen: 24
156.255.172.0/24 maxlen: 24
156.255.173.0/24 maxlen: 24
156.255.174.0/24 maxlen: 24
156.255.175.0/24 maxlen: 24
156.255.176.0/24 maxlen: 24
156.255.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107868 (0x1a55c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:11:26 2026 GMT
Not After : Mar 16 07:11:26 2029 GMT
Subject: CN=69b7ad22-16d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:3d:25:d3:3f:ad:48:68:69:e1:ca:14:23:
e5:0d:f8:48:0d:fa:05:39:6f:07:e2:4d:8d:5f:1e:
d9:24:c3:bf:dc:d7:23:10:29:a9:0c:dd:c4:9b:ec:
75:79:62:c2:ed:9d:2c:c3:86:75:b0:88:50:b8:df:
e3:4a:a6:0c:56:50:c4:92:50:65:70:8b:74:3f:70:
59:43:04:cc:2e:0e:7c:e5:52:13:ac:4d:55:fb:62:
99:c2:fe:fd:b5:d8:b4:38:d0:72:9e:e0:88:d4:a2:
d2:04:6b:56:17:af:03:1f:ae:69:0b:88:a8:c0:55:
bc:65:b4:2e:e5:a6:c9:a5:71:c0:ee:3d:fa:de:eb:
18:bd:29:ca:13:2f:af:12:a6:1b:96:d7:ab:d3:1e:
9a:93:48:3b:34:c8:bd:0e:77:d2:4f:08:37:e1:d2:
da:92:03:fb:a3:33:d0:1d:42:45:3e:0e:3f:79:5c:
cf:43:11:1d:2d:fd:7e:76:78:3c:60:ea:9e:6c:68:
f0:7a:41:3f:7b:62:ae:57:cf:31:3b:67:c5:fd:69:
1e:12:10:43:07:50:cf:53:f0:72:0a:43:cb:ff:93:
5c:c2:9d:be:51:e8:88:47:41:59:87:d7:c2:c9:15:
c2:24:ac:0d:45:b7:07:50:12:8c:5c:3b:7c:99:3f:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:97:AD:83:91:53:DC:8F:62:F2:4B:C5:D2:C8:6B:1D:95:F2:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B0CE790210711F1BC6356E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.168.0-156.255.177.255
Signature Algorithm: sha256WithRSAEncryption
50:2a:91:6f:0d:05:00:7c:df:ed:5d:bc:13:ad:2e:5b:64:4e:
c9:7f:70:91:23:b4:6d:24:33:f6:47:02:23:b5:7a:b9:b2:49:
0d:64:74:7a:de:bf:f4:9e:df:77:e9:83:28:4c:e8:a5:66:6a:
57:f2:33:7b:8c:95:08:68:97:d7:ea:fd:05:4e:05:1e:93:63:
a0:df:31:13:65:70:40:a3:df:51:ad:02:9c:11:b5:1c:6d:dc:
05:3e:21:89:97:be:05:bb:57:2b:c6:47:1e:c6:da:76:a5:21:
ee:99:41:74:37:aa:8f:19:66:87:d8:46:ca:e6:fa:6c:5b:4f:
0e:07:02:5d:08:63:3e:ef:9c:be:d4:b6:06:43:08:0a:a1:bd:
d2:a6:f3:3d:a4:f0:b4:ae:da:c6:f3:61:1f:a6:cf:f9:bf:30:
f6:a2:f7:ab:60:74:0e:89:ea:46:d7:a2:e3:cc:fe:9c:6c:11:
74:89:b5:85:f8:2e:ef:77:87:1d:98:5f:df:75:96:96:22:f3:
2a:ff:2d:78:c7:34:37:d1:fd:67:1a:60:92:27:5e:55:e7:99:
f9:aa:7e:6d:e2:d3:ca:10:d8:d5:64:91:12:90:eb:32:89:b8:
ed:b0:5e:cd:d2:cf:b4:6b:64:d7:5a:06:65:22:70:2e:ef:14:
df:03:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:12 2026 by rpki-client