Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DEAA7C3FE511F1B2E620D5CE1D38B0.roa
File: 96DEAA7C3FE511F1B2E620D5CE1D38B0.roa (raw, json)
Hash identifier: ADRRdoHP6Mn3tMg9IyhtaSCRsGRD43rtjvqs+VuXGOw=
Subject key identifier: 50:65:B8:87:62:1D:C8:28:D8:FA:A1:69:E6:E0:02:53:82:D4:07:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DEAA7C3FE511F1B2E620D5CE1D38B0.roa
Signing time: Fri 24 Apr 2026 13:57:54 +0000
ROA not before: Fri 24 Apr 2026 13:57:49 +0000
ROA not after: Mon 01 Jun 2026 13:57:49 +0000
asID: 11427
IP address blocks: 156.229.180.0/22 maxlen: 24
156.229.232.0/22 maxlen: 24
156.229.240.0/22 maxlen: 24
156.233.4.0/22 maxlen: 24
156.233.152.0/21 maxlen: 24
156.241.8.0/21 maxlen: 24
156.248.96.0/21 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110346 (0x1af0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:57:49 2026 GMT
Not After : Jun 1 13:57:49 2026 GMT
Subject: CN=69eb76e2-b6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7d:00:88:db:c0:cd:cd:11:16:bb:80:80:96:
80:31:2b:b9:64:45:e8:11:09:93:2b:3d:88:3c:cf:
8e:dd:b0:18:7e:50:94:7d:86:da:81:eb:2b:7b:e7:
08:dd:cd:4e:07:51:7e:f1:07:fc:a3:a7:16:37:e9:
ee:e2:41:b0:24:9b:7b:9f:bf:31:f8:a4:71:6b:be:
b2:50:2c:14:c4:f3:f3:41:79:95:00:9c:34:9d:8b:
57:69:df:cc:62:39:6f:38:04:44:9c:8d:5f:38:08:
6f:a5:7f:d1:ae:2a:18:da:c6:67:7f:ce:d2:08:62:
07:90:09:52:98:ae:b3:b6:57:93:9b:9b:42:70:38:
c2:e5:5e:5b:0b:c8:d7:dc:d6:46:98:6e:1c:c0:d9:
71:09:0c:2d:17:af:9c:53:90:4d:49:c7:39:7b:80:
0c:b5:d5:76:5e:1b:0e:c8:3a:e4:7a:d6:a9:1f:80:
8f:a7:22:55:ba:4f:50:77:2e:69:77:7d:9a:f2:96:
d3:1f:e5:46:ae:9b:be:cd:b5:ed:89:e9:57:71:8c:
22:c0:dd:67:d8:e4:b6:30:3f:aa:2d:db:d1:75:4e:
d0:db:f2:87:e6:d2:0c:27:39:06:b5:27:47:0a:0a:
e9:56:85:fc:43:85:bc:2d:1c:74:45:51:10:b1:87:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:65:B8:87:62:1D:C8:28:D8:FA:A1:69:E6:E0:02:53:82:D4:07:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DEAA7C3FE511F1B2E620D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.180.0/22
156.229.232.0/22
156.229.240.0/22
156.233.4.0/22
156.233.152.0/21
156.241.8.0/21
156.248.96.0/21
156.249.72.0/21
156.249.88.0/21
156.249.104.0/21
Signature Algorithm: sha256WithRSAEncryption
54:ad:01:91:9b:70:05:86:15:54:56:b0:ab:23:9e:fc:bf:b0:
6d:48:3b:7f:7f:44:89:4d:5e:04:d7:49:3e:22:2b:16:48:4e:
a5:99:28:66:ee:b3:19:2c:06:1d:90:65:9a:37:7b:0c:b9:8d:
83:e8:4a:b0:40:db:6e:75:6a:b3:c2:35:68:9d:17:dd:2d:cb:
3b:94:ef:2a:65:9e:8f:0c:e5:84:e6:40:94:c6:53:39:e1:f6:
d4:1b:02:26:85:5d:0e:d6:5c:40:23:a2:49:da:76:06:1f:97:
e4:00:e4:1f:29:22:be:63:b5:fb:a5:10:b0:d3:34:62:77:42:
ac:74:3b:16:bd:af:51:9b:21:e8:a8:5b:da:74:29:6b:0e:d5:
51:95:0c:90:fd:6a:e5:06:ea:ef:c6:cc:99:5a:db:c5:6a:8d:
5b:79:03:98:bc:15:41:69:41:dd:79:af:99:16:91:28:cf:9e:
34:a8:1b:b1:a4:c3:d5:29:0a:c2:f5:14:e7:d7:b1:7c:41:c4:
9d:b4:17:3f:76:34:41:3f:26:8d:e3:bd:15:29:12:e2:b8:81:
d1:65:6e:35:b5:31:14:6d:a7:38:1c:42:da:b5:25:39:48:26:
9f:f2:07:30:e7:c9:d5:1b:80:4b:cb:e5:0b:b1:80:7d:e7:df:
36:47:b1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:54:16 2026 by rpki-client