Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE446D38493011F1988EC5EBCE1D38B0.roa
File: AE446D38493011F1988EC5EBCE1D38B0.roa (raw, json)
Hash identifier: 5gOqqAR2liJbqu/gdcOLQCWDc8fPbUgx3OdMP9z22NU=
Subject key identifier: 48:0D:BC:79:C3:98:9E:EC:66:4F:EF:58:4A:63:89:8E:1B:34:91:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE446D38493011F1988EC5EBCE1D38B0.roa
Signing time: Wed 06 May 2026 09:48:06 +0000
ROA not before: Wed 06 May 2026 09:48:01 +0000
ROA not after: Sun 06 May 2029 09:48:01 +0000
asID: 17561
IP address blocks: 156.237.240.0/24 maxlen: 24
156.237.241.0/24 maxlen: 24
156.237.242.0/24 maxlen: 24
156.237.243.0/24 maxlen: 24
156.237.244.0/24 maxlen: 24
156.237.245.0/24 maxlen: 24
156.237.246.0/24 maxlen: 24
156.237.247.0/24 maxlen: 24
156.237.248.0/24 maxlen: 24
156.237.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111066 (0x1b1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 09:48:01 2026 GMT
Not After : May 6 09:48:01 2029 GMT
Subject: CN=69fb0e56-f831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:9b:5f:36:6b:0b:b7:5c:38:8d:5f:33:bb:
8b:6d:14:51:95:67:0e:77:75:3c:e5:4d:01:88:aa:
16:e8:0d:2b:7e:98:ee:4f:45:ca:3d:71:f2:46:d0:
6a:06:48:e8:a4:8a:25:7e:4d:a7:26:c1:a0:3d:5e:
2a:b8:11:eb:db:42:b8:84:00:01:20:d1:f0:2e:51:
b7:2f:22:f7:45:ba:3e:e3:61:e8:09:c3:c1:89:cb:
db:a8:74:37:9c:ed:ff:13:2a:63:d8:b2:2b:78:36:
65:49:da:53:c1:22:c1:96:1e:f1:ac:ee:58:06:1d:
be:f9:00:0a:b3:67:dc:46:79:ba:a6:e3:91:8d:b9:
98:be:8d:92:fa:47:2b:53:d1:18:9d:60:bb:5e:66:
22:75:7d:de:ce:b0:de:6d:d2:39:ba:d9:c3:62:89:
4d:0e:01:16:45:03:42:ff:da:76:12:1c:4a:2a:92:
3b:06:df:7a:34:94:f6:b6:19:51:9e:56:3c:a1:a8:
24:fb:b5:50:19:02:b5:4f:e9:5a:60:e8:d9:90:7a:
a7:a7:45:45:5a:5a:80:8e:cd:0b:d1:9b:a2:27:18:
79:2f:46:51:db:85:fc:41:6a:fa:ff:75:93:8c:b2:
f6:35:3b:ac:64:66:89:4d:f4:1a:ba:2d:7a:a8:34:
78:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0D:BC:79:C3:98:9E:EC:66:4F:EF:58:4A:63:89:8E:1B:34:91:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE446D38493011F1988EC5EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.240.0-156.237.249.255
Signature Algorithm: sha256WithRSAEncryption
79:25:c8:4b:d5:b7:7e:7a:8b:93:9c:9a:ed:7b:41:df:69:07:
50:7e:df:33:b1:3d:1d:62:b1:1b:46:a6:4d:75:c1:57:7b:6e:
98:2c:4d:37:4c:99:5f:67:e3:2c:4c:12:f5:b8:00:1b:93:d4:
1e:b6:1a:d5:7d:ce:96:03:69:ce:08:4a:d4:48:0b:8e:e9:0f:
29:59:67:f8:41:ed:e1:4c:7c:af:f9:6d:c3:a7:0b:e1:e8:b9:
6e:73:9e:36:d6:b8:f4:e2:ef:64:10:d4:b6:52:85:62:31:b3:
95:8e:fc:84:4c:7f:9f:84:d8:bf:2d:11:2a:72:68:d2:0b:5c:
c5:33:2f:89:0a:94:e2:a3:14:53:c0:53:21:26:cd:ee:02:54:
8f:1a:9c:46:6f:5d:43:27:f5:46:9e:45:d8:27:e0:d6:32:61:
35:8b:5c:bc:f9:37:58:ae:72:3b:f6:96:5a:a7:83:13:ee:b1:
b1:65:95:24:cf:5d:84:60:49:0b:05:7a:85:2d:7b:3d:88:8b:
be:c8:44:d4:7a:c2:67:29:a5:37:33:94:d8:ea:30:8d:24:9c:
f2:da:b7:c1:5d:f8:3b:40:cb:68:c0:fa:52:82:2f:84:08:45:
c2:a6:82:f1:c9:1d:e8:59:50:b3:f9:5b:c6:71:e9:da:9b:39:
08:53:db:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:17 2026 by rpki-client