Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9F2E4B43FCD11F199346BC7CE1D38B0.roa
File: B9F2E4B43FCD11F199346BC7CE1D38B0.roa (raw, json)
Hash identifier: dc83X1n0PC1SauDaohzxWKOHeSoorDaWWkRsyY+paP0=
Subject key identifier: 44:77:70:C5:46:8E:8C:3A:3B:CE:7E:69:AB:5C:B0:28:91:C8:B0:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9F2E4B43FCD11F199346BC7CE1D38B0.roa
Signing time: Fri 24 Apr 2026 11:07:05 +0000
ROA not before: Fri 24 Apr 2026 11:06:59 +0000
ROA not after: Sun 31 May 2026 11:06:59 +0000
asID: 44559
IP address blocks: 156.243.232.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.243.255.0/24 maxlen: 24
156.244.209.0/24 maxlen: 24
156.244.210.0/24 maxlen: 24
156.244.211.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110304 (0x1aee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 11:06:59 2026 GMT
Not After : May 31 11:06:59 2026 GMT
Subject: CN=69eb4ed9-ebb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:34:3a:75:f4:d8:1d:74:57:65:42:28:b1:
8d:96:f4:5b:12:2f:aa:56:8b:a9:c1:7c:d3:9e:74:
e7:7e:67:f6:17:ba:8c:c7:43:d9:22:26:43:4c:03:
de:21:9e:e8:1d:91:14:2a:31:bd:a1:46:3a:53:b6:
f9:28:ce:d9:7c:a8:1e:37:d3:26:d4:49:9c:63:35:
f0:ac:fc:22:86:5b:a5:1b:c8:98:36:81:fe:5a:7d:
48:f1:3c:3a:b1:0e:cc:33:ab:b5:11:c7:49:d3:c2:
14:df:57:87:a7:96:27:46:d3:83:eb:06:34:9e:42:
d3:f3:15:87:11:3f:a9:3f:83:73:a0:ac:3f:1c:67:
0f:aa:e9:a8:f4:82:06:a4:c9:e7:c8:eb:1b:78:d6:
79:fd:34:1e:79:e7:d6:6d:c7:9d:dd:6a:a9:d1:f0:
75:40:4a:69:4f:eb:01:4b:3f:e0:38:6f:19:5c:47:
6e:ea:2d:c2:11:7f:5a:92:09:96:be:f9:6e:c9:6f:
da:0c:f3:35:95:a9:49:cb:7a:a2:03:a2:a3:b9:33:
ab:72:b3:33:35:b8:cc:29:f3:65:a3:e7:84:38:32:
8b:e2:b9:4e:ab:39:2b:63:0e:e4:3c:7f:cf:36:8f:
8c:bd:c4:ab:44:63:dd:d7:0c:50:01:60:8a:ad:49:
4c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:70:C5:46:8E:8C:3A:3B:CE:7E:69:AB:5C:B0:28:91:C8:B0:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9F2E4B43FCD11F199346BC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.232.0/24
156.243.249.0/24
156.243.254.0/23
156.244.209.0-156.244.211.255
156.248.6.0/23
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e9:66:48:02:14:78:c3:79:09:75:47:97:f4:06:55:c6:bf:
c2:5e:3d:aa:87:f6:35:f0:f6:13:24:e3:ca:a5:a2:65:02:34:
9b:95:e3:14:e5:d7:a9:92:20:43:df:0a:f2:12:5b:37:df:b0:
bf:d3:77:c8:1a:f0:86:3e:fe:dd:d4:eb:76:80:e7:0a:73:ca:
cd:21:9d:9f:70:e0:62:c9:15:df:d3:f0:56:24:00:28:15:fa:
d6:22:b2:5b:36:da:b6:ac:e1:54:b4:ae:9a:28:cc:6c:a2:da:
19:84:bc:b7:a1:84:72:8e:b4:37:d0:08:55:28:5d:d0:1f:e1:
da:e2:e2:5a:a6:be:e2:25:3c:b5:d3:d0:71:2f:97:e1:4e:3d:
c3:65:04:f3:63:ca:0b:1f:b7:fe:33:1e:9c:a9:0e:05:d5:ce:
ba:7e:d9:90:79:1d:74:bb:cb:97:5e:65:8e:8c:e6:34:07:16:
a4:32:dd:80:c5:d9:f8:3d:f1:3c:cf:46:98:ca:b5:f0:9c:eb:
83:a4:58:3a:e0:1c:12:da:27:f5:65:59:61:1d:71:5b:ce:d3:
43:1b:5a:b0:5d:83:bd:04:db:b3:f4:7b:be:a9:33:bf:72:00:
6e:c3:31:bc:05:c6:1b:c5:14:44:4f:8e:4e:fb:4d:a1:c3:05:
43:7f:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:32 2026 by rpki-client