Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC3676E3FD311F1BFBF22ECCE1D38B0.roa
File: ECC3676E3FD311F1BFBF22ECCE1D38B0.roa (raw, json)
Hash identifier: eRxcM9s70kEHTXGNCs/0cA2FJs6aLbPpZEyUwHP8Uxc=
Subject key identifier: F1:02:99:E7:8C:E8:1A:C8:A1:15:46:14:1F:D3:DA:9F:E0:01:7D:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC3676E3FD311F1BFBF22ECCE1D38B0.roa
Signing time: Fri 24 Apr 2026 11:51:27 +0000
ROA not before: Fri 24 Apr 2026 11:51:22 +0000
ROA not after: Sun 31 May 2026 11:51:22 +0000
asID: 44559
IP address blocks: 156.233.43.0/24 maxlen: 24
156.233.52.0/24 maxlen: 24
156.233.53.0/24 maxlen: 24
156.233.55.0/24 maxlen: 24
156.233.57.0/24 maxlen: 24
156.233.59.0/24 maxlen: 24
156.233.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110318 (0x1aeee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 11:51:22 2026 GMT
Not After : May 31 11:51:22 2026 GMT
Subject: CN=69eb593f-b3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:e0:56:5d:11:66:73:f5:8d:f8:4d:7d:30:
d1:f4:e4:c2:f7:b7:bb:5a:e1:65:f0:ad:c3:aa:18:
7b:2e:17:29:66:ea:a7:3a:04:60:7a:0f:a3:1d:e7:
9b:51:55:09:6a:be:c8:26:d2:d4:d7:9e:11:28:20:
19:b0:c0:63:d8:13:ba:2b:fe:63:a9:ec:56:1a:e2:
1b:e3:02:38:05:b3:ff:13:aa:4f:20:4b:8f:4b:1b:
1f:ea:23:07:2e:42:09:24:90:7c:63:8c:a7:cf:8b:
63:ca:6c:80:bc:9b:7d:e0:33:f6:c2:27:19:9a:c5:
29:e9:25:8e:76:22:40:3e:e3:4d:a7:51:fa:d8:5e:
9d:c7:97:6a:3f:bb:e3:2b:62:2f:37:73:ad:d6:71:
3a:4f:a4:d3:34:20:a8:b7:ae:97:90:35:1d:95:d9:
b5:17:8e:c3:1a:07:64:24:64:91:6a:1f:f9:5a:a8:
63:04:f4:c0:a3:a7:33:0b:d8:46:b0:47:c8:de:3e:
57:af:a6:4c:77:1e:b4:24:db:89:41:ac:2e:76:aa:
9a:90:77:42:62:93:6c:5c:10:72:cb:f6:5c:5b:e6:
49:7a:53:2b:f0:30:ac:9e:ba:51:4d:14:57:79:17:
1d:6b:9e:19:05:74:78:72:6d:21:c6:16:f3:c1:ed:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:02:99:E7:8C:E8:1A:C8:A1:15:46:14:1F:D3:DA:9F:E0:01:7D:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECC3676E3FD311F1BFBF22ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.43.0/24
156.233.52.0/23
156.233.55.0/24
156.233.57.0/24
156.233.59.0/24
156.233.62.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:00:9b:b5:a6:c0:63:01:35:3e:5f:87:aa:3a:f9:67:8d:
02:1a:6a:b2:ea:51:18:98:3d:a9:c0:d1:bb:21:90:e2:d9:62:
2f:6c:d2:06:12:a2:5d:0a:1a:cf:58:ef:0b:0d:9f:b9:60:a3:
f6:a9:bc:5a:db:09:c9:3b:9b:da:ab:77:b8:0c:dc:cb:bd:d7:
e1:b8:de:49:00:34:c6:7b:37:2c:f8:d4:c6:fd:e0:5d:b5:ec:
6e:82:06:d8:1c:33:3c:0c:cc:1f:7a:a9:1d:8c:72:cc:09:3d:
19:4b:a6:ba:d5:93:bb:5d:35:8e:48:18:e3:bf:7a:bc:d4:34:
76:7d:89:01:af:35:d1:97:91:11:c4:b2:fc:3a:de:90:96:d9:
b6:eb:f8:e7:ce:01:71:dc:22:9e:52:32:e5:c6:a1:7c:46:49:
5c:0d:1b:a9:7a:82:35:d6:a9:20:e1:e7:12:91:3f:75:e7:38:
02:39:73:f4:2c:13:99:3e:5c:1d:b0:7d:19:90:e4:5d:90:9b:
25:ce:f5:80:aa:a0:d3:96:8d:fb:fe:1c:80:82:98:de:05:68:
a2:00:61:c4:bf:27:bc:f5:a6:91:a8:ee:c7:7a:c1:4e:ac:3b:
84:4f:4d:1b:0a:c0:a9:e1:78:3d:57:d6:18:d1:0d:10:70:65:
f9:63:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:20:01 2026 by rpki-client