Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F53E463C3FCB11F1BC6ECEBECE1D38B0.roa
File: F53E463C3FCB11F1BC6ECEBECE1D38B0.roa (raw, json)
Hash identifier: 9JGRglVcGLtKOdieNsj7x/wjR04oi1GYfe6PqFXViOY=
Subject key identifier: A2:18:89:16:7B:43:47:19:78:5A:F1:AD:16:E2:80:4D:7C:68:61:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEDC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F53E463C3FCB11F1BC6ECEBECE1D38B0.roa
Signing time: Fri 24 Apr 2026 10:54:25 +0000
ROA not before: Fri 24 Apr 2026 10:54:21 +0000
ROA not after: Sun 31 May 2026 10:54:21 +0000
asID: 44559
IP address blocks: 156.238.180.0/24 maxlen: 24
156.238.182.0/24 maxlen: 24
156.239.17.0/24 maxlen: 24
156.243.191.0/24 maxlen: 24
156.243.216.0/24 maxlen: 24
156.243.217.0/24 maxlen: 24
156.243.219.0/24 maxlen: 24
156.243.220.0/24 maxlen: 24
156.243.221.0/24 maxlen: 24
156.243.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110300 (0x1aedc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 10:54:21 2026 GMT
Not After : May 31 10:54:21 2026 GMT
Subject: CN=69eb4be1-890f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:40:1b:26:6a:be:37:6c:76:12:bd:01:37:
fd:e6:cf:20:56:4d:84:6c:b2:9c:4a:e8:dd:a9:08:
e7:53:8f:e8:20:00:8d:53:bd:7f:da:16:9a:a9:0a:
a4:ca:f1:1b:22:2d:e6:b3:d8:4e:3d:58:2e:1d:47:
e3:ba:7a:0f:18:92:e7:34:e8:05:73:fd:83:4d:e2:
f4:e5:07:a3:3a:86:c1:8c:43:6b:9f:da:ac:f1:55:
f5:e5:2a:5b:45:6c:6a:97:d3:e9:fb:92:5c:38:76:
d0:46:b7:48:e8:7b:af:24:95:a6:db:74:e0:e9:aa:
48:e1:55:f1:b3:45:15:3e:a5:1c:b7:e0:e1:a1:8f:
01:83:7a:19:20:61:76:9b:46:ea:bc:a7:f2:4a:71:
87:85:26:53:ef:fa:17:e6:56:4b:74:dd:04:92:b1:
f5:00:90:41:7e:c5:96:4f:ee:28:6c:23:d8:ca:0d:
b4:51:3d:9c:cf:a2:bd:1a:06:d7:78:63:ac:48:27:
d8:d6:2f:5b:53:0f:b9:0d:3f:df:49:dc:2d:4a:b2:
3e:b3:bf:5c:91:a8:3e:20:34:f0:7c:da:08:24:64:
af:18:56:87:0f:54:cb:6a:15:e3:bc:c3:03:96:b7:
3d:14:f4:e4:3e:1a:0b:69:6e:d4:77:9e:b9:ae:f1:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:89:16:7B:43:47:19:78:5A:F1:AD:16:E2:80:4D:7C:68:61:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F53E463C3FCB11F1BC6ECEBECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.180.0/24
156.238.182.0/24
156.239.17.0/24
156.243.191.0/24
156.243.216.0/23
156.243.219.0-156.243.222.255
Signature Algorithm: sha256WithRSAEncryption
15:a4:68:7f:6a:39:c1:9b:9d:29:87:a8:46:34:79:ad:84:5d:
ef:c3:52:38:77:53:1f:7c:ff:9d:77:4a:a7:e3:64:54:a0:d9:
88:fb:78:14:3a:2f:5b:cf:91:c7:ea:e2:6e:15:87:89:05:52:
08:5e:d6:a3:6c:5d:22:2d:d9:49:77:af:04:d6:93:63:e2:a4:
5e:9a:f1:83:ac:00:de:32:1e:49:0a:4f:38:46:c6:19:62:4b:
20:ea:c0:57:18:49:9d:c5:64:8e:8d:70:f0:c0:de:12:10:29:
c0:49:b8:47:53:3f:57:2b:80:c0:e5:84:8d:1f:50:a7:8a:d2:
c9:3a:01:25:09:ff:ee:b4:78:9a:9d:20:5f:aa:e7:81:97:5c:
1c:2e:b5:79:8c:64:a2:4d:2c:17:8e:bf:7d:4e:49:62:73:a2:
6e:4c:ae:43:cd:a1:61:f8:e7:0d:32:51:91:73:12:e9:77:9e:
b3:be:e8:36:63:a8:a2:ee:17:08:39:1a:a0:0e:00:ca:02:41:
f4:a3:fd:85:24:cb:e4:b1:bd:e2:06:6b:2e:ff:30:20:e2:41:
3f:41:69:8f:fc:85:23:95:8b:f1:52:7d:c0:10:43:dd:54:cf:
c6:66:9a:09:e6:bd:b2:31:b4:c9:87:9e:f3:a6:e6:d5:7b:1c:
cb:dd:d9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:23 2026 by rpki-client