Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/053D3CA6376A11F197F835D8CE1D38B0.roa
File: 053D3CA6376A11F197F835D8CE1D38B0.roa (raw, json)
Hash identifier: 2CdfWKrZ2xmzcOOhEv2I4/SDZsAqU5pE1Gp2dBBQlZw=
Subject key identifier: 60:FA:7D:FC:3F:4C:49:76:3D:24:BB:5F:F7:1A:74:29:FC:09:E9:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/053D3CA6376A11F197F835D8CE1D38B0.roa
Signing time: Mon 13 Apr 2026 18:53:13 +0000
ROA not before: Mon 13 Apr 2026 18:53:06 +0000
ROA not after: Sat 16 May 2026 18:53:06 +0000
asID: 22773
IP address blocks: 156.242.16.0/24 maxlen: 24
156.243.100.0/24 maxlen: 24
156.243.101.0/24 maxlen: 24
156.243.203.0/24 maxlen: 24
156.243.204.0/24 maxlen: 24
156.248.26.0/24 maxlen: 24
156.248.27.0/24 maxlen: 24
156.248.28.0/24 maxlen: 24
156.248.29.0/24 maxlen: 24
156.249.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109684 (0x1ac74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 18:53:06 2026 GMT
Not After : May 16 18:53:06 2026 GMT
Subject: CN=69dd3b99-16a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:dd:cd:a7:83:89:6e:7d:c5:8f:39:8a:70:
56:50:48:1f:16:6c:49:f8:d9:e3:72:ec:3c:29:94:
06:fe:5d:76:90:47:f3:d2:85:a8:6d:91:6f:62:50:
fa:b8:6d:ba:4a:95:e4:64:91:8f:4c:67:18:02:b8:
36:ca:3d:3e:48:ed:15:ab:d4:7a:0e:bd:63:54:99:
92:2e:39:fd:a7:ed:9d:c0:00:5c:b6:cf:ab:14:88:
8c:f1:4c:d0:19:80:51:67:ca:52:6f:2f:69:39:b1:
0b:f7:20:c7:c3:b3:b6:76:26:49:ec:80:c9:7a:88:
00:20:69:3a:03:48:b6:c2:25:57:37:57:58:d2:f4:
ce:c4:05:59:03:f1:1e:65:8d:9f:a7:36:b7:ca:ad:
12:52:0d:62:0c:55:15:5c:eb:6a:d5:25:c1:16:5f:
01:58:8a:06:f0:ec:da:35:48:8c:76:5b:68:8a:37:
44:97:9d:d6:23:b0:a0:6c:bc:a9:a8:5f:b6:f5:7e:
8c:44:b9:0e:e2:a0:87:65:af:0b:b8:39:33:6a:2b:
ab:95:48:76:cd:4b:5e:e1:84:90:ef:0a:b3:56:01:
92:db:c3:b9:c1:6f:c2:2a:d3:96:02:f5:0c:37:ce:
3c:ea:b7:0f:be:64:66:5e:fe:83:71:93:f6:e5:c5:
cc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:7D:FC:3F:4C:49:76:3D:24:BB:5F:F7:1A:74:29:FC:09:E9:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/053D3CA6376A11F197F835D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.16.0/24
156.243.100.0/23
156.243.203.0-156.243.204.255
156.248.26.0-156.248.29.255
156.249.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:f0:de:d3:41:29:12:6c:2a:0e:f3:5c:17:98:8b:2f:38:ac:
cf:85:a3:8f:62:b6:da:70:4f:d9:46:09:96:90:7a:28:50:9d:
e4:f8:23:ef:24:ae:0e:f5:ea:8e:10:4d:3d:6d:ba:72:bb:46:
a2:4d:4a:ef:f8:b2:73:d9:64:2c:4f:36:49:3f:91:bb:a0:5b:
ae:76:6a:0d:86:56:c3:21:7f:7a:47:09:8c:1a:41:55:af:c0:
0a:d8:57:cb:5e:bb:ea:8b:19:e4:aa:58:d9:09:35:16:22:d3:
3f:b2:0b:39:91:88:06:bb:96:3f:f3:eb:dc:98:b8:4b:e0:92:
da:f1:31:d7:d5:c3:90:7f:57:61:2c:64:37:9d:c5:72:cd:32:
7c:ba:bc:ef:99:6f:98:04:4c:92:e7:3f:76:a8:c2:48:0a:fe:
46:e8:69:f9:c7:32:a8:02:48:4e:26:83:75:75:fc:b4:92:c5:
c5:9c:1b:bc:2c:36:2b:4c:a3:d5:bf:cb:d5:f8:73:ae:66:d9:
59:7c:3a:3d:c6:ea:66:8c:15:ae:e0:5e:e9:e6:08:78:d5:34:
12:57:52:6c:d1:30:84:a2:1d:1a:ee:e5:92:3c:11:6a:f3:b9:
b5:9e:5d:b8:6c:33:cf:df:3d:06:26:fb:c6:a1:1d:1e:88:8e:
4e:eb:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:13:59 2026 by rpki-client