Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089A13EE370E11F184EDA5B1CE1D38B0.roa
File: 089A13EE370E11F184EDA5B1CE1D38B0.roa (raw, json)
Hash identifier: bqbZWJI3LW62V6hPi7J0MUafl4rCGro2hueDEhEMpnU=
Subject key identifier: 6F:41:D9:1A:D8:78:BD:BC:83:59:BB:8B:70:B2:48:A3:63:EA:52:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089A13EE370E11F184EDA5B1CE1D38B0.roa
Signing time: Mon 13 Apr 2026 07:54:44 +0000
ROA not before: Mon 13 Apr 2026 07:54:39 +0000
ROA not after: Sat 16 May 2026 07:54:39 +0000
asID: 22773
IP address blocks: 156.233.213.0/24 maxlen: 24
156.233.214.0/24 maxlen: 24
156.233.215.0/24 maxlen: 24
156.233.220.0/24 maxlen: 24
156.233.221.0/24 maxlen: 24
156.233.222.0/24 maxlen: 24
156.233.223.0/24 maxlen: 24
156.233.240.0/24 maxlen: 24
156.233.241.0/24 maxlen: 24
156.233.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109638 (0x1ac46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 07:54:39 2026 GMT
Not After : May 16 07:54:39 2026 GMT
Subject: CN=69dca144-1901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:0e:af:0b:7b:99:23:60:84:fa:00:2c:16:
44:ea:d4:da:13:9f:fd:59:08:36:8d:b3:3c:b5:c6:
03:e4:53:b8:06:46:82:47:39:e8:d4:eb:f7:2e:ef:
77:ce:c7:bd:a3:59:84:e6:96:84:23:87:fb:42:0a:
a4:40:79:fc:14:56:f8:ac:8e:d6:e7:17:b8:8f:bc:
18:b3:1d:b2:f4:e0:e8:c0:0c:ea:4c:e8:6b:13:93:
98:44:17:be:19:3b:65:d5:74:66:dc:80:64:c7:01:
79:76:a3:89:8b:42:e5:c9:28:02:1a:23:33:7f:98:
8d:27:44:17:26:6c:a3:f5:88:65:a3:c1:d6:49:a8:
51:3f:51:90:c3:34:21:d4:4d:07:af:d6:e2:c4:1b:
72:31:1d:01:86:ef:ac:f8:24:16:b6:26:ed:be:f8:
86:09:ff:d5:65:ce:98:85:62:72:77:bf:3c:77:fb:
e2:ba:bf:34:2c:94:ec:1b:16:5c:50:e3:76:bd:1f:
e0:33:13:60:60:91:f4:4a:c6:7c:07:2c:5b:dd:4a:
49:f3:53:38:60:c8:0d:2d:f4:d0:60:e0:b6:27:11:
43:06:81:fd:09:c4:45:d4:0a:43:fd:00:1e:8a:71:
4c:9f:ba:41:b5:24:5a:12:da:dd:74:92:26:07:21:
d7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:D9:1A:D8:78:BD:BC:83:59:BB:8B:70:B2:48:A3:63:EA:52:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/089A13EE370E11F184EDA5B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.213.0-156.233.215.255
156.233.220.0/22
156.233.240.0-156.233.242.255
Signature Algorithm: sha256WithRSAEncryption
1f:f1:cf:0d:12:f2:01:c9:23:56:ed:8a:ad:77:1f:8b:42:1d:
00:95:6e:e2:36:a0:ae:e7:a6:9f:a2:08:23:6f:55:ee:37:c3:
74:1c:c2:0a:4b:aa:0e:bc:39:bc:59:80:1b:19:13:f5:8c:fd:
b1:57:bb:e0:e4:b0:bc:66:43:24:7d:e5:ec:c3:b2:e4:73:07:
4d:5d:2b:5d:b5:f1:89:6a:72:93:88:8a:ea:38:a4:f8:8a:3d:
5d:c7:c2:c6:ef:0d:4b:bd:3a:29:2c:31:ec:8d:72:87:53:5d:
7d:b3:3a:bd:58:fe:4f:ce:5b:53:92:52:20:3c:18:24:3f:73:
14:9c:cd:a0:22:d7:a1:f7:a5:a5:fa:05:4b:dd:82:cd:a8:33:
71:3f:50:54:b2:4c:fe:d1:43:9e:b8:05:e5:50:fb:e2:99:a4:
68:55:ab:99:28:ae:9e:4a:a5:f5:7d:db:e7:e0:78:aa:a2:74:
13:39:56:3c:42:c7:02:0d:fd:71:4b:0f:c1:c9:6f:34:06:77:
00:40:54:b2:98:f8:25:7a:38:e0:e1:2b:3e:da:f0:cf:e3:f7:
eb:b0:ce:d0:1d:d6:a3:d6:3a:cc:40:80:c6:47:0f:93:fe:6d:
48:68:21:ab:cb:6d:b9:f1:fd:95:8f:a0:b8:83:92:c7:3c:db:
38:f7:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:45 2026 by rpki-client