Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17235B90317E11F19F887C96DAE4EC9C.roa
File: 17235B90317E11F19F887C96DAE4EC9C.roa (raw, json)
Hash identifier: VvESrHAne4beHIDOdUKZHCcFp4ze9A94o0geRWeYMfs=
Subject key identifier: 33:29:A1:3F:D1:EF:74:FD:D3:DB:2E:6C:96:10:E0:E4:C8:48:7E:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17235B90317E11F19F887C96DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 06:01:45 +0000
ROA not before: Mon 06 Apr 2026 06:01:40 +0000
ROA not after: Fri 17 Jul 2026 06:01:40 +0000
asID: 54600
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
156.239.52.0/23 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109178 (0x1aa7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 06:01:40 2026 GMT
Not After : Jul 17 06:01:40 2026 GMT
Subject: CN=69d34c49-67a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0d:03:39:6b:19:0d:7d:c4:fe:1a:8b:c4:8d:
39:98:fa:e3:b8:c7:50:df:88:05:98:2f:92:2e:6b:
bd:14:a3:5e:6e:69:02:d9:ca:9a:fb:81:b0:86:7c:
cc:91:76:2d:7d:72:1e:90:4a:8f:d9:99:5f:2d:e1:
6c:03:2a:8c:de:36:e6:0a:dc:84:2c:d3:63:f5:a6:
0e:87:c9:85:8f:5c:33:88:ff:52:22:6b:65:63:3a:
8f:01:ba:2b:16:1c:89:7e:e9:67:f8:3b:29:10:8c:
65:e4:95:9d:8c:f5:ed:1c:f7:ca:43:af:4e:3d:4a:
34:bc:b3:5c:23:77:61:42:53:5e:98:14:91:a9:0e:
72:68:e7:1c:9e:c9:aa:b7:9d:6c:95:7e:65:86:d1:
06:1f:32:09:a8:eb:6c:f9:22:e1:c9:99:64:86:4d:
55:5a:fa:43:50:73:4e:af:ba:f6:d1:41:70:2f:ac:
c0:ad:72:a0:b4:2f:e1:e3:d8:12:b7:f1:0a:59:cd:
a5:3d:a0:fc:65:54:4c:61:28:d1:71:3d:42:a5:86:
ef:9e:8a:ed:52:28:0d:5b:d7:97:b7:84:ab:65:78:
ff:2c:9b:7a:4e:ec:8b:37:81:54:68:88:95:42:eb:
60:b0:bc:b7:d4:a4:68:11:e3:c0:32:ca:9d:72:9c:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:29:A1:3F:D1:EF:74:FD:D3:DB:2E:6C:96:10:E0:E4:C8:48:7E:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17235B90317E11F19F887C96DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0/20
156.239.24.0-156.239.53.255
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
64:46:28:18:ad:d9:59:83:cf:a9:c5:1d:f3:d9:70:c0:6b:60:
e7:15:f6:94:fa:c8:84:26:35:19:13:0a:52:bb:c9:25:3c:80:
6d:db:a7:32:98:bd:54:47:6a:f7:b6:ac:94:98:d0:cf:58:3d:
b1:1e:07:11:fa:3f:18:46:e0:c0:ce:fd:3d:e3:8e:d7:b5:fb:
77:a0:8d:6c:0c:06:de:f2:7a:db:cd:31:25:b0:13:32:00:f9:
da:67:78:4e:3d:67:0c:7c:1d:eb:6d:1e:cd:16:02:98:78:ed:
04:b7:b0:2d:d9:ab:e8:3a:07:74:c7:47:9b:7a:42:89:e9:ae:
31:13:f3:06:85:db:17:cd:28:5a:58:de:e7:4b:cf:16:8b:c5:
7a:33:5f:b4:dd:4b:3a:76:01:8b:5e:f6:14:f0:f9:01:24:9e:
eb:ab:73:41:6f:34:6b:94:97:8e:2e:7c:af:8e:ba:19:45:eb:
db:af:28:9c:17:81:de:9a:5f:40:cc:fd:a3:ea:a0:e3:f7:04:
b4:64:40:7a:4d:3a:60:9b:bd:41:7f:8c:c2:45:58:c4:40:76:
7e:6b:cc:3f:4b:ff:10:89:31:3e:73:67:08:bf:82:73:50:01:
32:a8:51:34:74:10:86:cd:91:5e:27:ea:b0:ec:aa:15:29:3a:
3e:21:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:16 2026 by rpki-client