Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18A452382AE611F18F48D5E3DAE4EC9C.roa
File: 18A452382AE611F18F48D5E3DAE4EC9C.roa (raw, json)
Hash identifier: fOaAOTkwYKf1EPKd4uEimC23rB9J5SqRBvwVChCSBOQ=
Subject key identifier: 01:86:C4:B6:64:C6:C8:19:04:C6:AE:8E:50:C6:D7:F1:6D:A1:6F:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A87F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18A452382AE611F18F48D5E3DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:38:37 +0000
ROA not before: Sat 28 Mar 2026 20:38:32 +0000
ROA not after: Sat 25 Apr 2026 20:38:32 +0000
asID: 271355
IP address blocks: 156.236.204.0/24 maxlen: 24
156.236.205.0/24 maxlen: 24
156.236.206.0/24 maxlen: 24
156.236.208.0/24 maxlen: 24
156.236.209.0/24 maxlen: 24
156.236.210.0/24 maxlen: 24
156.236.211.0/24 maxlen: 24
156.236.212.0/24 maxlen: 24
156.236.213.0/24 maxlen: 24
156.236.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108671 (0x1a87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:38:32 2026 GMT
Not After : Apr 25 20:38:32 2026 GMT
Subject: CN=69c83c4d-5cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:07:db:c0:67:13:06:46:47:6d:97:36:ff:
ea:04:d8:df:c9:58:1d:d9:93:55:7f:15:b6:35:65:
95:98:77:f7:80:a2:be:06:0b:aa:ff:dd:f8:94:57:
55:2e:8a:38:e2:fb:b4:23:3f:29:d0:17:b6:47:4f:
97:8d:98:f6:2d:e2:c2:37:23:2d:c7:a4:e4:b1:5d:
3a:e0:cb:26:99:57:05:1f:68:7f:46:2a:f7:7f:86:
cc:9b:85:e2:d9:0c:15:00:e0:42:1b:66:ff:2d:38:
42:e3:f0:c3:4c:5c:c3:a3:77:5e:16:e6:4b:c6:4f:
a1:96:25:7e:b0:f5:e8:2d:89:38:c3:42:87:bd:8e:
b0:20:ee:64:85:81:93:43:8e:ef:7f:dd:9b:e1:73:
bf:17:da:0a:58:77:fd:94:bf:aa:d3:2c:2d:56:bc:
1d:3f:05:c3:60:c7:92:aa:8b:7b:b1:39:a9:6c:90:
b1:9e:72:9f:1c:3c:08:12:76:66:43:ea:36:df:dc:
84:27:64:30:f6:ea:8c:1e:f0:19:22:dd:80:8e:cc:
b2:50:16:b0:9b:0a:fe:24:5f:d2:3f:50:7c:4e:48:
13:91:71:06:68:44:15:13:ea:b1:8d:0d:d2:a2:c1:
59:11:ca:b8:11:fb:31:9d:15:7d:97:3e:a6:00:61:
a1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:86:C4:B6:64:C6:C8:19:04:C6:AE:8E:50:C6:D7:F1:6D:A1:6F:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18A452382AE611F18F48D5E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.204.0-156.236.206.255
156.236.208.0-156.236.214.255
Signature Algorithm: sha256WithRSAEncryption
3e:e6:20:57:92:ea:6d:b5:02:48:93:37:9b:b6:42:6e:2c:41:
72:77:9d:6d:15:2a:39:97:f5:79:8d:f9:cb:4a:65:17:32:17:
35:e1:d6:6e:bf:a1:5e:1e:f8:4e:3f:9f:e9:0a:b0:fe:47:9b:
a5:e3:63:c1:13:14:c9:ea:aa:50:b7:3c:40:68:b6:b2:4e:29:
d9:1f:ea:28:56:3e:1e:50:52:37:2f:d1:61:bd:d0:d1:df:39:
5d:b0:e4:75:fc:57:d1:b6:f9:86:9c:2f:b9:57:4e:3b:83:88:
a0:04:2a:c7:e5:eb:75:e9:dc:d6:c7:c6:0e:35:13:e9:cb:c3:
be:c7:16:50:17:fb:ed:9a:61:61:d6:c1:6a:31:52:00:9b:00:
bd:a9:dd:3d:37:0f:0d:02:3d:4c:bf:43:98:ff:43:c2:17:4d:
37:ff:c3:89:d2:24:62:d1:6d:9a:9f:54:45:0c:cd:9d:ea:d6:
b0:42:61:44:06:8e:97:f3:d8:61:44:53:b3:bf:bd:3e:38:16:
12:98:b1:ef:4d:32:2b:59:21:66:86:7d:9b:44:ab:6f:f5:32:
e3:85:c5:30:4e:7d:87:89:87:23:69:5c:30:4b:44:2c:2d:cb:
1b:14:8b:e1:1e:ed:0c:1c:2d:8d:81:d6:f7:13:7d:8d:cd:a7:
cc:b3:62:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:33 2026 by rpki-client