Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25203C7C399E11F199FD1ED4CE1D38B0.roa
File: 25203C7C399E11F199FD1ED4CE1D38B0.roa (raw, json)
Hash identifier: qkeNaEnT8YzhAAt5bWD1SaGrJCUGV3HOxqdXMAzacGM=
Subject key identifier: 75:70:DC:CC:53:32:C5:D6:7E:80:86:59:D0:6C:82:91:82:F5:16:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25203C7C399E11F199FD1ED4CE1D38B0.roa
Signing time: Thu 16 Apr 2026 14:11:22 +0000
ROA not before: Thu 16 Apr 2026 14:11:17 +0000
ROA not after: Wed 29 Apr 2026 14:11:17 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
156.231.20.0/22 maxlen: 24
156.252.18.0/23 maxlen: 24
156.252.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109887 (0x1ad3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 14:11:17 2026 GMT
Not After : Apr 29 14:11:17 2026 GMT
Subject: CN=69e0ee0a-1369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:b7:aa:0a:c7:c8:81:f9:9d:14:5f:eb:fb:
60:80:e6:94:48:ee:cd:26:c6:64:a5:f1:72:d6:36:
84:02:4f:f7:9d:51:4b:bc:90:c9:58:2e:ae:60:11:
8d:0a:91:4b:0d:35:00:db:97:a4:b5:a2:dd:9d:9a:
c2:0b:c4:be:9a:68:2a:cc:f1:a3:8c:e6:a6:eb:54:
96:5d:5e:95:9f:cd:1d:ca:ea:9f:47:d9:49:dd:21:
2a:95:8e:3e:7b:1a:34:df:71:9a:6c:0b:7f:43:52:
5b:f9:ea:5b:2d:60:31:d0:54:95:a6:4c:9c:96:96:
d3:d6:c7:43:7e:6f:f8:e7:ab:7d:9b:cb:b4:d9:24:
c6:d6:d5:f6:83:49:0a:74:a5:47:70:0a:7f:d4:4e:
d1:f1:c6:86:86:88:08:51:a3:ed:29:ea:e5:3f:a2:
c7:a1:ef:79:f7:73:ef:ca:23:ee:10:34:ea:e6:93:
ff:21:57:9d:95:93:f0:d5:48:22:a4:9a:c4:29:db:
bd:5a:be:c7:1b:6f:26:07:1c:d3:13:2b:81:e3:f1:
b2:96:12:d8:d7:e0:89:84:fb:f9:19:c9:e8:50:14:
40:8e:35:51:e7:f9:2b:97:0b:38:49:eb:dd:92:a6:
b8:c3:ea:a8:d7:f6:7d:5b:8d:ae:e2:f1:d1:13:43:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:70:DC:CC:53:32:C5:D6:7E:80:86:59:D0:6C:82:91:82:F5:16:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25203C7C399E11F199FD1ED4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.231.20.0/22
156.252.18.0/23
156.252.132.0/22
Signature Algorithm: sha256WithRSAEncryption
98:de:57:bd:10:32:04:4b:4a:9a:12:6d:fb:c2:d9:6c:f2:da:
08:19:af:b7:b5:ee:72:6a:3e:3f:81:fb:9b:c7:e6:24:b9:8f:
af:ef:d5:30:1a:72:9f:20:47:c7:a1:a4:ea:7f:22:28:4c:02:
d9:fb:bf:dc:3a:4e:41:4e:ac:9a:bb:dd:7b:5d:7f:22:08:41:
69:87:a2:85:db:25:80:88:c5:78:3c:43:56:8f:dc:8d:74:9d:
19:02:87:e8:c7:45:2a:74:57:59:cc:22:81:42:da:bd:0b:22:
ff:ad:a0:4c:e1:bc:9d:a7:d1:2b:1a:73:17:11:8b:0c:b1:f2:
d0:8d:d4:44:70:bd:c9:4d:81:46:56:8a:d4:7c:ed:c3:65:26:
b7:09:87:02:0e:37:41:37:a6:3f:34:73:71:51:b6:3c:01:54:
99:0c:fc:5b:4e:08:03:37:f9:1d:e0:ac:cd:18:a9:03:a0:9d:
45:2f:6e:5c:b5:af:52:66:7f:ce:d2:a1:1b:29:25:b5:0d:35:
80:5e:55:74:c8:0d:ac:cc:99:e2:45:06:01:5d:90:b2:ab:bf:
98:fb:ae:7d:52:2c:88:32:2a:a7:3e:f3:89:d4:bc:23:23:e7:
ac:3d:84:e4:32:81:a6:0e:b2:57:5f:de:93:62:1b:86:e0:20:
42:e8:d5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:45:43 2026 by rpki-client