Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334B72C230A611F1938FA59DDAE4EC9C.roa
File: 334B72C230A611F1938FA59DDAE4EC9C.roa (raw, json)
Hash identifier: gR0mrakotB/El/jg25EG1j+vcDq5m5qd0FaesRwq/KU=
Subject key identifier: 8A:B2:99:F5:2F:5A:E8:23:92:7D:49:2B:EB:18:2B:68:3A:A6:C2:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334B72C230A611F1938FA59DDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 04:16:21 +0000
ROA not before: Sun 05 Apr 2026 04:16:16 +0000
ROA not after: Fri 15 May 2026 04:16:16 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109021 (0x1a9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 04:16:16 2026 GMT
Not After : May 15 04:16:16 2026 GMT
Subject: CN=69d1e215-4371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:d1:1a:f6:26:05:b5:60:be:b8:38:fd:51:
c4:9d:7c:bc:65:80:95:ac:57:fb:bd:db:f7:84:dd:
31:ee:2d:fc:1d:4d:00:5e:88:8a:d8:30:b7:bc:cb:
2b:26:5d:88:d6:74:d3:30:e8:15:5b:75:c1:3f:2f:
87:2c:bb:5d:50:12:42:d7:ad:5a:6b:50:8f:38:9a:
e4:84:92:5a:a5:95:1a:c4:89:f5:f1:2d:4c:b4:f2:
3c:42:73:77:3a:87:83:e7:b3:4c:45:25:61:d9:e3:
cd:d4:1e:e6:01:99:72:1a:03:83:99:72:f3:55:c7:
63:62:4e:7f:bd:bf:fd:c8:ee:8c:d1:dc:ae:08:cd:
9e:9e:a3:05:ed:49:fc:86:83:92:20:1c:fa:52:bc:
fd:5a:d0:4d:09:c5:3e:4a:18:4e:af:e0:9e:ac:bd:
ff:b7:a1:06:ef:d9:2e:ca:27:a0:f4:06:7c:22:fb:
65:7e:f5:eb:57:0d:6e:3b:d4:83:41:01:7c:87:6f:
30:45:ec:b3:9b:2e:5c:6e:3d:66:4b:4c:65:f2:6e:
72:14:49:2d:72:fd:85:a3:69:11:8d:f0:4a:9b:bd:
48:31:89:9a:11:41:3b:a2:33:a8:4a:81:0c:5b:25:
81:90:0a:c1:43:f8:8b:29:6a:c3:6e:84:ca:3b:02:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B2:99:F5:2F:5A:E8:23:92:7D:49:2B:EB:18:2B:68:3A:A6:C2:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/334B72C230A611F1938FA59DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
Signature Algorithm: sha256WithRSAEncryption
72:47:9f:5c:87:da:4b:fa:12:54:72:19:07:4a:41:4f:eb:0e:
14:bb:54:f4:a3:9a:be:bf:66:af:ab:81:80:8e:2d:db:e6:c7:
f8:b3:b8:e1:a5:4a:3c:dc:cd:8f:d4:74:b0:25:23:2e:26:bd:
eb:24:c4:00:7d:b2:95:51:27:37:2f:17:e1:22:f2:ae:15:c2:
69:53:e3:77:6c:b7:d4:69:48:61:63:24:09:a3:7e:d2:e3:f0:
f5:1f:6a:d2:2e:e1:a6:de:ec:8f:07:8b:76:f7:19:d7:48:bf:
3e:0e:34:3f:f3:a7:1d:d2:79:95:2c:de:58:03:17:c4:1b:de:
f2:dc:74:82:24:d9:df:31:26:62:3c:6b:36:c5:49:46:80:0c:
a9:38:2d:3c:d8:07:c5:c5:8c:e5:6a:45:2a:b0:df:0c:18:e7:
05:d0:05:4d:23:a4:23:0a:36:b8:a3:23:15:f6:5b:ca:52:59:
43:72:de:13:94:bf:73:ab:97:d8:3f:3e:f7:17:c7:f0:a7:9c:
2a:9c:07:90:e4:4a:e6:7f:10:2e:81:8e:dd:d5:7a:04:17:2e:
48:29:4f:5c:9a:2d:b8:52:2c:a8:7b:40:2b:7d:d9:10:f5:80:
20:f3:c2:e5:61:de:04:ae:53:fd:cc:62:72:f4:76:04:b8:e4:
7a:91:3f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:34 2026 by rpki-client