Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43666A2233FD11F18DC0FD12CF1D38B0.roa
File: 43666A2233FD11F18DC0FD12CF1D38B0.roa (raw, json)
Hash identifier: kd+12C5DW8pzSV/vpR2DdBmLLd2anMF46mi5ir4ZMGc=
Subject key identifier: 19:66:FB:9F:37:89:8F:45:DA:A8:68:73:A2:A6:BC:2C:1E:31:CA:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43666A2233FD11F18DC0FD12CF1D38B0.roa
Signing time: Thu 09 Apr 2026 10:17:08 +0000
ROA not before: Thu 09 Apr 2026 10:17:03 +0000
ROA not after: Sun 19 Apr 2026 10:17:03 +0000
asID: 214143
IP address blocks: 156.230.136.0/21 maxlen: 24
156.231.13.0/24 maxlen: 24
156.231.176.0/21 maxlen: 24
156.249.192.0/23 maxlen: 24
156.249.198.0/23 maxlen: 24
156.249.210.0/23 maxlen: 24
156.252.27.0/24 maxlen: 24
156.252.28.0/24 maxlen: 24
156.254.112.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109372 (0x1ab3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 10:17:03 2026 GMT
Not After : Apr 19 10:17:03 2026 GMT
Subject: CN=69d77ca4-8566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b4:64:3f:84:b2:04:eb:4d:6a:ef:2d:a7:62:
02:5b:d8:0a:d0:bb:4f:41:e6:13:83:91:b4:10:95:
b1:2e:d5:14:31:42:81:bf:cc:aa:d3:c9:5f:c4:ab:
f1:4e:88:9e:4b:ba:60:71:ac:78:1e:ba:f9:ad:89:
25:3b:69:ce:84:1f:f1:50:b0:c2:1b:0a:fb:27:60:
d5:c5:f2:f8:f2:71:80:fb:cd:2e:05:43:d9:61:3c:
ad:a2:d8:93:ff:04:6e:43:4a:92:0b:a6:ba:ec:97:
2b:6d:fc:5b:11:1d:e1:03:47:86:f9:fb:f2:6d:f2:
6f:32:d1:94:5d:b9:cf:13:d2:e0:1f:f9:f3:40:f4:
1e:e1:2c:b2:61:61:52:b0:61:28:51:4c:10:23:72:
3b:8e:f1:49:e3:bc:40:3d:08:24:00:1f:49:ae:09:
10:ef:94:d5:1d:28:cc:f4:62:3e:0e:b0:7b:ab:db:
a8:89:f9:c2:4f:63:ed:03:ae:42:6b:f1:a2:4f:27:
fb:55:25:b6:3e:73:0d:8f:72:30:b6:75:cd:d0:8f:
79:0b:c2:55:7b:2d:83:7b:fa:5e:6e:9b:0f:ce:77:
ba:e2:90:d3:68:1b:ea:1c:d5:96:06:3f:c2:16:ea:
88:c9:48:5b:ea:73:18:7c:bc:e9:d7:ee:f8:0b:15:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:FB:9F:37:89:8F:45:DA:A8:68:73:A2:A6:BC:2C:1E:31:CA:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43666A2233FD11F18DC0FD12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.136.0/21
156.231.13.0/24
156.231.176.0/21
156.249.192.0/23
156.249.198.0/23
156.249.210.0/23
156.252.27.0-156.252.28.255
156.254.112.0/23
Signature Algorithm: sha256WithRSAEncryption
10:44:fe:a2:8c:93:03:3b:54:ca:3c:a0:d4:2c:ad:51:e2:90:
2d:7e:0e:c9:14:6c:01:8d:64:74:98:32:96:d9:c3:16:31:7a:
d3:59:09:af:31:f4:5b:bc:3b:4f:d3:3f:be:d9:83:c2:44:6d:
5c:fc:51:0d:98:8a:be:b4:91:f5:de:dd:39:6e:c1:1d:fc:55:
19:43:72:54:f6:4f:36:51:f2:8e:58:e3:7a:d4:a1:69:c5:f3:
96:48:f5:5b:94:43:a8:8c:05:ac:8c:d1:47:5d:72:4d:cc:c0:
23:0c:dd:f9:90:ba:9b:4a:fc:58:2e:d4:55:57:cd:bf:7c:02:
1f:4a:16:08:54:3e:f5:33:57:f3:7d:3a:6e:79:fe:2a:93:99:
29:c9:8f:de:ea:3b:90:93:f4:f9:88:c2:06:ce:d6:77:e6:03:
8e:54:b2:9c:d9:5a:46:98:42:dc:d3:1f:06:42:6e:dd:64:40:
ae:00:ff:4f:42:e8:f7:84:2a:83:27:57:18:aa:79:37:10:37:
56:3d:da:c1:72:91:de:93:ef:40:9d:a7:f0:41:b4:74:c6:64:
29:d8:c0:1a:7b:59:00:0b:4a:4d:46:e4:b8:73:58:16:52:e3:
10:c5:13:32:95:c4:c5:d7:ae:8c:a6:95:f0:f8:79:6a:ec:a1:
90:7c:d9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:10 2026 by rpki-client