Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52B3BDB8376811F18FBD0FCECE1D38B0.roa
File: 52B3BDB8376811F18FBD0FCECE1D38B0.roa (raw, json)
Hash identifier: w6Po2bP5aQsm8NuTNNyzFlQCFOHZBboRTGJtgHt7nAA=
Subject key identifier: DD:CC:30:6E:47:51:60:96:AF:80:0C:C0:7E:6D:0E:C5:C4:D6:04:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52B3BDB8376811F18FBD0FCECE1D38B0.roa
Signing time: Mon 13 Apr 2026 18:41:04 +0000
ROA not before: Mon 13 Apr 2026 18:40:58 +0000
ROA not after: Wed 13 May 2026 18:40:58 +0000
asID: 17497
IP address blocks: 156.245.8.0/22 maxlen: 24
156.245.8.0/24 maxlen: 24
156.245.9.0/24 maxlen: 24
156.245.10.0/24 maxlen: 24
156.245.11.0/24 maxlen: 24
156.245.176.0/21 maxlen: 24
156.245.177.0/24 maxlen: 24
156.245.178.0/24 maxlen: 24
156.245.179.0/24 maxlen: 24
156.245.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109678 (0x1ac6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 18:40:58 2026 GMT
Not After : May 13 18:40:58 2026 GMT
Subject: CN=69dd38c0-61b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:11:3e:cd:24:32:40:3b:60:56:03:d8:5a:63:
36:94:b8:69:85:2a:b1:ff:2e:4a:a8:24:b7:8a:5d:
80:af:05:c8:df:81:0c:e4:b5:91:fe:a9:89:5e:ef:
bb:c3:b3:6c:3a:3f:6c:04:0c:8f:39:da:05:4d:b2:
01:51:75:a3:33:24:32:bc:02:17:8b:2f:d1:4b:c3:
60:fd:2a:2a:88:90:ca:e5:b8:d1:fc:b1:38:16:a6:
b4:b4:b3:c0:b5:79:06:76:29:80:0f:97:aa:b5:46:
9c:0c:03:92:6a:cd:b0:86:f4:fb:57:04:48:c5:68:
78:fc:fe:fb:77:3e:01:d5:a0:c9:20:dc:da:be:d8:
c8:e5:d2:29:4f:70:26:be:80:16:76:a0:e0:ae:01:
3d:d2:3a:89:00:60:b3:e2:8e:53:12:83:dc:1d:8a:
87:79:24:d1:34:45:1c:7c:d4:7c:33:67:4c:74:c4:
de:a3:7e:09:74:4e:93:bc:14:66:46:89:39:d8:6d:
31:aa:62:a8:da:21:a0:4e:35:25:85:73:cb:80:d0:
bb:ea:78:d4:b2:1b:9f:36:46:3e:c6:d6:4d:48:d5:
b7:ff:25:12:54:9c:16:75:a8:ec:21:0f:cb:cc:a9:
6f:65:94:90:87:14:b2:77:47:4b:38:4e:7e:56:4e:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CC:30:6E:47:51:60:96:AF:80:0C:C0:7E:6D:0E:C5:C4:D6:04:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52B3BDB8376811F18FBD0FCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/22
156.245.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:52:f0:ad:30:86:9e:ac:f3:38:2d:fe:f1:82:e6:80:93:5f:
e9:35:71:73:2a:84:98:f6:f7:ab:57:a0:3c:f2:a8:d0:bd:f1:
1d:7e:93:70:2f:ac:35:d5:95:32:13:c0:87:41:4d:5d:b6:f8:
95:36:70:4b:99:99:32:95:4b:b5:30:0d:0c:11:b9:b7:a5:95:
30:e1:38:9d:9a:50:5f:5e:92:a6:e8:1e:c4:f9:96:94:d4:49:
75:5d:e8:cf:b8:7b:9e:25:b6:18:d2:cb:2c:e7:dc:36:36:09:
c7:99:1e:b2:42:b9:ac:86:52:e3:9a:5c:cf:e4:8f:20:02:fd:
b4:7e:35:29:01:92:2b:b2:e3:3f:35:ac:59:13:29:eb:0a:82:
15:df:da:19:af:91:65:d9:c8:90:9c:ce:53:d7:99:cb:1a:c1:
6c:45:88:22:ae:e7:ad:8f:54:66:e7:e8:a4:70:bd:9b:e4:40:
9d:73:61:8f:bf:4e:28:8a:1c:a0:cf:73:f7:53:58:18:00:36:
7f:54:41:71:2e:b2:1e:10:25:fb:00:1e:e8:67:51:14:95:1d:
00:87:e2:c1:8a:b4:b2:18:84:50:ca:c8:a7:60:a4:55:45:70:
92:09:29:ec:70:0a:b6:a1:c2:d8:ba:62:ee:37:36:d8:1f:f2:
6f:11:0d:04
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAaxuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEzMTg0MDU4WhcNMjYwNTEzMTg0MDU4WjAYMRYw
FAYDVQQDEw02OWRkMzhjMC02MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwRE+zSQyQDtgVgPYWmM2lLhphSqx/y5KqCS3il2ArwXI34EM5LWR/qmJ
Xu+7w7NsOj9sBAyPOdoFTbIBUXWjMyQyvAIXiy/RS8Ng/SoqiJDK5bjR/LE4Fqa0
tLPAtXkGdimAD5eqtUacDAOSas2whvT7VwRIxWh4/P77dz4B1aDJINzavtjI5dIp
T3AmvoAWdqDgrgE90jqJAGCz4o5TEoPcHYqHeSTRNEUcfNR8M2dMdMTeo34JdE6T
vBRmRok52G0xqmKo2iGgTjUlhXPLgNC76njUshufNkY+xtZNSNW3/yUSVJwWdajs
IQ/LzKlvZZSQhxSyd0dLOE5+Vk53ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3M
MG5HUWCWr4AMwH5tDsXE1gTtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MkIzQkRCODM3NjgxMUYxOEZCRDBGQ0VDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnPUIAwQDnPWwMA0GCSqGSIb3
DQEBCwUAA4IBAQBqUvCtMIaerPM4Lf7xguaAk1/pNXFzKoSY9verV6A88qjQvfEd
fpNwL6w11ZUyE8CHQU1dtviVNnBLmZkylUu1MA0MEbm3pZUw4TidmlBfXpKm6B7E
+ZaU1El1XejPuHueJbYY0sss59w2NgnHmR6yQrmshlLjmlzP5I8gAv20fjUpAZIr
suM/NaxZEynrCoIV39oZr5Fl2ciQnM5T15nLGsFsRYgiruetj1Rm5+ikcL2b5ECd
c2GPv04oihygz3P3U1gYADZ/VEFxLrIeECX7AB7oZ1EUlR0Ah+LBirSyGIRQysin
YKRVRXCSCSnscAq2ocLYumLuNzbYH/JvEQ0E
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:50 2026 by rpki-client