Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DC1EF412F911F1B5D1FDABDAE4EC9C.roa
File: 52DC1EF412F911F1B5D1FDABDAE4EC9C.roa (raw, json)
Hash identifier: UPCme6wXwNoQ7ZiuemCNBf6apUBqEFc9BMhq1jLOXE8=
Subject key identifier: 0C:C2:26:2E:39:6D:37:EB:B9:58:F8:14:98:BC:C0:DE:97:63:D3:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DC1EF412F911F1B5D1FDABDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 09:55:47 +0000
ROA not before: Thu 26 Feb 2026 09:55:43 +0000
ROA not after: Mon 30 Mar 2026 09:55:43 +0000
asID: 9304
IP address blocks: 156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106657 (0x1a0a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 09:55:43 2026 GMT
Not After : Mar 30 09:55:43 2026 GMT
Subject: CN=69a018a3-8192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ea:8f:71:22:81:de:e4:75:ce:4c:f3:2e:14:
84:d8:85:d0:69:0e:a0:e5:27:82:90:38:2e:f8:c8:
3d:67:d2:e4:e6:24:ba:79:de:31:af:7f:d2:a9:4f:
86:45:3e:65:35:ec:44:46:16:cb:2e:57:e4:70:cc:
11:44:eb:1f:4a:8e:35:b3:3e:16:92:ea:64:3d:cd:
95:f6:76:a0:8d:67:9e:41:b9:35:24:e7:c2:8e:b5:
7e:ba:bf:a9:42:1a:89:12:34:f3:3c:ab:6c:df:1a:
aa:2b:85:d4:34:09:b6:97:11:b2:d5:ff:0d:34:c9:
d2:d3:aa:e5:45:63:bc:c0:f4:72:61:65:a3:17:76:
c4:81:73:0e:ea:5a:59:b5:af:3b:07:65:2a:2d:91:
e3:c4:29:4a:aa:fa:46:13:f5:aa:20:78:a2:55:11:
be:25:20:2d:c9:a1:df:2a:af:4c:17:c6:25:b1:c5:
ca:ae:41:18:56:2c:b5:a6:8a:be:c8:2b:bb:b4:3c:
02:d3:a1:a9:89:8f:45:b4:86:39:de:f2:b1:4a:2f:
3c:15:23:7e:29:11:88:5f:d9:26:a9:57:40:2c:87:
5c:7c:1f:2b:e3:53:59:bb:c3:b5:72:88:76:34:a7:
c9:b8:87:c7:2e:78:5e:58:5d:4e:bb:d5:4c:12:5f:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:26:2E:39:6D:37:EB:B9:58:F8:14:98:BC:C0:DE:97:63:D3:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52DC1EF412F911F1B5D1FDABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
156.249.190.0/24
Signature Algorithm: sha256WithRSAEncryption
11:26:33:81:c5:5e:96:fe:f5:fe:5b:32:21:43:ed:f3:19:b3:
08:de:0b:37:f7:87:f7:b6:b0:d7:c9:22:12:1a:d0:be:2e:1d:
12:e5:61:c1:37:1c:7f:48:40:7c:05:12:2e:9e:e7:61:b9:d6:
ce:52:e2:49:46:a4:90:50:63:6b:68:41:3d:32:c6:68:d5:6a:
10:e8:21:3e:e1:70:ef:12:dc:df:6b:68:19:43:8f:5e:4e:32:
8f:1f:b1:04:76:ee:6c:6a:48:60:7a:bb:f3:42:89:53:71:20:
43:ac:bc:20:93:f3:aa:9b:92:af:cf:81:13:71:f9:8c:1a:6c:
8f:37:11:80:e8:1d:8f:d4:2a:04:a8:84:5c:dc:82:b7:14:bf:
33:ed:39:1a:d4:6f:b5:1a:7c:cd:c2:66:d6:b7:81:dc:2f:2a:
25:02:aa:8b:8a:3a:0b:20:d9:03:d5:c2:b6:a6:22:2a:b7:ad:
2e:3b:ed:79:2a:18:d3:10:43:80:7f:4d:8b:0c:b1:80:8d:8e:
5a:e8:95:1a:e5:11:57:7b:0d:57:2f:b4:fe:56:41:0e:85:c7:
0d:59:06:39:ff:81:ad:99:5d:54:56:6e:b0:6a:9d:7c:94:2d:
56:fd:04:5c:92:16:0c:59:42:7a:64:e7:39:a7:f0:b2:01:39:
0b:6e:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:59 2026 by rpki-client