Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53D3F65C29C311F183617CCEDAE4EC9C.roa
File: 53D3F65C29C311F183617CCEDAE4EC9C.roa (raw, json)
Hash identifier: 3Tbfl1fqtlhShvK7zbnkfXd97JGKncqv1wfy8A0q8jI=
Subject key identifier: 5F:A6:60:17:B4:D3:2F:9D:15:E2:1B:D1:5D:85:67:57:0A:8C:32:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53D3F65C29C311F183617CCEDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 09:57:13 +0000
ROA not before: Fri 27 Mar 2026 09:57:08 +0000
ROA not after: Sun 10 May 2026 09:57:08 +0000
asID: 25160
IP address blocks: 156.225.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108469 (0x1a7b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 09:57:08 2026 GMT
Not After : May 10 09:57:08 2026 GMT
Subject: CN=69c65479-fbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:30:b3:27:86:51:9c:b6:8b:6c:15:16:63:
bd:de:dc:91:6d:09:9d:f4:69:eb:e9:a4:15:e8:3c:
8e:79:51:b3:9f:39:40:06:4a:42:5b:fa:89:2f:37:
74:1d:8a:77:66:ed:ad:51:f4:74:ae:f4:7b:c1:c1:
77:12:92:4c:dd:71:37:cd:34:c6:9c:69:97:21:cd:
64:11:b9:59:f3:c8:b4:1d:4d:54:b4:8c:29:cb:71:
df:70:ea:7b:ff:e2:41:75:1f:6c:58:f1:89:2d:65:
13:0d:83:dd:1d:95:3f:b1:f0:64:e6:af:f1:aa:29:
7d:b6:96:56:88:fd:cf:25:fb:11:a2:de:40:53:2a:
5e:30:5b:fc:64:a2:a0:5d:04:4f:84:c7:83:c3:cb:
95:b6:4f:3b:74:17:c0:c4:84:57:df:fd:24:f7:12:
23:e4:a7:87:43:45:32:ea:fe:c1:7a:54:a7:4f:2f:
a5:11:02:2b:51:dc:00:51:24:91:c3:2f:22:5a:69:
4b:3c:76:3d:52:f5:e6:4e:c9:64:fb:99:fa:86:db:
97:15:dd:89:4f:1a:32:96:dd:f0:f7:46:ca:6b:45:
f1:c2:f0:27:c5:b6:6d:47:af:0f:98:04:35:51:a4:
7c:e0:89:b6:b8:de:14:15:f1:a8:d6:9f:76:c0:df:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:60:17:B4:D3:2F:9D:15:E2:1B:D1:5D:85:67:57:0A:8C:32:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53D3F65C29C311F183617CCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3d:7b:4f:4e:5b:98:2c:e5:b8:67:ba:9c:e6:b0:eb:82:e6:
66:e8:a8:57:e5:8b:02:f3:64:53:21:c9:53:95:ef:4d:f2:e0:
19:ce:fb:28:07:00:df:f2:5a:00:a9:db:db:55:f8:7f:ca:47:
c0:07:6e:ea:2d:14:93:ea:0f:be:17:c6:8b:e8:cc:b3:bc:65:
b2:27:f7:30:54:17:fc:a4:ad:94:8c:3a:e0:63:07:36:43:0b:
af:c5:26:30:16:84:11:17:f3:d5:a6:d1:f8:7b:0c:99:b5:5e:
26:df:eb:2e:9d:55:da:8a:3d:f4:e7:c1:c6:2c:64:f3:44:b6:
2a:7c:ff:f7:df:96:d9:6d:9f:1c:f1:23:4d:f6:e1:22:7c:33:
c5:62:1b:3c:21:3a:47:f4:7b:b9:19:5a:9a:cd:75:17:41:4c:
70:43:67:a6:bf:8e:71:6b:34:72:d6:fd:07:04:a6:78:4c:2a:
d7:2f:d2:c4:52:38:62:ca:8f:1d:38:a6:7b:86:b7:d9:66:98:
2f:95:d4:f5:52:3b:f4:40:8b:7e:9a:27:78:43:b7:58:63:b8:
9f:da:ec:e5:a1:54:a9:d8:82:8a:aa:a9:44:2b:28:3e:42:b9:
e9:0c:e9:4a:4b:33:74:df:8f:86:da:a7:6f:a8:78:5f:fc:7c:
e0:95:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:40 2026 by rpki-client