Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B81C1F6371311F1846D32D2CE1D38B0.roa
File: 5B81C1F6371311F1846D32D2CE1D38B0.roa (raw, json)
Hash identifier: gHQZjRrOKuT/T7RWpIo65/pBrATOgDecaMardUDArbI=
Subject key identifier: 9E:CC:22:F3:8C:18:A7:6E:26:20:75:E7:29:91:52:60:4E:53:7F:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B81C1F6371311F1846D32D2CE1D38B0.roa
Signing time: Mon 13 Apr 2026 08:32:51 +0000
ROA not before: Mon 13 Apr 2026 08:32:46 +0000
ROA not after: Sat 16 May 2026 08:32:46 +0000
asID: 22773
IP address blocks: 156.243.205.0/24 maxlen: 24
156.243.206.0/24 maxlen: 24
156.243.207.0/24 maxlen: 24
156.243.218.0/24 maxlen: 24
156.248.1.0/24 maxlen: 24
156.248.2.0/24 maxlen: 24
156.248.3.0/24 maxlen: 24
156.248.22.0/24 maxlen: 24
156.248.24.0/24 maxlen: 24
156.248.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109650 (0x1ac52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 08:32:46 2026 GMT
Not After : May 16 08:32:46 2026 GMT
Subject: CN=69dcaa33-6622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:9f:46:67:2b:cc:af:5a:37:b4:4d:42:50:
21:10:30:38:3b:0c:91:6f:1e:93:fc:68:9d:04:da:
b3:7c:f7:ab:6f:db:2a:b6:18:62:11:f2:b8:6f:4b:
42:90:36:b7:4a:36:51:47:0d:c1:46:18:30:f5:91:
50:71:f7:26:d2:ee:8e:3b:cb:49:a3:fb:5a:5c:06:
1e:56:be:51:51:c6:7a:96:e5:07:bf:3c:33:67:43:
bf:d8:5e:3a:47:19:6a:55:5c:c0:99:0d:df:d8:39:
ea:1a:f5:85:e6:65:79:6a:e5:bf:92:1b:88:33:b2:
52:b2:ed:e7:cd:c6:4a:ff:1f:71:7f:c6:c4:f8:c2:
d5:7a:59:3f:de:e6:41:26:0b:96:95:d0:03:4c:9c:
93:cc:1e:7a:4c:20:f0:5f:26:ac:98:43:8b:72:e0:
ff:cc:7c:9b:bd:2e:ae:52:d7:10:3a:69:43:c2:38:
da:a3:47:2c:48:6f:82:86:50:05:f3:2c:8f:ba:bd:
7d:17:04:0b:35:a8:70:bb:21:dd:c1:89:36:e9:52:
c7:b9:42:22:fa:9f:1e:fc:e2:97:40:f7:0a:bd:19:
c5:3e:3a:b4:7b:50:2b:de:9e:0c:ef:3f:44:0f:df:
c8:aa:3c:c0:f5:83:04:7d:34:b5:0a:d2:36:eb:06:
98:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:22:F3:8C:18:A7:6E:26:20:75:E7:29:91:52:60:4E:53:7F:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B81C1F6371311F1846D32D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.205.0-156.243.207.255
156.243.218.0/24
156.248.1.0-156.248.3.255
156.248.22.0/24
156.248.24.0/23
Signature Algorithm: sha256WithRSAEncryption
19:84:96:d2:b1:e9:c5:fb:91:2d:e2:dc:e1:65:c3:e3:6b:8e:
b5:7c:f3:9f:7b:40:e1:2b:b5:62:e3:a9:4e:b2:10:54:92:fc:
22:c3:f4:e5:2d:c0:54:b0:66:63:74:a9:0c:87:96:19:30:73:
82:e7:55:1f:b0:bc:1e:f3:9c:d0:eb:90:f8:32:0a:b6:cb:91:
0b:71:7e:b0:a3:98:d8:30:ad:9c:0d:5b:37:51:5a:95:a5:e9:
a0:4b:87:f2:06:cb:25:10:f3:f9:0a:43:ad:c4:9b:dd:e5:69:
a2:4d:5c:05:36:5c:e6:bc:00:62:32:b5:01:78:43:c6:47:83:
b9:99:32:21:14:b6:d9:c2:10:3d:2c:8a:f4:64:2f:b6:5c:97:
b2:38:34:a9:a2:b2:dd:44:02:3f:4c:27:05:70:8e:6e:e8:2c:
d7:8b:c5:53:a0:e9:c0:1f:d3:2c:ee:bf:e4:3f:ae:7a:7a:09:
8e:0a:e1:90:f7:6d:85:72:2e:a9:6c:5e:ca:57:df:56:4e:ad:
29:86:41:50:f0:dc:55:1f:63:4c:f6:94:12:62:dc:34:98:4e:
43:32:35:ce:2e:b7:40:a1:89:8c:ec:6b:d6:0a:0c:bb:16:f1:
cb:11:c5:4a:3e:dd:b4:1a:17:15:dd:2e:85:d6:70:07:d8:52:
ec:c0:f8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:15 2026 by rpki-client