Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67F3CA313411F18CAA24D7DAE4EC9C.roa
File: 5E67F3CA313411F18CAA24D7DAE4EC9C.roa (raw, json)
Hash identifier: WJ1PpYhMZqGGahUoosvlsphxE3GQQvQxcGtKJ4qu+VY=
Subject key identifier: CB:95:D8:FC:DF:C9:D2:44:F6:9F:BF:E1:A8:F6:14:CC:7F:D6:FA:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67F3CA313411F18CAA24D7DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 21:14:02 +0000
ROA not before: Sun 05 Apr 2026 21:13:57 +0000
ROA not after: Wed 04 Apr 2029 21:13:57 +0000
asID: 17561
IP address blocks: 156.225.70.0/24 maxlen: 24
156.225.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109172 (0x1aa74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 21:13:57 2026 GMT
Not After : Apr 4 21:13:57 2029 GMT
Subject: CN=69d2d09a-fbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f7:d4:4b:66:ff:60:8e:4a:b2:58:c0:0d:b7:
44:a8:b2:de:09:27:df:47:1b:6d:ca:f5:2d:22:12:
48:cd:27:b2:0a:ab:54:b8:9d:98:0c:b3:4f:a8:b3:
0d:36:b1:94:62:59:c4:1f:5f:fa:ad:82:01:72:e4:
73:8d:94:2a:ce:cb:6a:b3:0c:d7:68:86:2e:ea:2e:
e7:60:0e:74:7a:cb:da:cf:b3:04:8e:0d:eb:c5:8e:
91:17:8b:90:c7:3d:53:7b:e5:89:96:ad:dd:fa:fe:
56:43:35:ed:5e:1b:59:5a:4c:9d:1e:48:c3:01:19:
c8:d8:d4:a7:4a:5e:a4:37:05:6d:0c:c2:10:77:6a:
02:90:68:64:16:8e:c4:59:35:86:b0:6e:64:6b:e0:
10:cc:0e:10:c3:43:ca:19:ad:e1:c2:9d:d8:06:26:
e7:8f:76:0b:e7:2a:a6:ce:99:9a:30:50:1c:a3:80:
05:e4:20:ee:1f:31:bc:c7:a8:ce:8a:58:17:8e:6c:
64:42:ed:96:e3:e7:27:c4:d5:fe:f5:2f:eb:3a:73:
77:40:95:a4:08:c1:b8:5a:ea:7a:2a:d9:77:60:9f:
a0:4b:c8:fb:31:48:81:09:9c:cb:20:66:96:39:ef:
f9:e0:86:66:1a:79:24:65:ce:83:53:68:99:a1:92:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:D8:FC:DF:C9:D2:44:F6:9F:BF:E1:A8:F6:14:CC:7F:D6:FA:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E67F3CA313411F18CAA24D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.70.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:bc:b8:2c:d4:88:8a:c1:6d:96:ba:05:5b:02:87:56:b2:8e:
48:f7:97:c2:af:fa:29:52:60:0c:87:55:70:73:8e:12:86:07:
c2:e6:8f:06:61:e6:f9:98:05:a0:f7:d0:0d:92:c3:a6:fc:f9:
4a:64:36:4a:fb:1a:69:34:2e:60:1f:22:92:20:03:9f:86:8c:
86:09:68:a9:2f:92:10:95:c8:3f:58:bf:cc:58:f0:7a:bf:ed:
31:08:4a:8a:d4:58:17:34:41:a0:15:c2:c7:a2:a3:c7:a0:08:
0c:68:f2:3a:31:31:2b:15:3a:b8:fe:cb:08:f0:72:83:36:a3:
33:5c:c6:c6:b4:1d:11:7e:d9:19:86:84:c6:1e:fe:13:03:df:
62:d0:a0:30:04:d9:3e:30:96:7a:33:b5:64:5c:49:91:76:9d:
a9:53:a9:e9:6f:e1:16:9c:f5:fb:f9:7c:35:38:59:69:67:11:
bd:22:d9:de:3f:2e:e2:a3:e7:b1:61:cd:e2:87:89:fe:7c:2c:
f4:80:77:65:62:5c:f6:4f:b0:8f:61:b5:80:49:db:cd:14:e7:
cd:8b:e7:0d:3b:64:68:15:fb:cc:9c:da:8c:74:00:71:ed:01:
64:03:56:ab:a4:89:a6:8c:2a:ef:70:ce:5d:ac:93:67:1d:56:
38:65:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:59 2026 by rpki-client