Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8386D530366711F1A375C0B3CE1D38B0.roa
File: 8386D530366711F1A375C0B3CE1D38B0.roa (raw, json)
Hash identifier: mRNRU6bTVLxAvMf8mIykExz9U2EWzLKVuPW89LEkxX0=
Subject key identifier: 44:35:B1:82:38:80:37:E3:90:C1:17:74:B5:A6:AF:47:FF:75:63:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8386D530366711F1A375C0B3CE1D38B0.roa
Signing time: Sun 12 Apr 2026 12:02:44 +0000
ROA not before: Sun 12 Apr 2026 12:02:39 +0000
ROA not after: Thu 12 Apr 2029 12:02:39 +0000
asID: 17561
IP address blocks: 156.232.168.0/24 maxlen: 24
156.232.169.0/24 maxlen: 24
156.232.170.0/24 maxlen: 24
156.232.171.0/24 maxlen: 24
156.232.172.0/24 maxlen: 24
156.232.173.0/24 maxlen: 24
156.232.174.0/24 maxlen: 24
156.232.175.0/24 maxlen: 24
156.232.176.0/24 maxlen: 24
156.232.177.0/24 maxlen: 24
156.232.178.0/24 maxlen: 24
156.232.179.0/24 maxlen: 24
156.232.180.0/24 maxlen: 24
156.232.181.0/24 maxlen: 24
156.232.182.0/24 maxlen: 24
156.232.183.0/24 maxlen: 24
156.232.184.0/24 maxlen: 24
156.232.185.0/24 maxlen: 24
156.232.186.0/24 maxlen: 24
156.232.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109587 (0x1ac13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 12:02:39 2026 GMT
Not After : Apr 12 12:02:39 2029 GMT
Subject: CN=69db89e4-fd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:87:0a:10:4d:72:0f:38:63:2a:cd:f0:f7:
5b:21:97:ff:ad:29:d5:b9:13:eb:40:30:fa:78:c7:
01:ea:5a:70:e6:39:ac:a5:f8:34:7a:4f:80:94:c1:
f8:2c:8e:46:bc:8c:3e:94:11:01:c3:01:f3:8a:af:
59:2d:eb:d1:c5:d4:59:c2:10:4f:af:d5:1d:fb:8c:
21:64:73:81:8c:65:02:cd:08:da:9e:f0:c9:9d:45:
74:ff:21:e1:2b:45:b1:26:59:e5:54:b7:4d:f4:95:
d9:aa:41:15:88:88:d7:3a:45:0a:ac:60:0a:6e:d7:
0e:b4:e9:b9:d6:d5:44:28:1b:dd:a6:4d:c2:c0:e2:
d7:d2:07:36:ae:5b:ad:e9:b6:69:30:02:07:22:9f:
9c:90:21:54:e2:70:66:58:21:e0:86:21:15:59:f0:
3a:c4:f0:2a:ad:fe:bf:9c:cb:b0:00:42:1b:2b:8e:
48:19:ec:27:88:4e:eb:e8:c6:3d:71:84:61:35:79:
81:2a:20:d4:60:8c:ed:b3:64:b7:da:9e:c7:1a:4e:
67:e6:35:4f:7a:0c:73:20:2c:03:a1:54:b4:03:64:
1e:70:b4:c6:7e:42:db:bc:9e:20:dc:17:38:97:82:
80:51:33:60:3f:f6:2a:51:7c:f2:8d:86:f7:4b:5f:
83:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:B1:82:38:80:37:E3:90:C1:17:74:B5:A6:AF:47:FF:75:63:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8386D530366711F1A375C0B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.168.0-156.232.187.255
Signature Algorithm: sha256WithRSAEncryption
b8:2b:ac:a8:96:c8:aa:45:ae:db:97:4d:77:59:b4:b2:1c:9d:
7c:77:8a:eb:0e:62:36:0c:66:c7:68:64:fc:d3:7b:d0:6d:0a:
d9:3b:9f:c0:ad:cf:14:3b:dd:38:f0:46:f1:d8:97:1c:04:6d:
67:ed:02:b7:f2:f3:48:f7:96:c7:75:63:fe:62:b4:d8:60:c0:
98:1e:76:fc:33:ef:71:82:30:d3:5f:b5:e2:bf:d5:2a:57:a2:
0b:b1:69:37:ad:cf:51:49:30:be:43:ab:65:1c:11:fa:cf:85:
99:2c:ea:11:7f:17:79:af:f8:c8:b4:e4:56:8e:a4:bc:b0:07:
30:80:e5:fe:5c:e6:38:71:3d:0a:6c:0a:e3:5f:0f:df:65:4d:
fa:87:e4:60:83:f2:79:c9:a9:8f:14:ce:2c:ae:58:0d:9c:1f:
40:c0:d7:28:a2:c7:c2:19:37:89:46:ad:a6:4a:f3:67:e1:bc:
00:8d:0c:3a:7a:6a:9c:86:db:41:00:99:ca:43:83:67:75:42:
5e:62:53:d5:d9:2f:ad:88:8f:eb:06:ac:05:d6:d5:ac:6a:2f:
8b:53:6c:0c:92:48:c6:72:32:43:77:9b:0b:1e:d1:85:4f:e9:
3f:4f:46:00:09:b9:e9:f2:70:34:09:96:d2:e9:43:71:32:8b:
29:ad:f6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:13 2026 by rpki-client