Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E748E397F11F194D58A1BCF1D38B0.roa
File: 890E748E397F11F194D58A1BCF1D38B0.roa (raw, json)
Hash identifier: IXSGZNFzs0qr+SSNNPaymxUNZ43Vr6DnCmzk4ChAyZg=
Subject key identifier: 2E:18:45:F4:8C:95:72:DE:A3:5F:8E:09:A1:84:A3:C7:6A:6F:11:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E748E397F11F194D58A1BCF1D38B0.roa
Signing time: Thu 16 Apr 2026 10:32:15 +0000
ROA not before: Thu 16 Apr 2026 10:32:11 +0000
ROA not after: Thu 30 Apr 2026 10:32:11 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109845 (0x1ad15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 10:32:11 2026 GMT
Not After : Apr 30 10:32:11 2026 GMT
Subject: CN=69e0baaf-6700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:d1:ff:3c:fb:46:51:85:f3:25:df:b4:2b:
37:fa:79:e1:9c:f7:c4:4f:65:c3:62:ab:03:11:00:
3c:50:33:d7:f2:19:0e:f6:de:7c:fb:22:6e:e2:ab:
2a:2f:af:4a:26:ec:88:ac:a9:9f:ae:26:ee:ac:c8:
f7:d2:3a:83:33:c9:e2:c9:22:72:b1:59:be:e5:48:
4f:c8:e3:4f:02:39:a0:f7:97:bd:08:7a:7e:94:3a:
db:be:ce:b5:f7:65:74:22:33:a1:e3:a2:f1:d9:8c:
bc:2c:ea:85:cb:a0:36:65:83:a8:c0:0e:e3:81:7e:
fd:9e:e1:57:f8:96:87:ff:81:21:25:54:df:d8:69:
11:8a:5d:17:2b:43:56:71:86:86:ae:d5:18:85:ac:
1e:1e:b5:3e:1f:e9:50:4f:0b:a4:9e:37:17:c0:b7:
f2:06:6c:15:e7:80:df:af:15:3f:52:60:ef:a4:0e:
0f:75:f2:38:c2:69:c0:dc:34:ec:c1:1a:15:a2:f6:
e8:14:c1:ad:1b:5e:b1:71:7b:e9:5d:25:fd:e9:54:
cd:fe:1c:4d:d6:93:5e:2b:ac:93:16:fb:e4:f3:9a:
b3:fb:10:02:2e:9f:34:59:cc:24:81:db:3b:e9:99:
95:e6:2c:c5:06:19:de:9d:3a:ba:e4:fb:6c:44:2f:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:18:45:F4:8C:95:72:DE:A3:5F:8E:09:A1:84:A3:C7:6A:6F:11:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/890E748E397F11F194D58A1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0-156.231.6.255
156.231.8.0/23
Signature Algorithm: sha256WithRSAEncryption
24:6c:45:12:4d:a2:28:5d:bc:23:e5:6c:5f:12:d5:91:18:d5:
5e:3a:c3:f4:3b:72:78:c5:1e:13:46:d9:25:27:2c:9d:bc:b2:
27:2c:42:d2:9e:ee:1d:1d:40:ce:29:79:f3:14:a7:0b:2e:92:
81:1a:59:7f:c8:3e:c5:83:82:6a:a9:58:bc:ba:df:4b:10:95:
8d:d4:a7:43:61:1f:ad:11:6d:7a:2c:16:c6:33:37:bd:c8:bf:
43:42:65:af:75:fa:6c:1e:76:86:3f:27:01:48:15:90:83:3b:
cc:4d:a7:a0:8b:ca:8d:1b:fd:43:e2:46:18:6a:32:61:ee:c6:
59:d9:1a:ee:d3:cc:72:e1:6b:b5:78:65:72:f6:fb:2c:f4:f0:
e1:1e:44:56:42:48:43:1d:d1:82:cb:4d:96:a1:31:36:2a:09:
ad:bc:82:a7:64:26:c7:fe:9f:65:4f:80:c6:63:4c:9b:af:2d:
94:ae:8b:59:ac:f5:03:29:fc:aa:1f:64:63:93:09:77:b9:5b:
9e:c8:d5:50:ea:94:81:b5:ae:92:1e:f0:42:8d:66:92:e4:3f:
5c:47:db:27:72:98:f3:a2:ef:ee:4e:b4:1f:e7:78:86:69:12:
6a:6b:42:4c:20:39:c3:1b:ef:0b:8e:f5:fb:f7:a1:da:cb:6f:
17:15:43:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:38 2026 by rpki-client