Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CEA09C366B11F18AB52BCCCE1D38B0.roa
File: A5CEA09C366B11F18AB52BCCCE1D38B0.roa (raw, json)
Hash identifier: NZOuucKmwuPsA+b9F8bJhD6N3bwVGl63c5Xt+iGS8FQ=
Subject key identifier: 88:2E:0B:A9:58:A3:12:E1:BC:A4:7A:5C:5D:AC:0D:00:75:FC:F3:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CEA09C366B11F18AB52BCCCE1D38B0.roa
Signing time: Sun 12 Apr 2026 12:32:20 +0000
ROA not before: Sun 12 Apr 2026 12:32:15 +0000
ROA not after: Thu 12 Apr 2029 12:32:15 +0000
asID: 17561
IP address blocks: 156.232.248.0/24 maxlen: 24
156.232.249.0/24 maxlen: 24
156.232.250.0/24 maxlen: 24
156.232.251.0/24 maxlen: 24
156.232.252.0/24 maxlen: 24
156.232.253.0/24 maxlen: 24
156.232.254.0/24 maxlen: 24
156.232.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109595 (0x1ac1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 12:32:15 2026 GMT
Not After : Apr 12 12:32:15 2029 GMT
Subject: CN=69db90d4-4056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:fb:8c:aa:7f:7c:2d:b8:a7:93:12:2f:95:
98:4b:c6:34:b8:5c:ad:41:68:42:b1:c5:33:38:70:
62:c3:d1:4f:2c:65:7f:e2:54:b1:45:f9:ec:57:e9:
83:5f:5c:ac:4e:ef:bb:7b:e4:c5:cb:ce:b5:45:3f:
34:a9:43:74:58:d2:68:e5:b5:e3:c9:35:5b:73:36:
42:99:69:00:b0:6f:81:d1:5b:43:fe:b3:01:39:ff:
ce:49:4a:5f:48:e6:d4:f6:b2:c9:06:bf:92:9b:4a:
b1:e6:58:2d:46:df:25:83:e3:b2:dd:72:ce:bb:08:
db:11:59:b6:56:7f:4d:a1:e3:70:75:a9:69:4d:07:
63:a3:67:b9:2e:16:9e:33:15:b4:dd:63:87:bd:38:
9a:5c:b0:59:96:c8:68:8c:b3:40:ff:79:4e:9a:62:
56:3f:8f:44:09:72:86:36:69:c3:bb:c0:39:c2:0c:
b6:a3:a9:21:24:ba:6e:23:47:d5:10:32:25:42:0c:
01:42:17:2a:a2:15:a1:7d:9f:e4:c6:d3:24:56:a0:
0d:c6:c7:a9:c7:cb:3e:1b:27:89:96:2f:07:6c:89:
c4:48:e1:0d:eb:e6:da:16:8f:c1:18:c4:74:9f:a5:
83:df:96:d6:5c:ef:78:3d:5f:12:a9:7d:0f:59:12:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2E:0B:A9:58:A3:12:E1:BC:A4:7A:5C:5D:AC:0D:00:75:FC:F3:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5CEA09C366B11F18AB52BCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.248.0/21
Signature Algorithm: sha256WithRSAEncryption
83:cd:42:ab:e3:5a:35:ce:68:df:6e:b5:a8:a3:7d:8d:2f:fa:
46:98:45:22:87:0a:c9:ff:2f:68:85:55:f1:00:de:44:e1:6a:
b0:01:80:40:f5:00:92:0e:8a:1e:ee:34:ee:d3:39:23:c2:75:
3e:ea:eb:35:c5:6a:08:66:2a:e8:1b:ed:43:51:95:49:e3:2e:
6e:3f:59:f2:67:00:da:3a:51:47:aa:5e:c0:8c:65:33:a2:cb:
15:e4:b7:d6:c5:45:17:2b:eb:82:a4:16:6d:41:99:a9:dd:25:
b9:c0:66:38:a1:6c:47:74:92:1c:ef:32:eb:cb:f2:a0:3c:96:
e9:90:e8:18:3d:54:0e:fb:6b:7e:4a:9f:7b:64:6e:a3:5c:f7:
3a:d2:cd:07:63:e5:c1:96:05:0a:2b:83:cf:d4:40:45:8c:e4:
9f:6e:c4:be:8b:a3:33:41:68:30:a8:49:8f:8d:49:ab:5d:60:
45:47:cc:f9:c3:51:29:93:d0:e4:73:44:bf:d0:01:e6:6a:6e:
28:0b:cb:60:06:e2:33:17:04:b5:4b:6b:af:07:cf:e0:71:28:
6b:c2:b0:76:0a:7e:73:02:42:a7:70:e8:c9:9f:23:17:85:6a:
f4:fa:d8:1e:82:f7:4b:15:62:fe:6a:85:2b:d2:56:83:46:9c:
df:16:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:34 2026 by rpki-client