Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FD1CB229CE11F18056AA90DAE4EC9C.roa
File: C5FD1CB229CE11F18056AA90DAE4EC9C.roa (raw, json)
Hash identifier: TGMOdCPnvov6zCR+8wSYMuW4JEAwnDSFt7m6sUddmi8=
Subject key identifier: 8B:A4:76:6F:5F:0C:45:48:D3:76:E7:DE:19:AC:81:BC:9E:95:E5:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FD1CB229CE11F18056AA90DAE4EC9C.roa
Signing time: Fri 27 Mar 2026 11:19:09 +0000
ROA not before: Fri 27 Mar 2026 11:19:04 +0000
ROA not after: Sun 10 May 2026 11:19:04 +0000
asID: 395793
IP address blocks: 156.236.14.0/23 maxlen: 24
156.243.223.0/24 maxlen: 24
156.243.225.0/24 maxlen: 24
156.243.230.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108485 (0x1a7c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 11:19:04 2026 GMT
Not After : May 10 11:19:04 2026 GMT
Subject: CN=69c667ad-374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9a:ea:e3:4e:12:00:ce:30:79:a3:cd:80:25:
a2:be:90:64:a2:60:38:ad:c1:b0:b0:4f:fb:c7:db:
86:b2:3d:e6:b5:00:6a:95:2c:9b:18:6a:c4:ee:e8:
cb:0c:f5:6e:4d:80:c3:c7:d8:23:31:43:1e:52:12:
00:4f:6b:42:57:5a:01:a3:2f:31:6d:cf:4e:4f:e1:
87:d3:5c:76:cf:be:ef:9a:c9:b2:a2:48:84:69:cc:
5b:f3:50:3e:7f:af:d0:dd:c4:1d:3b:30:a8:b0:34:
45:be:55:5f:48:22:a7:f7:5c:aa:6e:d7:68:65:a7:
57:a9:3d:24:d5:23:d0:bf:b2:f9:00:00:58:6e:88:
a1:41:2e:ed:d8:53:00:83:7c:e4:36:d1:7e:f2:43:
52:cf:18:03:f1:db:66:e0:39:ff:35:44:8e:bd:f9:
ad:f2:39:5a:d3:ca:0b:4d:f1:08:53:93:dc:6c:36:
c5:58:e3:f1:97:9a:60:21:c6:bc:da:54:e5:9c:8b:
f9:bf:d1:c2:3a:5d:79:b1:bd:76:91:d2:05:e1:86:
3f:37:d2:3f:45:93:26:b5:07:66:05:1f:56:72:dc:
84:a2:11:0b:50:a3:8d:17:30:83:d9:e0:4c:cc:ab:
41:8f:4e:d9:f4:33:d6:34:07:9e:49:2c:af:83:79:
40:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A4:76:6F:5F:0C:45:48:D3:76:E7:DE:19:AC:81:BC:9E:95:E5:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FD1CB229CE11F18056AA90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.14.0/23
156.243.223.0/24
156.243.225.0/24
156.243.230.0/24
156.243.241.0/24
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
36:f7:74:e4:a4:eb:0e:f9:00:60:08:84:f6:d6:86:9f:cc:c7:
42:d8:49:02:ba:87:b1:80:4a:0b:f8:6c:81:2b:4e:67:5b:83:
db:fd:c2:a5:3c:d1:0a:3b:26:a5:0d:7b:a7:03:72:f7:ad:ae:
09:dd:e2:10:c8:d3:3d:42:0f:2b:26:36:58:a8:61:f1:b3:02:
d8:61:4f:d0:02:cf:c3:91:de:9c:f5:16:30:54:4c:2c:fa:54:
d7:6c:db:58:6c:6d:79:a5:e5:77:d8:c7:da:b6:e2:00:d8:aa:
3f:e8:c8:c8:b8:9d:fb:16:ee:f4:f1:0a:69:fe:b7:56:ae:df:
43:c2:64:aa:00:8d:91:62:c0:9f:3d:5a:77:66:29:91:d4:1f:
0a:46:8f:bf:31:0c:ec:ba:a9:c2:a9:d5:29:48:6c:61:80:9f:
16:cb:d4:7f:c1:df:10:e5:0c:47:74:b1:c5:2a:3b:cf:06:07:
98:82:1b:56:8d:f2:80:51:29:79:0d:19:50:ae:13:de:22:c3:
59:36:1b:d1:09:49:d6:17:29:c8:66:43:a9:a0:94:82:1b:cf:
7e:b7:34:ef:6c:1c:63:91:61:72:ca:b8:40:d7:81:66:ca:96:
4a:82:7c:ca:46:0f:9e:62:c5:04:ad:96:27:a2:91:9f:ac:af:
63:2a:9d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:13 2026 by rpki-client