Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69030E370F11F18B31CBBDCE1D38B0.roa
File: CE69030E370F11F18B31CBBDCE1D38B0.roa (raw, json)
Hash identifier: S2c0nKmYE87LTBvniTtP+bebkXyaBa6S3B8kwwFRWn0=
Subject key identifier: F4:2D:D8:6A:4C:72:26:B0:41:89:7F:CF:5E:50:A2:32:D9:14:1A:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69030E370F11F18B31CBBDCE1D38B0.roa
Signing time: Mon 13 Apr 2026 08:07:26 +0000
ROA not before: Mon 13 Apr 2026 08:07:20 +0000
ROA not after: Sat 16 May 2026 08:07:20 +0000
asID: 22773
IP address blocks: 156.242.19.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109642 (0x1ac4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 08:07:20 2026 GMT
Not After : May 16 08:07:20 2026 GMT
Subject: CN=69dca43d-09fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:09:51:be:de:84:54:e2:f9:6c:59:76:2c:
59:5b:f7:e9:c4:23:8a:6e:8b:58:41:63:b1:86:d4:
03:e5:b2:07:6d:c4:ad:da:78:d5:e5:1e:67:9a:5a:
3d:bf:60:78:88:77:19:74:dd:54:54:cd:3a:f4:5b:
57:8b:86:1d:01:db:37:6f:f6:c2:b2:d1:a0:66:af:
eb:83:dc:1c:44:92:9f:38:35:ce:04:92:50:a2:44:
11:71:2f:5a:a4:c7:d5:ae:03:4e:03:e5:28:af:91:
a5:9d:2b:49:2b:7b:81:69:c0:8d:ef:0e:ce:41:81:
25:10:46:e6:bc:0d:46:f1:16:41:0f:8d:b1:dc:8e:
95:9a:8e:d7:5d:c1:df:ce:23:71:f8:7c:8f:e4:e6:
d8:4d:a9:04:26:d3:72:5f:a5:7a:fd:e5:f6:b9:74:
0f:d6:5b:cf:67:c4:95:d5:2f:20:c5:4f:fd:9a:36:
cb:00:e0:dd:37:ab:07:35:1e:76:a1:37:89:46:96:
a7:32:b4:61:09:5b:5c:90:63:3c:69:ab:d1:e9:d6:
93:05:67:d7:8c:1f:c7:30:d3:4a:96:3a:3a:28:45:
cd:9f:bf:56:7c:2a:90:ce:39:e7:ca:35:cf:88:f2:
06:30:07:59:4e:4a:17:ec:95:56:71:a2:3b:07:5c:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:2D:D8:6A:4C:72:26:B0:41:89:7F:CF:5E:50:A2:32:D9:14:1A:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE69030E370F11F18B31CBBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.19.0/24
156.242.234.0-156.242.240.255
156.243.115.0/24
156.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:11:eb:63:0f:2c:02:0d:e0:33:db:27:5c:01:6e:b7:06:92:
c1:00:49:6e:f1:45:12:e3:68:1b:e9:49:7a:07:2b:b8:51:4a:
69:5b:db:47:55:ab:dc:fa:95:a0:98:ab:6d:50:08:c5:84:c7:
38:7c:17:28:9a:4c:26:5a:e1:02:8f:b0:9e:cc:c8:9e:73:b4:
f5:1f:b5:e6:b8:90:ad:77:3d:4a:4d:1e:a7:dc:99:96:98:32:
8a:7e:18:d0:eb:5f:b7:c5:b2:b7:26:62:1b:03:d1:08:76:d7:
b2:3a:4f:82:8f:57:ea:ab:45:00:0a:56:80:1e:18:a3:f1:35:
81:60:98:13:cc:bc:f1:75:c5:73:5d:9d:12:50:66:52:47:7c:
76:07:4a:62:6c:09:48:61:b6:04:15:fe:a8:77:f9:95:3a:1b:
60:02:1f:a8:60:51:8e:10:c6:48:85:26:95:b4:4b:cd:58:d8:
ee:f6:67:47:28:56:f1:4b:c6:b8:d2:ea:de:75:fb:2b:5d:dd:
f9:f6:0c:ab:82:4a:21:7a:bf:d6:ce:23:ee:ee:1f:53:6f:38:
b3:4b:31:95:3e:83:f5:39:c4:99:5e:f1:a2:db:66:95:e0:54:
cd:28:57:74:19:d0:06:66:2c:1f:19:9f:13:f9:37:c6:b1:52:
a3:01:b4:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:40 2026 by rpki-client