Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B8A10C34EF11F18D8A32B4CE1D38B0.roa
File: D2B8A10C34EF11F18D8A32B4CE1D38B0.roa (raw, json)
Hash identifier: qFZSG/N6Ty97WSXH/pwkFxVibbMBVIRPGRdffy2QZIM=
Subject key identifier: 81:D2:62:FF:00:0A:E0:73:6C:C8:47:6D:85:6F:7A:8B:8E:B4:80:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B8A10C34EF11F18D8A32B4CE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:13:27 +0000
ROA not before: Fri 10 Apr 2026 15:13:22 +0000
ROA not after: Sun 10 May 2026 15:13:22 +0000
asID: 54801
IP address blocks: 156.225.76.0/22 maxlen: 24
156.238.120.0/21 maxlen: 24
156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.204.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109508 (0x1abc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 15:13:22 2026 GMT
Not After : May 10 15:13:22 2026 GMT
Subject: CN=69d91396-aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:74:9f:30:37:9c:c3:fa:50:d6:3a:69:70:
dd:c7:70:c5:18:50:e7:ca:28:69:79:5a:06:b4:b8:
c9:03:76:52:9c:1e:3c:97:a6:a8:c3:54:6d:71:5d:
24:90:22:a6:fc:81:7e:19:6c:75:73:6d:bc:ba:ca:
ca:9a:24:33:cf:98:e4:75:e2:13:b3:71:68:53:25:
c2:68:3a:9c:b1:23:da:92:7b:81:2a:e7:b0:23:24:
8c:7b:14:7c:5c:b8:7a:8f:2f:00:76:d3:2c:fc:0a:
ca:d9:74:b3:a4:4f:4d:46:76:1f:7d:e0:f5:3d:b5:
df:6c:8d:d3:37:d3:c1:4d:52:30:3b:ea:c6:fc:45:
5e:72:ed:28:44:80:fb:91:0b:58:27:28:0f:57:2b:
5f:81:9a:c2:70:f9:7b:da:9d:fc:89:79:41:9e:6f:
1f:f8:83:d6:4f:d2:33:a3:09:dc:d9:fc:4c:3d:07:
b1:97:f5:01:a8:be:91:01:25:ee:f5:68:fb:aa:9e:
50:88:a4:51:62:79:8a:1c:01:7b:70:57:2e:41:9e:
d6:7e:21:f3:33:26:8c:2a:37:ee:5d:72:73:34:60:
f8:87:7f:7f:a5:d8:cb:93:65:8f:34:3b:31:62:0a:
7d:5f:42:0f:6a:37:f6:e3:0a:27:1e:21:4e:d0:ae:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:62:FF:00:0A:E0:73:6C:C8:47:6D:85:6F:7A:8B:8E:B4:80:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2B8A10C34EF11F18D8A32B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.245.144.0/22
156.245.204.0/22
156.245.232.0/21
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0e:e1:e1:6a:91:b7:8b:a2:20:0a:b7:ef:b5:54:93:9f:8f:
28:82:c3:4e:4b:af:ae:9f:c0:aa:b2:96:41:ed:4e:5d:24:32:
c2:2a:e8:96:33:de:e8:f6:21:b6:ea:2f:e9:2b:74:6b:8d:3a:
6a:ca:f5:48:d2:fd:d2:7b:87:30:8d:84:e5:39:96:63:2c:a8:
e3:54:f7:17:c3:84:07:d6:0d:17:94:f0:3e:d7:be:3f:b3:b6:
cb:af:de:6f:ea:2b:71:2f:89:bb:61:73:e3:2d:23:82:d9:10:
22:97:be:8a:69:a4:67:d2:06:98:2a:19:3f:29:1f:67:11:6a:
6b:08:1e:47:39:67:58:b8:9e:05:04:fc:4b:1c:57:d4:8f:d4:
01:93:3f:56:e2:80:ed:e5:1b:7c:93:f0:f2:6f:64:c3:ae:12:
fc:e9:90:2a:c3:6d:d1:a8:54:51:3a:0d:c8:9e:12:f5:1d:e2:
4e:a6:c1:77:92:d4:c5:8a:ce:de:9a:d3:75:01:33:a2:4b:85:
2e:de:51:a2:a5:e9:c0:ab:0e:08:88:df:f9:04:6e:58:c7:50:
ba:e1:b6:bc:aa:7e:65:f5:fb:54:da:52:e7:9b:21:13:2d:e4:
dc:a9:7b:ca:b7:ed:f0:9b:63:eb:40:85:66:3b:74:63:bd:58:
68:a0:3d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:52:17 2026 by rpki-client