Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5A5B06A318911F1A4A2F2D7DAE4EC9C.roa
File: F5A5B06A318911F1A4A2F2D7DAE4EC9C.roa (raw, json)
Hash identifier: qALBsPtiGFWQBh2/CEWsto4l1GnAOzw0kubEWJu6k1A=
Subject key identifier: C0:AA:C5:46:2C:4B:E7:3E:EF:0F:05:69:E5:DF:73:37:EE:49:C4:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5A5B06A318911F1A4A2F2D7DAE4EC9C.roa
Signing time: Mon 06 Apr 2026 07:26:43 +0000
ROA not before: Mon 06 Apr 2026 07:26:38 +0000
ROA not after: Fri 06 Apr 2029 07:26:38 +0000
asID: 17561
IP address blocks: 156.229.60.0/24 maxlen: 24
156.233.54.0/24 maxlen: 24
156.233.69.0/24 maxlen: 24
156.233.70.0/24 maxlen: 24
156.233.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109182 (0x1aa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 07:26:38 2026 GMT
Not After : Apr 6 07:26:38 2029 GMT
Subject: CN=69d36033-e52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:fb:19:de:86:73:b8:43:84:ef:0d:e2:98:
1b:ff:3a:77:34:9f:a5:48:d7:93:70:a7:60:4f:e5:
48:53:5a:20:3f:1c:ba:f7:18:a4:8b:41:19:a9:ba:
fc:69:32:f4:2d:1d:ef:10:27:aa:24:49:f8:15:45:
5f:9e:ea:05:73:57:9a:01:ec:08:55:8d:49:9f:e8:
4d:da:c8:ef:42:74:aa:53:e4:4b:d1:37:3b:7d:3f:
0c:78:37:ed:df:17:83:da:1a:e0:c6:d4:e8:01:1d:
67:aa:d1:0d:18:73:37:65:a9:13:33:5c:c9:de:c8:
be:d1:54:9c:61:aa:d5:fc:b6:93:20:4e:05:ae:d0:
85:46:f1:a0:3d:30:6a:9d:b9:3f:ac:3f:70:c7:1c:
09:8c:b7:9b:2e:4c:1c:09:ca:fe:da:46:f3:7e:bd:
66:14:d5:c6:23:e1:b0:6c:8f:6a:fa:ff:72:c6:28:
c7:a7:86:0e:3c:30:82:c8:45:ae:ea:dc:b1:9f:f1:
ee:e8:2d:ea:4b:93:ff:cd:cd:26:b2:61:29:1f:a5:
46:1c:c9:c4:e6:5a:66:4f:a5:92:55:9f:f9:62:5f:
46:3e:ed:2e:8c:92:e1:69:a5:a8:2a:c0:55:0f:71:
db:4f:5d:3f:d4:89:0b:f4:fc:7c:f4:e0:69:4d:53:
db:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AA:C5:46:2C:4B:E7:3E:EF:0F:05:69:E5:DF:73:37:EE:49:C4:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5A5B06A318911F1A4A2F2D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
156.233.54.0/24
156.233.69.0-156.233.70.255
156.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4d:c3:65:8a:2e:54:92:1e:bc:fd:bf:c6:a9:9c:0b:7c:ad:
d1:1f:a3:70:f6:96:1b:51:d6:fe:cf:18:b8:2d:6f:0a:01:e2:
0b:5b:4a:c1:b5:09:ee:e0:32:4b:5a:12:6d:0a:55:68:ff:bb:
bd:0e:cf:8b:91:13:b7:a3:c8:c1:e2:8a:a1:15:73:5a:80:6c:
75:64:eb:5d:a3:1e:32:94:5d:61:5e:1a:15:f7:eb:a8:78:f5:
8b:2b:fa:c9:a9:7e:4d:1a:d1:ee:16:b8:dc:da:fa:5c:27:93:
ce:3b:9c:ec:fd:8c:fe:c3:ff:16:fc:2b:fa:ef:6a:ae:d4:e7:
ee:05:9b:fe:a1:ed:a6:18:a2:15:bb:c4:db:7c:f3:be:3c:a5:
a4:87:8e:84:25:f5:ec:7a:6d:4c:4b:ff:8d:0a:bf:08:f7:25:
e4:b8:dd:d7:a4:61:b3:a5:ac:fc:1f:bc:44:62:1e:73:57:9a:
86:bc:e6:7c:77:3b:fb:a5:d9:db:85:84:5a:f6:f7:fc:2f:dc:
ea:79:14:e8:36:fc:72:aa:74:8d:9a:93:ef:63:ab:87:a0:4d:
01:a3:8c:35:41:a9:a4:e7:d8:39:c0:70:cc:74:7c:c7:5e:0a:
7e:5a:13:3d:08:89:34:56:f9:88:74:1e:50:01:d1:8f:7e:6c:
e8:24:c8:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:37 2026 by rpki-client