Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52907D966A8811F1ABADE2AACE1D38B0.roa
File: 52907D966A8811F1ABADE2AACE1D38B0.roa (raw, json)
Hash identifier: L0443H/J5Z8+tltjiaXZn+yDq+gH/Je9T5MUNa8NND4=
Subject key identifier: 11:ED:E4:DF:FC:88:F8:3D:A8:68:A9:27:B0:86:A2:89:A6:E4:FE:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52907D966A8811F1ABADE2AACE1D38B0.roa
Signing time: Wed 17 Jun 2026 20:08:36 +0000
ROA not before: Wed 17 Jun 2026 20:08:30 +0000
ROA not after: Fri 24 Jul 2026 20:08:30 +0000
asID: 134365
IP address blocks: 156.239.52.0/23 maxlen: 24
156.239.52.0/24 maxlen: 24
156.239.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114403 (0x1bee3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 20:08:30 2026 GMT
Not After : Jul 24 20:08:30 2026 GMT
Subject: CN=6a32fec4-3336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:b8:cf:d9:1f:c1:6e:4c:49:ea:8a:27:e8:
75:b8:b9:41:33:07:73:63:99:e8:e3:d3:38:71:6b:
4d:4a:d4:e6:f8:9b:57:37:b7:e0:b5:9c:a1:6b:d7:
60:bf:53:86:7b:24:9f:97:16:66:f7:36:02:ef:e2:
f1:14:cb:f1:f5:5a:3d:ea:59:cb:1f:25:55:84:3f:
3f:5d:8f:88:15:9e:e8:a1:ea:86:9e:17:8e:00:5f:
2c:82:b1:17:dd:11:7e:5d:e4:22:54:0a:26:1e:6c:
10:e6:8b:06:95:ef:60:29:bd:44:0f:42:c5:18:14:
69:dd:93:5a:7a:18:56:89:11:f2:b1:5b:b5:d6:01:
c3:90:b3:d7:65:42:63:46:15:e5:a8:3e:e6:b2:ba:
2e:db:f4:85:af:12:ac:a7:86:e9:7e:37:91:6f:23:
08:ea:e5:77:32:cf:fb:29:ff:fa:57:8a:91:87:34:
89:ae:a4:e3:a1:6d:85:4b:fc:d5:e7:23:78:7a:5f:
87:db:d6:a8:97:48:80:01:93:f1:05:96:d8:6b:20:
ee:9a:e5:d2:56:7b:dd:0a:25:ef:10:df:83:14:db:
7d:ca:f0:d5:f6:31:96:6b:57:fc:b7:e0:08:43:2b:
b6:9f:e7:06:0e:be:e2:e3:6e:e2:09:b4:00:e3:b6:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:E4:DF:FC:88:F8:3D:A8:68:A9:27:B0:86:A2:89:A6:E4:FE:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52907D966A8811F1ABADE2AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:1c:70:b2:23:24:63:91:15:ef:41:b3:9a:0f:25:ad:90:c9:
05:ae:32:96:80:bc:c4:57:25:f6:1f:46:f7:9f:8c:ac:c4:d3:
02:74:b1:6a:de:72:31:a7:97:7b:94:3f:67:55:2e:07:1c:dc:
30:22:00:84:af:c0:2f:e9:01:ce:b6:cd:f7:9c:cd:c4:30:a4:
92:d8:f9:98:7c:93:4d:42:ba:bd:84:ab:2d:4a:30:af:21:df:
10:b8:81:d9:eb:76:0c:27:ed:ab:d8:f0:0a:22:97:74:12:c0:
d0:da:d9:4c:ac:99:9e:41:f0:aa:f8:19:01:dd:a2:2e:af:f6:
5f:10:31:68:10:f1:8d:e2:48:8a:3f:ef:19:2d:93:07:33:bd:
8b:a9:61:65:4a:f8:69:88:cc:8a:be:b9:1c:21:05:cf:78:c7:
56:00:96:d9:b0:e6:c9:48:b8:95:2b:73:5e:21:7e:26:a7:9e:
55:29:e2:a7:6d:b4:d7:32:43:09:1d:ab:14:be:2f:a5:4f:c0:
b6:a8:a7:6d:b1:be:38:5b:1f:a6:32:e0:da:94:27:02:d5:72:
b8:25:5c:ee:5c:c6:7c:0b:03:68:63:35:a7:a1:51:ea:f1:ca:
df:c0:81:b7:e7:b2:2f:c7:0f:35:80:57:7c:83:62:29:94:0c:
16:07:09:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client