Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5309CA8E1F9711F1AAB6367FDAE4EC9C.roa
File: 5309CA8E1F9711F1AAB6367FDAE4EC9C.roa (raw, json)
Hash identifier: R2IPlmthS6g0XShcgMSFNmFQsSiS76kj9Qm51Umg+DY=
Subject key identifier: F5:C0:85:78:B7:B4:4B:82:7E:8B:6D:83:A7:2C:1C:F3:83:DE:A2:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A51C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5309CA8E1F9711F1AAB6367FDAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:17:03 +0000
ROA not before: Sat 14 Mar 2026 11:16:57 +0000
ROA not after: Sun 31 May 2026 11:16:57 +0000
asID: 399077
IP address blocks: 156.240.214.0/24 maxlen: 24
156.240.215.0/24 maxlen: 24
156.240.216.0/24 maxlen: 24
156.240.217.0/24 maxlen: 24
156.240.218.0/24 maxlen: 24
156.240.219.0/24 maxlen: 24
156.240.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107804 (0x1a51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 11:16:57 2026 GMT
Not After : May 31 11:16:57 2026 GMT
Subject: CN=69b543ae-a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:d5:76:46:bc:70:63:a7:33:a3:df:81:39:
37:46:81:b4:e3:60:20:cb:cf:db:de:d0:49:a3:56:
d0:37:eb:5c:59:d6:5b:89:10:af:f3:88:df:a5:32:
49:62:e2:c0:97:21:61:88:03:1d:8b:23:8a:c4:b1:
42:b1:d0:26:5e:29:b5:63:28:9e:82:5d:3c:10:b6:
ee:ea:ec:68:1a:4a:34:5b:b5:d8:19:af:da:f3:c1:
56:2a:75:d2:7a:c7:8b:98:b2:09:e9:b7:6c:a0:85:
08:4f:1c:90:65:39:e1:81:1c:1e:cb:56:5b:99:2e:
7b:84:68:cd:1b:6f:c6:51:0d:0c:0b:2a:2d:9a:ca:
fc:39:84:cf:82:86:2f:40:f3:b5:51:fc:a8:1d:cb:
52:3e:72:3f:69:d5:1b:5c:f4:0e:f7:26:e2:2b:e1:
1c:77:f2:34:d9:ff:40:d4:ec:18:30:4a:1e:04:50:
b3:3b:34:15:c7:5b:74:bd:ff:ef:42:6e:e6:27:32:
1d:7a:74:36:ce:8e:9d:d0:ff:a7:43:47:09:e4:90:
16:46:e2:19:eb:24:3c:95:54:6a:a9:5f:96:d6:63:
3c:d3:e9:81:15:b7:78:36:a8:30:82:af:bf:0b:c1:
31:38:41:0b:42:08:c3:2b:dd:e3:09:11:85:a0:dd:
33:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C0:85:78:B7:B4:4B:82:7E:8B:6D:83:A7:2C:1C:F3:83:DE:A2:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5309CA8E1F9711F1AAB6367FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.214.0-156.240.220.255
Signature Algorithm: sha256WithRSAEncryption
11:e9:82:9b:4d:67:3d:76:31:04:df:80:b0:21:5a:97:3e:28:
5d:26:0e:c2:5f:33:a7:30:a2:08:db:25:91:f9:b6:53:6f:63:
94:d9:ef:24:b7:af:19:ff:ac:aa:a1:77:24:a4:cf:f0:ab:fc:
74:27:aa:c9:e5:3a:ff:e6:33:4a:68:59:26:e5:64:9b:d5:d9:
bd:c8:0c:78:85:ce:58:02:b1:1e:21:5e:e5:9e:b2:98:09:d8:
17:8e:82:fc:91:8d:25:0a:bf:79:3a:95:fb:f9:c8:15:02:36:
04:f8:ec:98:6a:fa:ea:d2:14:35:76:15:bc:ca:ea:68:99:85:
b4:24:74:e6:42:a4:07:49:27:f7:5f:93:44:63:34:48:a1:9d:
87:23:08:1f:38:1a:49:e0:35:5c:36:22:84:79:97:a6:3e:04:
7d:b3:08:80:ec:63:bb:db:47:a2:01:af:c1:85:89:c1:c8:63:
d6:8b:e6:d9:6d:5d:8a:5f:14:c6:fc:20:37:28:fe:dc:ed:36:
d3:1d:5a:5e:12:ec:00:71:44:2b:57:22:8e:38:66:5b:8a:bd:
5b:04:09:48:97:f5:da:fb:1a:2f:92:45:1d:12:24:64:3d:ad:
f1:a2:06:ba:e6:59:79:c1:a3:48:57:fa:a5:9d:c1:6f:fb:02:
ec:68:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:30 2026 by rpki-client