Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53EA96C652C911F18EA656C1CE1D38B0.roa
File: 53EA96C652C911F18EA656C1CE1D38B0.roa (raw, json)
Hash identifier: nn1QtAW+ehiQh18DmCiO10n5CBt5DVThx/pd2VasOdE=
Subject key identifier: 4F:37:72:53:5A:69:C2:42:D6:87:B6:5A:D1:58:DA:FF:44:A0:97:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B57C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53EA96C652C911F18EA656C1CE1D38B0.roa
Signing time: Mon 18 May 2026 14:53:28 +0000
ROA not before: Mon 18 May 2026 14:53:22 +0000
ROA not after: Sat 08 Aug 2026 14:53:22 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111996 (0x1b57c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 18 14:53:22 2026 GMT
Not After : Aug 8 14:53:22 2026 GMT
Subject: CN=6a0b27e8-2d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:85:84:ce:3c:fc:be:23:b9:4f:25:48:1d:
1b:d1:7c:13:a9:9a:77:69:ec:18:25:8d:76:73:c9:
1d:7c:05:01:79:b1:c0:ff:c3:66:cd:66:5c:d8:c5:
17:71:f0:f2:e8:5f:81:51:33:46:d6:a1:f6:d0:26:
37:b0:c7:e5:86:71:f5:03:05:7f:80:13:6d:f4:e3:
c4:15:73:de:3b:d1:92:2c:ec:f0:ef:47:5c:93:b9:
a5:20:de:06:93:eb:ea:21:bf:c3:19:ea:3b:ae:85:
b2:bf:02:ae:2c:eb:00:77:35:7a:e7:ce:c9:42:0a:
fe:b4:38:97:12:53:0f:f2:fe:c4:30:0e:d0:f7:34:
68:8a:25:5b:d9:e1:01:2c:89:b4:e8:60:3e:24:b3:
c4:96:8d:2c:8f:1d:f4:7f:4e:38:0d:e1:ba:61:a3:
a5:2b:a8:af:7f:4e:69:4c:bf:8f:16:ec:6b:47:3f:
fe:d6:d4:c1:09:48:0e:e6:81:5d:25:03:ad:bc:a8:
a4:df:ab:74:02:0b:e7:e9:3d:58:81:80:7e:c2:a7:
aa:c1:c5:23:0b:49:01:7a:24:78:49:17:c6:52:9d:
06:56:53:42:6c:bb:5d:1a:32:ba:45:79:3b:1d:3b:
41:4b:49:69:65:23:92:9c:36:00:4b:18:2c:8f:6a:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:37:72:53:5A:69:C2:42:D6:87:B6:5A:D1:58:DA:FF:44:A0:97:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53EA96C652C911F18EA656C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
14:31:52:e3:02:90:a6:17:7b:80:e9:9e:c6:65:e8:56:04:0a:
81:47:2e:d4:77:0a:13:b5:5f:95:52:a7:0e:57:dd:49:bf:47:
8b:46:c1:cc:31:33:ec:8f:36:86:02:a0:f1:f8:e9:33:63:b6:
1a:6b:5a:81:5b:de:49:73:43:29:6b:c8:d5:e9:48:81:06:7b:
d8:93:4b:54:14:19:21:11:9d:62:f0:e4:f0:8e:8b:25:80:3c:
7a:c8:f9:51:d0:31:8d:49:a5:b1:ec:14:2c:55:fb:04:d5:78:
bd:22:b2:a3:fe:62:bc:4a:1b:39:9a:42:bc:aa:dd:af:4c:c5:
cd:9a:3a:58:f6:28:19:96:bc:46:75:91:f6:0d:5b:c9:df:3c:
0c:20:d7:8e:f9:66:a7:7c:06:83:65:88:45:19:e4:0a:c9:03:
f4:e4:82:25:3b:f0:67:95:86:89:93:d8:d7:56:bc:c5:59:7b:
97:ae:56:ab:b5:27:15:22:a6:42:c5:a5:02:b8:21:f4:f2:b8:
eb:ce:a1:9d:c1:eb:87:bc:7e:de:ce:b0:20:3d:79:c3:86:07:
cd:45:dc:ad:49:78:9c:16:d3:ea:0a:03:13:3e:56:0e:51:cb:
8a:b9:88:26:f3:49:1a:77:d7:a3:c9:a6:c8:9b:32:e1:bf:af:
71:72:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:35 2026 by rpki-client