Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F70F8A7D6411F19A996BCCCE1D38B0.roa
File: 53F70F8A7D6411F19A996BCCCE1D38B0.roa (raw, json)
Hash identifier: 5nOgwEDppFdH1DjDlf9aPpHXXAEV2Dmn9r3U3aHxD+c=
Subject key identifier: 4A:6D:B1:19:06:D7:D6:10:46:81:C9:61:1F:9E:21:26:16:63:E3:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C48F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F70F8A7D6411F19A996BCCCE1D38B0.roa
Signing time: Sat 11 Jul 2026 20:08:49 +0000
ROA not before: Sat 11 Jul 2026 20:08:43 +0000
ROA not after: Thu 20 Aug 2026 20:08:43 +0000
asID: 214413
IP address blocks: 156.226.131.0/24 maxlen: 24
156.226.132.0/24 maxlen: 24
156.226.218.0/23 maxlen: 24
156.226.243.0/24 maxlen: 24
156.226.244.0/24 maxlen: 24
156.243.113.0/24 maxlen: 24
156.243.114.0/24 maxlen: 24
156.252.30.0/23 maxlen: 24
156.255.59.0/24 maxlen: 24
156.255.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115855 (0x1c48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 20:08:43 2026 GMT
Not After : Aug 20 20:08:43 2026 GMT
Subject: CN=6a52a2d1-dc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:e0:0e:97:c9:e8:29:d9:09:49:0e:e8:e0:
84:b1:3b:db:29:9f:f0:37:ae:3d:78:e3:1d:4b:3a:
9f:64:e1:91:57:b8:be:a0:90:5f:2d:64:de:b1:26:
82:c9:36:a6:52:69:f1:0b:12:bb:ca:97:c0:8a:d3:
25:51:1f:ff:5b:0f:0b:1c:b9:a2:17:09:ee:40:af:
19:c5:85:39:30:4b:16:91:0b:8c:c6:a4:b0:75:54:
dd:01:96:11:cd:82:17:9c:06:9c:79:cc:d0:bb:9c:
4a:db:64:d6:ef:a4:fd:8e:b3:41:d2:9f:d1:44:e8:
99:de:0d:53:15:05:4c:48:e9:85:d5:2e:76:43:a5:
dd:fb:99:e8:1f:2a:3c:63:82:03:07:96:fc:21:cd:
b7:6e:60:bc:c4:d3:21:67:f3:46:83:3f:41:6d:ba:
18:09:f1:43:0e:2e:c0:b8:c0:82:36:3e:f8:dd:e2:
b2:e3:b4:f5:ee:24:ea:6d:28:ea:8e:60:5f:1b:a5:
a2:8e:60:d9:de:0e:07:7a:28:30:02:86:82:70:aa:
ab:d3:05:f3:dd:32:60:65:f3:a2:64:cd:ce:e9:6e:
ef:a8:81:c9:78:a9:7d:75:1a:8b:5b:25:19:88:c2:
02:f0:c4:14:39:72:af:62:2a:71:14:17:0a:0f:fa:
ff:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6D:B1:19:06:D7:D6:10:46:81:C9:61:1F:9E:21:26:16:63:E3:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53F70F8A7D6411F19A996BCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.131.0-156.226.132.255
156.226.218.0/23
156.226.243.0-156.226.244.255
156.243.113.0-156.243.114.255
156.252.30.0/23
156.255.59.0-156.255.60.255
Signature Algorithm: sha256WithRSAEncryption
15:d7:09:43:26:9b:2a:01:e2:5a:75:cf:59:17:5b:03:b2:9e:
95:6d:6f:f7:ed:87:d6:06:3f:87:a1:fb:6d:7e:94:d7:90:55:
1f:5b:c2:93:b9:cc:3e:b0:b1:8c:e0:2d:94:cb:76:00:7d:33:
6a:db:6a:8e:8b:ca:8a:e2:df:47:4e:a3:90:dd:43:dc:35:10:
37:b9:78:a9:97:95:5b:ac:1f:12:cf:64:02:9d:3a:c6:6c:1d:
09:61:0d:e2:28:ca:65:5d:fa:17:f2:67:60:34:ab:43:9f:ff:
5c:40:70:09:fd:a6:05:c1:19:f0:c9:bb:e1:80:fb:94:40:ed:
81:f3:68:9d:b7:af:b9:e9:c1:6b:20:77:5b:a8:1e:99:42:ce:
a4:70:9b:00:bf:e7:9f:9b:11:b0:8d:bd:a2:7b:3e:04:fe:9e:
09:62:54:db:64:75:ce:56:20:18:5a:b2:33:5d:71:35:e0:13:
a0:bf:3b:fd:9f:52:ca:05:10:74:dd:89:3f:6a:58:7c:b1:31:
0f:f4:2b:18:e7:18:23:2e:c8:67:5e:a7:28:39:44:52:00:a5:
4e:82:7c:8a:95:0f:18:67:19:5e:28:84:07:52:d3:87:ae:b1:
6a:ce:18:60:ad:6d:bd:6b:8c:80:36:7c:7a:06:19:c2:90:8b:
a1:53:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:58 2026 by rpki-client