Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E7423042CD11F181F47015CF1D38B0.roa
File: 57E7423042CD11F181F47015CF1D38B0.roa (raw, json)
Hash identifier: Q22yFirwT8AkkYlBT7LWDsY2i1nqPLXqaxdbrhtjlCw=
Subject key identifier: 31:AC:F0:10:20:7B:C4:8E:2F:57:44:84:8C:83:D0:2E:4B:00:DA:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E7423042CD11F181F47015CF1D38B0.roa
Signing time: Tue 28 Apr 2026 06:41:54 +0000
ROA not before: Tue 28 Apr 2026 06:41:49 +0000
ROA not after: Fri 05 Jun 2026 06:41:49 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 15:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110472 (0x1af88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 06:41:49 2026 GMT
Not After : Jun 5 06:41:49 2026 GMT
Subject: CN=69f056b2-3929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:f6:ed:43:4b:29:e8:d5:08:1a:66:54:c3:
50:fd:b1:3d:cc:a3:66:4a:e0:5a:c1:96:71:30:d4:
88:28:be:0f:16:8e:d2:ac:65:31:48:7e:7f:29:67:
47:c6:6b:7f:c5:aa:f0:ee:2a:54:bd:a4:6f:04:6a:
62:b2:d0:00:4d:ea:c0:a6:49:fd:e7:0f:c7:7c:94:
25:1c:7b:bb:d5:fb:84:6b:85:28:c8:68:4a:bf:58:
b8:a8:0d:cf:56:4b:72:f4:94:03:7c:c6:f3:e5:bc:
d7:6b:c9:39:60:b0:2a:ef:ad:cb:3f:92:30:58:13:
07:60:e2:39:f2:fe:4a:43:89:8f:e5:00:4e:97:f0:
ce:94:2d:d3:79:57:37:8c:77:9c:96:8c:a1:6f:30:
8f:fb:8d:ba:8c:c0:ef:82:36:e5:92:1d:fd:1d:62:
f9:3e:cd:68:2b:34:83:8e:62:05:8b:d9:0e:ee:02:
18:ae:00:42:39:89:69:19:53:96:a3:e7:d3:c3:c8:
b2:94:2f:48:e4:28:df:3a:f4:9a:b5:2c:0b:89:46:
66:4c:e8:12:4e:dd:f3:36:e6:a0:55:eb:b0:21:e7:
0f:40:e8:3f:0f:20:e2:33:b9:ca:1d:75:d9:cd:d6:
b8:64:2f:4c:15:86:cb:68:77:7d:dc:fe:a6:aa:10:
48:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AC:F0:10:20:7B:C4:8E:2F:57:44:84:8C:83:D0:2E:4B:00:DA:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57E7423042CD11F181F47015CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
58:b3:2d:4a:de:98:82:75:cc:d9:17:ec:99:76:b5:2e:c0:e3:
03:2b:98:0b:de:e2:9f:68:8e:2b:6e:0d:1e:3a:8f:a1:06:f9:
7f:1b:b7:29:c5:e3:b0:11:de:c6:56:f0:e6:c9:22:88:03:70:
65:d5:6d:2a:f1:09:e2:62:c0:ce:a9:8e:56:0e:fb:49:07:a5:
0c:c8:81:1a:fb:28:ec:42:5a:e7:ae:32:b2:8d:d3:bd:1d:62:
be:6d:5f:32:7b:85:46:33:29:cd:27:f0:0c:40:3d:c2:53:99:
06:60:a4:b2:5f:aa:54:99:8a:78:eb:24:c5:a8:98:39:3b:d7:
90:e3:11:00:d8:78:70:88:9a:a3:cc:c4:38:b8:3e:f8:fe:94:
da:9e:ce:91:f7:7e:f1:ae:ae:80:5e:9c:86:ef:6c:b2:96:53:
83:12:24:d8:e3:0c:ea:39:8b:36:31:62:b8:3d:86:e3:e2:b5:
28:b2:b0:0d:90:2c:3b:10:6e:07:e6:b1:74:31:9c:fe:8b:c7:
ef:a0:e3:34:45:ea:eb:55:0a:0c:84:6b:29:5f:d9:46:49:51:
76:47:61:89:0f:1e:0c:e2:db:a9:d4:2f:c7:65:45:98:e4:2a:
c9:06:9f:d5:25:28:a7:f2:4e:65:a9:59:cc:f5:7c:b3:fc:54:
f5:aa:6c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:43 2026 by rpki-client