Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81539E12370A11F1A48D581BCF1D38B0.roa
File: 81539E12370A11F1A48D581BCF1D38B0.roa (raw, json)
Hash identifier: op/ZbuuzHGVerWknF3e62ZawwX1mYrw+zroQJCi8syo=
Subject key identifier: 5C:94:E6:72:EF:47:26:19:29:BA:DC:80:52:28:23:9A:A2:F5:FF:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC3C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81539E12370A11F1A48D581BCF1D38B0.roa
Signing time: Mon 13 Apr 2026 07:29:29 +0000
ROA not before: Mon 13 Apr 2026 07:29:24 +0000
ROA not after: Sat 16 May 2026 07:29:24 +0000
asID: 22773
IP address blocks: 156.242.49.0/24 maxlen: 24
156.242.50.0/24 maxlen: 24
156.242.52.0/24 maxlen: 24
156.242.53.0/24 maxlen: 24
156.242.225.0/24 maxlen: 24
156.242.226.0/24 maxlen: 24
156.242.227.0/24 maxlen: 24
156.242.228.0/24 maxlen: 24
156.242.229.0/24 maxlen: 24
156.242.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109628 (0x1ac3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 07:29:24 2026 GMT
Not After : May 16 07:29:24 2026 GMT
Subject: CN=69dc9b59-9111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:c5:9c:f4:37:77:d3:03:1e:18:d5:28:5d:
26:c3:d6:f1:5b:d9:74:57:ae:bd:ae:41:77:dc:91:
00:0b:1a:fe:61:d7:6b:c0:e8:18:17:da:0d:0d:63:
53:ad:c5:8a:15:7a:72:5b:89:09:13:30:d5:e5:78:
78:6b:72:80:4e:5e:d5:b6:8d:4b:70:76:79:07:28:
31:a7:5d:27:52:5e:41:fe:91:15:fc:31:41:40:fb:
7e:1e:85:14:6c:f6:2d:d9:d4:88:9f:15:7f:d4:2b:
91:e3:43:de:9f:15:ef:4c:ce:70:1d:34:c4:63:d6:
82:db:43:1c:f8:f3:85:fa:21:40:df:f8:b0:56:74:
30:b8:45:32:49:44:f5:f5:43:2d:10:90:88:87:03:
0a:67:39:9e:66:ad:b4:24:4e:18:1c:b7:e3:b9:d9:
66:c6:1b:5a:fb:74:9a:fc:b7:8d:5f:9b:4c:78:8c:
87:78:e4:81:07:c6:11:a8:a7:89:f8:38:9f:97:f4:
cb:b2:39:7d:10:f4:12:22:a0:b2:71:14:e0:bd:0c:
82:7e:31:92:c6:32:3f:ea:93:ad:ca:2c:d6:00:c4:
da:14:d6:b7:2b:49:3b:43:cb:35:80:39:88:ef:5e:
a8:e1:36:86:c4:2a:5f:87:3f:10:fe:7b:5a:04:77:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:94:E6:72:EF:47:26:19:29:BA:DC:80:52:28:23:9A:A2:F5:FF:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81539E12370A11F1A48D581BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.49.0-156.242.50.255
156.242.52.0/23
156.242.225.0-156.242.230.255
Signature Algorithm: sha256WithRSAEncryption
8b:bb:dc:3b:5d:8e:08:95:f4:1b:60:a9:90:c9:c1:f5:6f:52:
4c:4e:e7:02:6c:5c:51:d8:9d:12:ca:3f:40:bd:e0:1b:d2:64:
b4:47:f0:77:53:49:f1:fb:a3:fb:8a:1a:5f:47:e4:40:2c:9d:
e2:f4:46:f2:b0:0b:6b:d3:45:c9:cf:4f:4f:0c:8a:09:9f:79:
af:5a:28:9d:60:b2:bf:c4:b2:20:25:d5:61:d8:a0:dc:0b:8e:
4a:b2:b4:83:9d:5e:7c:21:1f:08:49:e2:11:4a:a5:32:95:98:
aa:cf:ac:f2:fd:d4:0a:7b:e0:05:ce:ca:53:4c:a8:5f:b7:53:
51:7f:ba:0d:48:c3:37:f2:c3:ac:8c:4f:18:1f:d4:58:d7:fe:
32:e8:3a:ef:91:5a:81:c5:7a:1c:a2:be:8e:21:8f:f9:3d:0b:
2f:6e:1c:63:80:fc:18:bf:52:05:2a:bd:0d:8e:aa:a0:f5:97:
c3:ac:67:58:c4:e6:b3:ca:97:8c:c6:11:3a:cf:cf:5e:fd:a8:
2e:56:f4:17:36:6d:be:48:74:30:66:6f:18:0c:f2:4c:52:7a:
e9:89:31:0c:0f:94:7f:52:49:05:70:a5:0a:e2:cc:a7:49:cb:
9b:17:4f:20:d2:42:6a:8a:8b:da:5e:90:ad:c2:46:28:84:81:
d7:25:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:57 2026 by rpki-client