Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
File: 9031534A370811F19D971511CF1D38B0.roa (raw, json)
Hash identifier: FL+TpyyPtv7/3RayoRQ0rmLGSN3UKId+JgScyK6S4co=
Subject key identifier: 87:7C:12:06:28:23:7D:02:5D:B3:18:0E:32:D2:77:62:BC:AB:4E:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
Signing time: Mon 13 Apr 2026 07:15:35 +0000
ROA not before: Mon 13 Apr 2026 07:15:30 +0000
ROA not after: Mon 20 Apr 2026 07:15:30 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.240.128.0/18 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109622 (0x1ac36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 07:15:30 2026 GMT
Not After : Apr 20 07:15:30 2026 GMT
Subject: CN=69dc9817-34d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:71:74:9f:34:c0:6d:17:2d:4e:47:99:8d:83:
c8:e7:d8:d7:ae:57:fa:62:79:c7:dd:b5:0c:61:26:
6e:89:82:8a:09:4e:0b:3f:a6:b8:b7:3e:b9:6d:9d:
29:3c:e9:96:80:f9:24:9e:cc:db:5f:12:1d:6a:9f:
a2:67:83:9a:cf:b7:2d:99:44:26:e7:52:83:6c:fe:
91:f1:b4:86:8b:0d:38:0b:c4:6e:bd:28:e1:5c:04:
fa:1e:92:35:70:ce:5e:bd:9f:bd:78:0d:17:58:bc:
f0:44:bc:ec:0e:90:f9:77:29:8a:99:73:6e:29:65:
70:fd:d1:d9:4f:cc:49:81:30:0b:61:da:55:32:73:
28:82:23:4d:a0:65:cf:7b:7e:4d:44:78:0d:f8:8f:
6c:7c:21:c9:1d:5c:41:79:0f:f5:aa:36:f8:28:95:
f4:a4:8b:3b:fc:98:4d:bb:7a:d0:44:07:b0:d4:ab:
22:d6:db:47:2e:69:a7:cf:b6:cb:42:d3:f8:5f:06:
5a:d1:44:65:d7:13:02:64:54:57:5c:8e:da:a3:53:
d3:b1:70:27:45:5a:8c:48:82:d8:0c:eb:6a:9d:4f:
b6:e5:40:b1:a8:2a:2c:0c:c7:e2:bf:69:eb:b5:0a:
f3:85:04:ed:1f:d8:b6:4d:1b:7b:b3:7e:71:0a:1b:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:12:06:28:23:7D:02:5D:B3:18:0E:32:D2:77:62:BC:AB:4E:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9031534A370811F19D971511CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
156.240.128.0/18
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:25:8b:60:e8:44:ba:71:76:33:c7:68:d6:9f:54:e7:21:39:
b7:6b:b2:12:83:e0:7a:94:a3:47:7f:6b:63:21:62:02:97:71:
71:54:2c:ed:1a:d5:04:4a:63:fc:42:c1:6b:18:8b:19:74:2d:
80:c2:d5:d6:6e:83:0e:8f:8f:5f:de:1f:f1:09:0a:4b:04:6c:
c2:3b:a6:92:0c:5e:81:41:e6:da:32:28:46:02:a4:4f:e8:24:
50:cf:85:d0:37:85:2c:8d:70:2b:bb:f3:34:96:60:a0:94:76:
d4:fa:cb:ea:da:42:5d:70:bd:ec:76:5a:ae:97:3b:d6:6a:d1:
7f:92:0a:44:0f:33:56:f2:3b:16:e0:f8:66:39:3c:0d:46:75:
c9:40:b2:43:0c:47:1c:41:74:4b:1a:0d:d2:c9:96:cd:5a:c2:
ba:b2:a6:6d:06:a1:90:77:52:40:12:c9:9c:2f:6d:bf:3d:4c:
15:e0:8c:b5:9f:15:22:c3:e8:2d:81:72:55:48:cf:b5:d8:ca:
8c:50:27:72:d0:92:b9:60:33:96:d1:df:2c:fb:11:38:92:e0:
2a:8b:1a:2f:ce:8f:76:11:29:ac:13:89:80:71:f1:c4:ae:00:
e7:a6:17:e3:07:2a:1e:99:be:a3:3d:29:fd:f5:68:53:24:f4:
c4:4e:f2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:55 2026 by rpki-client