Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA0EE5630DA11F1A3CC3EDBDAE4EC9C.roa
File: ADA0EE5630DA11F1A3CC3EDBDAE4EC9C.roa (raw, json)
Hash identifier: dJvBgW+URteeEyXAC/jZ/CZ5pZvaBe0eY59+afMNMyo=
Subject key identifier: 54:40:D6:41:20:A6:BD:F3:F9:B6:1D:EF:B8:58:1B:32:36:FD:05:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA0EE5630DA11F1A3CC3EDBDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 10:32:00 +0000
ROA not before: Sun 05 Apr 2026 10:31:56 +0000
ROA not after: Sun 03 May 2026 10:31:56 +0000
asID: 213169
IP address blocks: 156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 18 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109098 (0x1aa2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 10:31:56 2026 GMT
Not After : May 3 10:31:56 2026 GMT
Subject: CN=69d23a20-d28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:0e:5c:f4:e9:f4:25:fe:47:35:99:91:2e:
d5:f9:06:ea:77:2f:c8:11:ad:63:03:75:b1:d1:7b:
c0:e2:ea:47:dd:1e:55:3e:70:54:2d:49:9b:b0:59:
ca:a4:d9:a1:b6:cd:b6:a9:76:b8:83:b0:89:f2:c0:
4b:8e:79:60:03:d6:3a:a8:35:0d:ae:6c:2d:ba:9d:
d9:4d:a8:af:da:49:09:58:2c:68:a6:65:19:50:d2:
35:8e:c5:1c:e1:a2:5b:f2:1b:c6:08:1a:57:ee:46:
a1:f2:38:da:eb:54:07:1f:11:1e:09:c2:63:75:00:
59:43:c7:78:d4:9d:71:61:8b:fb:ea:6e:ff:b5:ae:
af:ff:0a:6d:84:6b:a9:da:aa:09:5b:43:f7:f0:de:
02:54:7f:3a:3a:c8:9b:31:5c:74:6f:ba:20:77:ee:
45:d8:f5:8e:e3:43:78:1c:98:17:9b:38:bc:13:4d:
af:d0:2d:63:17:73:34:83:f6:7c:61:af:97:68:27:
9e:fe:c7:3d:46:50:85:d5:b8:a2:4e:37:79:ff:bb:
9f:b3:56:74:b7:5e:c2:57:4a:ba:9c:a3:f5:e9:88:
04:51:c7:5c:5a:b0:7f:05:38:c2:26:eb:78:42:d9:
15:9e:5b:8c:d6:cd:b9:e6:b4:bb:60:15:01:84:4b:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:D6:41:20:A6:BD:F3:F9:B6:1D:EF:B8:58:1B:32:36:FD:05:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA0EE5630DA11F1A3CC3EDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.160.0/21
156.231.112.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
03:fc:28:8d:2c:2c:62:87:40:9f:6d:1d:65:98:0a:c6:c6:09:
66:46:be:9d:bd:fb:50:da:9d:51:97:4e:37:e1:50:02:1f:6b:
67:e1:98:9c:f2:e0:9c:01:45:18:a8:63:34:fa:74:7e:76:2e:
c5:1f:ee:49:51:07:43:aa:14:12:21:18:b7:dc:e5:c4:db:e5:
a9:5e:bd:4f:7b:95:78:44:94:69:de:cb:ea:97:c0:96:74:0f:
26:26:2f:01:5c:59:90:a1:23:3a:2b:31:04:cc:83:c1:84:91:
03:64:d8:fa:73:72:be:48:d0:41:68:ad:d4:64:e6:81:dd:78:
ad:61:f7:7c:e5:0c:d6:1b:60:c5:7d:f8:fd:59:04:1c:0d:d0:
ce:80:30:7f:d2:c8:90:f2:e8:30:bd:98:2e:ca:ca:81:ba:e9:
48:73:c4:ea:f6:fb:59:ec:2a:cf:37:73:28:12:15:78:76:89:
da:1e:97:e2:94:ac:73:35:fe:0b:c6:d1:7e:98:dd:77:ed:7a:
cf:f4:f0:ab:a9:25:9f:0f:c5:03:0c:b9:81:c4:1a:7e:13:6a:
a9:1e:77:0c:64:98:7d:e5:63:2e:75:ba:dd:12:ee:9f:3f:af:
75:69:e1:0a:fa:d9:bc:08:2a:60:7f:a3:b4:b1:94:f9:ef:e3:
28:20:bd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:14:27 2026 by rpki-client