Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38809DE3E5011F182B47EA8CE1D38B0.roa
File: B38809DE3E5011F182B47EA8CE1D38B0.roa (raw, json)
Hash identifier: dCVyuhFA3hivyukzF+rlEpeFtYXElJGbA7fueIQdhEo=
Subject key identifier: EB:60:F9:92:2E:27:F3:07:3E:87:16:53:EB:22:F2:E6:C9:BF:03:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38809DE3E5011F182B47EA8CE1D38B0.roa
Signing time: Wed 22 Apr 2026 13:39:36 +0000
ROA not before: Wed 22 Apr 2026 13:39:30 +0000
ROA not after: Sat 30 May 2026 13:39:30 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
156.228.48.0/22 maxlen: 24
156.228.52.0/22 maxlen: 24
156.231.20.0/22 maxlen: 24
156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.252.18.0/23 maxlen: 24
156.252.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110115 (0x1ae23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 13:39:30 2026 GMT
Not After : May 30 13:39:30 2026 GMT
Subject: CN=69e8cf98-7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:4b:15:35:6d:37:3e:4b:7c:40:5c:3d:02:
c6:14:cf:21:16:64:36:c8:6e:01:15:c3:1c:0d:46:
bc:d7:81:e7:c8:eb:2b:3f:cc:8c:63:96:51:35:42:
c6:47:0d:80:bd:19:2e:ad:35:15:b0:7a:88:44:68:
13:2f:02:b9:2b:27:ac:0d:2c:74:9d:9e:80:dc:89:
6b:69:e1:79:e7:f4:0b:64:3c:e4:40:6d:5d:fe:24:
98:60:92:57:4f:92:d4:b0:11:64:b4:9b:a8:ef:36:
11:0f:34:e3:21:f0:ba:99:a3:e9:9f:b3:c4:72:68:
54:f1:bc:2b:a3:4e:1d:70:89:65:18:c2:ca:96:b8:
64:d6:7a:63:b3:c1:61:c5:9c:0e:6c:d8:aa:a5:2c:
0b:10:34:80:e1:98:1e:49:e6:7e:02:2f:01:81:fb:
4f:fa:52:70:e1:bb:87:a9:64:12:8a:86:ac:08:5d:
cf:9b:a8:b9:1a:97:bf:24:3f:70:cc:b1:76:d5:8f:
48:c6:2e:2e:a0:1c:c7:d0:07:47:d0:a9:8e:37:51:
58:b6:ec:52:fb:3d:31:3c:8e:7f:c3:ad:fc:b8:9d:
c2:82:19:d1:a7:e3:be:f3:8d:16:f9:74:53:bf:10:
75:51:f2:3e:de:d9:32:f4:87:7c:5e:1f:67:67:dc:
b0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:60:F9:92:2E:27:F3:07:3E:87:16:53:EB:22:F2:E6:C9:BF:03:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B38809DE3E5011F182B47EA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.228.48.0/21
156.231.20.0/22
156.249.128.0/22
156.249.204.0/22
156.249.212.0/22
156.249.220.0/22
156.252.18.0/23
156.252.132.0/22
Signature Algorithm: sha256WithRSAEncryption
19:2c:57:fc:23:df:9e:51:76:77:ae:e9:ef:f1:10:a0:a7:b8:
ea:94:9f:bc:2e:f0:4e:69:2a:98:59:be:40:8e:a3:97:be:9f:
49:3b:5a:a3:12:c9:35:3e:7c:fb:f6:eb:66:91:cf:2d:40:9b:
61:5a:dc:4d:cc:1b:41:6a:bb:4f:41:4b:77:95:fa:22:bc:9b:
0f:1a:7b:e8:9d:31:86:3b:7b:93:e5:57:e0:b0:de:b5:13:e0:
cf:74:fc:ad:75:bc:44:85:98:a8:f6:54:e6:69:bb:61:b4:9e:
45:39:52:d9:ec:9a:dd:db:53:94:7f:f5:d5:62:74:82:36:eb:
f8:97:d6:ab:f3:88:c7:4d:9b:c7:dc:49:fe:78:b3:be:41:5d:
b0:21:d8:09:b4:4d:84:b4:7d:49:d4:5e:09:f5:b9:7b:8a:91:
1b:f1:13:3b:b9:85:3c:5d:b3:72:16:5a:63:f6:b1:a9:b8:d4:
34:47:ba:26:c3:19:77:50:dc:d7:20:a6:35:ce:74:30:45:f1:
60:09:fb:0c:29:e7:fd:52:17:ae:6e:a1:e4:08:4c:a8:70:b8:
e3:86:59:f2:8d:10:c2:9f:01:43:ca:b1:ee:7f:4c:4e:d7:2f:
57:4b:b6:c2:43:c2:ee:ef:3d:40:0a:07:31:7d:be:b3:f0:35:
3f:09:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:37:04 2026 by rpki-client