Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047AD1F25C5411F1A53DC3D5CE1D38B0.roa
File: 047AD1F25C5411F1A53DC3D5CE1D38B0.roa (raw, json)
Hash identifier: 9fhn3cL20A5+yhOFnX79D7wlowzBQjCqZGVpPq5X2U8=
Subject key identifier: E7:4F:29:E5:17:42:E2:69:0A:39:D8:6C:AA:07:02:3C:73:13:23:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047AD1F25C5411F1A53DC3D5CE1D38B0.roa
Signing time: Sat 30 May 2026 18:18:55 +0000
ROA not before: Sat 30 May 2026 18:18:50 +0000
ROA not after: Sat 06 Jun 2026 18:18:50 +0000
asID: 23764
IP address blocks: 156.238.20.0/24 maxlen: 24
156.238.21.0/24 maxlen: 24
156.238.22.0/24 maxlen: 24
156.238.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113388 (0x1baec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 18:18:50 2026 GMT
Not After : Jun 6 18:18:50 2026 GMT
Subject: CN=6a1b2a0f-2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:13:aa:81:87:fc:35:ba:b8:f4:ab:c5:20:
7c:28:06:4e:5a:92:3d:dd:b1:4f:14:25:b3:45:0a:
b6:aa:22:5d:f9:63:f2:ba:b7:22:d3:04:e8:e3:3c:
14:09:86:30:ce:e9:5d:06:5e:c6:c9:08:67:52:fc:
4f:48:6f:9b:d7:77:a4:2b:15:f1:24:a2:da:75:a6:
63:a5:18:bb:e2:96:7c:fd:07:a2:2d:e7:49:14:aa:
7a:91:40:a5:8a:f5:97:cb:b8:b4:77:c8:49:2d:74:
77:c4:ea:c0:10:8e:37:8a:83:84:d4:2b:f9:6a:0a:
99:7f:af:67:d9:97:ad:74:31:df:9c:61:69:1e:42:
1a:fc:84:46:3c:a8:02:a9:7e:70:2c:6d:5c:fa:fc:
e0:8f:7e:32:35:2b:51:99:e5:07:0a:02:96:8f:62:
8f:3a:e6:37:62:59:df:c4:19:66:7a:be:e6:67:aa:
f7:63:89:2b:10:50:db:dd:87:05:c5:3f:6f:21:83:
18:e1:10:68:13:94:60:cb:5d:a3:78:8d:e9:b0:3e:
11:d0:38:cf:bd:39:3c:af:94:ee:6b:8d:51:97:4a:
ac:c4:a0:90:13:f9:9b:d5:63:76:a0:45:dc:ea:73:
17:9c:28:d2:39:77:b3:fc:a2:0f:9c:2b:03:d2:b3:
eb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4F:29:E5:17:42:E2:69:0A:39:D8:6C:AA:07:02:3C:73:13:23:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/047AD1F25C5411F1A53DC3D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:8a:3f:77:be:4e:df:bf:b2:ff:f8:d8:f4:41:e5:0d:0c:38:
e5:cc:7f:a6:5f:cb:7a:e1:70:7b:b2:03:2e:29:f0:e2:e4:a3:
20:83:8f:c1:b7:63:37:a9:0e:6e:e0:cd:68:94:e0:27:80:0b:
9e:94:92:ee:9d:45:10:bb:bc:88:a6:14:6c:e8:50:7c:90:ed:
4d:d7:da:30:dd:58:b0:68:a0:7a:6f:f7:ef:2b:90:fd:80:bc:
4a:fd:1e:7f:6f:87:d1:2f:93:45:66:90:ff:17:a6:a8:cc:a4:
68:c7:32:43:a8:79:37:81:75:63:3e:fe:51:33:93:e0:20:ac:
02:71:73:cc:c4:3e:7b:8e:d1:5e:6d:9c:7a:29:69:c3:12:2a:
5b:6c:48:59:98:04:c4:07:c4:50:6c:b9:82:6a:4d:80:cd:65:
eb:f3:46:77:a8:45:e2:f2:bb:4e:9f:18:c5:a7:b4:c6:e3:d6:
ff:8d:c1:f0:eb:c0:e5:99:30:df:65:8b:cb:49:55:5e:06:9b:
7b:5b:6a:0b:a5:50:c2:ac:55:be:4c:32:5a:3d:17:af:50:86:
cb:a6:cc:80:a7:26:b1:34:1b:4d:97:69:ad:ed:04:15:c9:6f:
fa:2d:58:41:d7:3c:09:ea:c6:a4:a1:ea:c3:19:ef:f3:c1:91:
5f:22:0a:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbrsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTMwMTgxODUwWhcNMjYwNjA2MTgxODUwWjAYMRYw
FAYDVQQDEw02YTFiMmEwZi0yNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArWUTqoGH/DW6uPSrxSB8KAZOWpI93bFPFCWzRQq2qiJd+WPyurci0wTo
4zwUCYYwzuldBl7GyQhnUvxPSG+b13ekKxXxJKLadaZjpRi74pZ8/QeiLedJFKp6
kUClivWXy7i0d8hJLXR3xOrAEI43ioOE1Cv5agqZf69n2ZetdDHfnGFpHkIa/IRG
PKgCqX5wLG1c+vzgj34yNStRmeUHCgKWj2KPOuY3YlnfxBlmer7mZ6r3Y4krEFDb
3YcFxT9vIYMY4RBoE5Rgy12jeI3psD4R0DjPvTk8r5Tua41Rl0qsxKCQE/mb1WN2
oEXc6nMXnCjSOXez/KIPnCsD0rPr0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOdP
KeUXQuJpCjnYbKoHAjxzEyMBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNDdBRDFGMjVDNTQxMUYxQTUzREMzRDVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnO4UMA0GCSqGSIb3DQEBCwUA
A4IBAQAPij93vk7fv7L/+Nj0QeUNDDjlzH+mX8t64XB7sgMuKfDi5KMgg4/Bt2M3
qQ5u4M1olOAngAuelJLunUUQu7yIphRs6FB8kO1N19ow3ViwaKB6b/fvK5D9gLxK
/R5/b4fRL5NFZpD/F6aozKRoxzJDqHk3gXVjPv5RM5PgIKwCcXPMxD57jtFebZx6
KWnDEipbbEhZmATEB8RQbLmCak2AzWXr80Z3qEXi8rtOnxjFp7TG49b/jcHw68Dl
mTDfZYvLSVVeBpt7W2oLpVDCrFW+TDJaPRevUIbLpsyApyaxNBtNl2mt7QQVyW/6
LVhB1zwJ6sakoerDGe/zwZFfIgoN
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:09 2026 by rpki-client