Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DD3CBA5A7511F193D56600CF1D38B0.roa
File: 13DD3CBA5A7511F193D56600CF1D38B0.roa (raw, json)
Hash identifier: GvCOHs0DpNst+r5KVWgkYPu31/aW8f9GT8+xvvaIx3s=
Subject key identifier: 98:14:73:20:33:57:55:8B:AB:E9:91:A8:4B:F7:27:4B:44:BD:A9:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DD3CBA5A7511F193D56600CF1D38B0.roa
Signing time: Thu 28 May 2026 09:10:32 +0000
ROA not before: Thu 28 May 2026 09:10:27 +0000
ROA not after: Sun 06 Jun 2027 09:10:27 +0000
asID: 133007
IP address blocks: 156.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113301 (0x1ba95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 09:10:27 2026 GMT
Not After : Jun 6 09:10:27 2027 GMT
Subject: CN=6a180688-2776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:de:09:4d:5d:7b:c8:a6:85:d8:20:bb:43:
f3:5a:fd:df:85:f6:23:bb:86:e7:94:af:9b:c2:96:
52:07:e8:b5:93:0f:c1:75:bf:5f:49:a1:5f:aa:43:
a1:a8:ee:7e:36:69:10:f9:3f:fa:ba:69:a2:95:7e:
09:c4:1b:69:12:3b:f3:87:05:17:5c:23:ce:b6:bf:
34:c7:2e:be:bc:90:ea:ad:7b:67:d1:61:79:fa:c7:
dc:f2:62:f4:16:8b:a5:09:a7:66:77:9f:40:90:6d:
5c:13:ed:4c:68:f5:e1:aa:0b:af:f1:2a:66:f0:28:
53:2b:18:63:51:f3:4f:7f:2a:41:d8:96:64:e1:4f:
ad:75:0e:41:8b:6a:27:5b:95:40:02:f8:c6:5b:ba:
ea:ff:d8:15:8c:37:c1:97:2c:c5:96:d3:29:82:e5:
bc:bf:81:4d:d8:e4:7f:43:e1:c9:d6:e0:cb:85:9d:
0b:59:9a:cf:e9:29:6f:01:72:3d:6e:17:14:df:48:
df:0f:4e:77:2d:ce:c1:f8:86:b8:8a:0b:0c:3b:80:
ec:34:90:48:20:ec:51:e1:a7:e7:92:a6:28:74:c7:
b3:56:ad:e7:7c:a0:29:1b:ab:15:c0:3b:d8:6a:39:
9d:ad:f7:4f:73:c1:7a:97:4f:6a:5b:e1:bf:d9:20:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:14:73:20:33:57:55:8B:AB:E9:91:A8:4B:F7:27:4B:44:BD:A9:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13DD3CBA5A7511F193D56600CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
12:46:3f:5a:20:31:c6:b4:eb:06:4a:31:a4:28:2e:8c:f1:24:
da:46:6b:eb:8c:cd:5c:0d:dd:a7:3b:04:32:e9:39:c6:28:9a:
a3:00:c8:40:5a:c9:1f:14:c7:b7:02:ef:2e:fb:a9:ff:3e:b6:
fb:d5:ef:ea:c5:d5:fa:7c:99:3f:8a:6d:8e:92:77:f5:84:bf:
02:64:e8:46:b7:ab:9f:35:66:f9:6b:57:dd:1d:1f:70:2f:9f:
ed:42:73:92:08:98:6b:7b:76:30:ad:07:d4:37:f2:59:f7:16:
03:16:ca:1f:4a:f1:50:65:da:41:f4:3b:61:28:f0:ac:e6:d7:
fc:b6:33:31:bc:10:0c:27:61:5a:77:08:3c:78:b0:ec:88:b6:
b5:b3:b4:26:03:b4:60:f7:f6:99:b9:77:37:03:38:86:7d:ea:
20:ab:54:35:43:5b:7e:f3:1a:57:2e:52:a2:aa:0d:9d:4e:1c:
09:10:5b:6e:fb:95:db:55:d1:42:76:58:1c:49:2a:d8:f6:43:
88:c6:39:63:96:21:84:fc:99:92:a9:f0:23:88:6b:e9:82:82:
39:22:fb:8c:69:cc:7d:4f:ad:35:72:49:6a:fa:07:e6:55:c9:
d1:17:ec:99:ba:a8:37:47:7d:a5:0d:dc:27:97:4d:5a:16:a1:
99:6c:45:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbqVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDkxMDI3WhcNMjcwNjA2MDkxMDI3WjAYMRYw
FAYDVQQDEw02YTE4MDY4OC0yNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw9DeCU1de8imhdggu0PzWv3fhfYju4bnlK+bwpZSB+i1kw/Bdb9fSaFf
qkOhqO5+NmkQ+T/6ummilX4JxBtpEjvzhwUXXCPOtr80xy6+vJDqrXtn0WF5+sfc
8mL0FoulCadmd59AkG1cE+1MaPXhqguv8Spm8ChTKxhjUfNPfypB2JZk4U+tdQ5B
i2onW5VAAvjGW7rq/9gVjDfBlyzFltMpguW8v4FN2OR/Q+HJ1uDLhZ0LWZrP6Slv
AXI9bhcU30jfD053Lc7B+Ia4igsMO4DsNJBIIOxR4afnkqYodMezVq3nfKApG6sV
wDvYajmdrfdPc8F6l09qW+G/2SA1MQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJgU
cyAzV1WLq+mRqEv3J0tEval8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xM0REM0NCQTVBNzUxMUYxOTNENTY2MDBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPcBMA0GCSqGSIb3DQEBCwUA
A4IBAQASRj9aIDHGtOsGSjGkKC6M8STaRmvrjM1cDd2nOwQy6TnGKJqjAMhAWskf
FMe3Au8u+6n/Prb71e/qxdX6fJk/im2Oknf1hL8CZOhGt6ufNWb5a1fdHR9wL5/t
QnOSCJhre3YwrQfUN/JZ9xYDFsofSvFQZdpB9DthKPCs5tf8tjMxvBAMJ2Fadwg8
eLDsiLa1s7QmA7Rg9/aZuXc3AziGfeogq1Q1Q1t+8xpXLlKiqg2dThwJEFtu+5Xb
VdFCdlgcSSrY9kOIxjljliGE/JmSqfAjiGvpgoI5IvuMacx9T601cklq+gfmVcnR
F+yZuqg3R32lDdwnl01aFqGZbEWG
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:05 2026 by rpki-client