Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3CF88553111F185EB49E9CE1D38B0.roa
File: 13E3CF88553111F185EB49E9CE1D38B0.roa (raw, json)
Hash identifier: 48TStto49oR3pwIlbk+54ValJV3jCvFs+BYbS3J0/uc=
Subject key identifier: DA:82:D4:C0:96:A9:F0:33:05:28:22:4B:E0:03:33:08:3F:AB:13:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B760
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3CF88553111F185EB49E9CE1D38B0.roa
Signing time: Thu 21 May 2026 16:21:10 +0000
ROA not before: Thu 21 May 2026 16:21:05 +0000
ROA not after: Sat 08 Aug 2026 16:21:05 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112480 (0x1b760)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 16:21:05 2026 GMT
Not After : Aug 8 16:21:05 2026 GMT
Subject: CN=6a0f30f6-69af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:df:6e:eb:a5:53:d4:78:2e:b6:6e:a3:f9:
89:eb:ef:71:e5:cc:d8:a2:df:c1:35:1b:6d:db:bb:
54:dc:5b:bf:58:21:73:ed:41:52:69:78:3d:86:76:
26:15:c8:c5:2f:ef:ff:a4:1a:13:77:4d:d2:2b:13:
88:47:ca:c1:f3:c5:ec:cc:ef:c0:39:14:c8:88:ad:
88:e2:21:96:20:d8:05:2b:42:0a:50:cb:d9:1c:9a:
97:f9:3d:56:b4:fd:25:38:54:7d:3a:7f:90:5d:af:
b3:8d:93:2f:89:6c:94:10:b1:0c:ca:27:d6:76:41:
81:e4:7d:0b:05:54:01:ea:32:87:06:b7:6c:85:4d:
f8:0b:08:31:b0:08:49:04:f3:1e:fa:2b:ca:06:1b:
f2:cf:a7:bb:e6:af:94:25:92:9c:13:05:93:a2:77:
9e:b9:e6:07:0b:7a:3d:d4:89:ee:bc:2e:a0:8e:32:
80:86:8a:f6:13:c7:01:5b:92:f8:17:b9:bf:ce:f1:
0b:1b:3f:3f:45:6d:db:4b:16:39:87:1e:3d:33:b3:
cb:3d:a4:c8:86:db:60:37:89:82:c5:53:68:04:36:
7b:75:b9:3f:2f:88:0e:66:2b:be:82:d9:80:88:70:
3f:5e:d2:95:e2:39:cb:b8:55:15:ec:92:5a:23:32:
27:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:82:D4:C0:96:A9:F0:33:05:28:22:4B:E0:03:33:08:3F:AB:13:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13E3CF88553111F185EB49E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
71:1a:9b:ec:fd:54:70:e3:06:df:78:c9:64:2d:e9:c3:44:5d:
7c:b6:71:66:ef:3b:af:bd:6f:f6:39:d3:d6:71:4b:05:16:e9:
72:36:b6:84:2a:d2:70:c7:92:1b:53:42:7c:ff:fa:20:70:2a:
da:86:2d:61:a3:a0:d2:6b:24:8d:60:84:b6:4e:cf:e2:31:b8:
a4:9e:3d:15:a1:57:08:cd:33:0d:37:8a:1f:f1:c8:99:10:82:
0c:16:3a:ab:94:9e:61:04:c7:b8:fa:70:4d:78:8c:8c:4a:da:
f7:95:eb:68:23:86:9e:12:17:df:3c:bf:1c:5f:31:b5:e7:92:
78:d3:c8:d3:7d:71:18:0c:da:85:19:b9:59:99:a9:34:5b:ac:
7e:ca:8c:c1:5c:cd:32:75:68:ca:d6:7f:01:98:95:51:b5:34:
f9:d4:46:45:9c:f5:90:1c:c3:c8:38:d1:47:f3:d6:66:33:9e:
3e:22:53:1b:01:ce:eb:ab:38:45:52:73:11:9a:41:f7:2f:fe:
e0:10:14:a3:f5:3c:43:f5:95:27:22:e7:d3:c5:f0:db:1a:98:
e8:c2:11:75:c9:fb:06:35:1c:ff:3e:3e:12:7f:f1:bd:9e:e9:
94:6f:ab:ad:fd:de:6e:3c:d4:21:8d:fb:e4:8a:0d:25:b2:ab:
4e:00:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:56 2026 by rpki-client