Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B56745E16EE11F1AC483C79DAE4EC9C.roa
File: 1B56745E16EE11F1AC483C79DAE4EC9C.roa (raw, json)
Hash identifier: E0rqh+lGPAUhm5/vJmzScz6iydY/u4yygWLXKy4tFRs=
Subject key identifier: D3:B4:BD:BF:D0:65:70:8E:81:2A:71:CB:C2:8C:BF:AD:E9:A9:2C:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B56745E16EE11F1AC483C79DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 10:45:34 +0000
ROA not before: Tue 03 Mar 2026 10:45:30 +0000
ROA not after: Fri 10 Apr 2026 10:45:30 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107007 (0x1a1ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 10:45:30 2026 GMT
Not After : Apr 10 10:45:30 2026 GMT
Subject: CN=69a6bbce-ef29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:6c:3f:7d:1b:ce:54:fa:75:d3:02:d1:e5:
ae:16:03:8c:82:b0:5e:c2:35:ac:ed:dc:4f:91:10:
6b:55:3a:92:cb:b0:ae:f4:84:f3:9d:fb:97:97:bc:
12:62:cb:1c:60:f0:d9:5c:89:50:8c:d0:db:eb:7d:
1c:c0:b1:27:6d:48:52:54:08:5c:6b:d3:4d:b9:d7:
38:6f:a0:41:cf:b2:75:0e:16:b0:ed:2e:10:75:30:
b8:50:98:da:e1:94:34:df:94:b9:ac:e8:d2:81:17:
60:d1:f9:34:65:5e:71:8a:0e:74:0f:d3:9c:da:fc:
01:0a:b9:3b:ff:2a:19:b6:de:58:70:3d:11:3b:c8:
34:53:fd:96:89:81:f1:47:f4:8f:20:bf:39:ee:c3:
fd:a5:c2:e9:85:be:88:74:49:e8:6b:25:f3:6c:87:
7d:bf:94:7a:a8:d7:00:0b:c9:e2:aa:88:bc:5f:5f:
10:b3:03:30:74:04:10:6b:8a:73:ee:82:1f:01:f9:
00:a4:b2:02:cd:e7:0d:49:a2:96:5f:c9:34:4d:32:
64:59:9c:13:c3:cc:ea:6a:c5:6e:83:ef:65:eb:ca:
2d:d8:5e:04:f0:ae:72:a2:4c:4a:c6:35:57:64:c1:
0b:d9:44:7b:d3:6e:1a:66:ef:e0:fb:0d:96:9c:b3:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:BD:BF:D0:65:70:8E:81:2A:71:CB:C2:8C:BF:AD:E9:A9:2C:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B56745E16EE11F1AC483C79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:e1:93:77:39:3a:e0:66:8d:84:18:cf:60:86:95:d2:43:7d:
f0:c1:3a:c0:df:30:7c:de:32:2c:ef:61:57:77:dd:24:d5:a3:
19:af:c7:27:67:52:9d:0d:23:04:39:06:b9:fa:64:70:d9:72:
f7:11:df:3f:13:2d:80:28:1e:d3:93:f1:df:cc:62:f2:6c:35:
06:8e:b5:52:f8:50:93:1a:cc:eb:23:a8:b3:56:88:d8:ee:f4:
8a:f5:55:50:10:8d:b2:a6:34:1b:d7:6c:9d:b8:67:9b:02:21:
c5:e4:1f:82:1b:9a:6e:79:20:e3:96:b5:ed:52:08:b8:1d:17:
92:49:1e:60:c2:56:a6:28:fc:ce:c6:bf:86:f8:8f:03:38:b8:
9d:2a:cc:d7:6d:91:ef:d7:18:e2:b7:4f:5b:a5:39:0b:5d:fc:
f3:c5:f6:01:8b:ac:e5:94:8c:c1:b9:8a:4a:10:a7:fd:d6:c0:
56:ad:09:3e:d2:16:6f:25:83:ba:46:07:a0:4a:81:ce:e8:16:
54:8f:82:23:43:ed:ce:96:8f:ef:78:75:f5:d6:f4:51:67:ad:
26:be:38:b7:50:9e:19:3c:cd:39:7a:4a:b0:6d:15:ab:aa:b4:
a8:74:6d:03:03:39:07:15:c8:99:e6:09:ba:ae:24:65:26:a2:
9f:48:32:4e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaH/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzAzMTA0NTMwWhcNMjYwNDEwMTA0NTMwWjAYMRYw
FAYDVQQDEw02OWE2YmJjZS1lZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp2RsP30bzlT6ddMC0eWuFgOMgrBewjWs7dxPkRBrVTqSy7Cu9ITznfuX
l7wSYsscYPDZXIlQjNDb630cwLEnbUhSVAhca9NNudc4b6BBz7J1Dhaw7S4QdTC4
UJja4ZQ035S5rOjSgRdg0fk0ZV5xig50D9Oc2vwBCrk7/yoZtt5YcD0RO8g0U/2W
iYHxR/SPIL857sP9pcLphb6IdEnoayXzbId9v5R6qNcAC8niqoi8X18QswMwdAQQ
a4pz7oIfAfkApLICzecNSaKWX8k0TTJkWZwTw8zqasVug+9l68ot2F4E8K5yokxK
xjVXZMEL2UR7024aZu/g+w2WnLN0AwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNO0
vb/QZXCOgSpxy8KMv63pqSywMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjU2NzQ1RTE2RUUxMUYxQUM0ODNDNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQCg4ZN3OTrgZo2EGM9ghpXSQ33wwTrA3zB83jIs72FXd90k1aMZr8cnZ1Kd
DSMEOQa5+mRw2XL3Ed8/Ey2AKB7Tk/HfzGLybDUGjrVS+FCTGszrI6izVojY7vSK
9VVQEI2ypjQb12yduGebAiHF5B+CG5pueSDjlrXtUgi4HReSSR5gwlamKPzOxr+G
+I8DOLidKszXbZHv1xjit09bpTkLXfzzxfYBi6zllIzBuYpKEKf91sBWrQk+0hZv
JYO6RgegSoHO6BZUj4IjQ+3Olo/veHX11vRRZ60mvji3UJ4ZPM05ekqwbRWrqrSo
dG0DAzkHFciZ5gm6riRlJqKfSDJO
-----END CERTIFICATE-----
Generated at Wed Mar 4 12:44:42 2026 by rpki-client