Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2285B44E5F2611F189C3D603CF1D38B0.roa
File: 2285B44E5F2611F189C3D603CF1D38B0.roa (raw, json)
Hash identifier: LvXdettmCzEY0NLfUJCCOFdtzqOMTkvNVafuVWxVscg=
Subject key identifier: 40:3E:CE:3E:92:1F:82:CB:B4:69:29:41:4A:FA:24:63:33:75:17:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB91
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2285B44E5F2611F189C3D603CF1D38B0.roa
Signing time: Wed 03 Jun 2026 08:28:02 +0000
ROA not before: Wed 03 Jun 2026 08:27:57 +0000
ROA not after: Wed 08 Jul 2026 08:27:57 +0000
asID: 206283
IP address blocks: 156.238.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 19:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113553 (0x1bb91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:27:57 2026 GMT
Not After : Jul 8 08:27:57 2026 GMT
Subject: CN=6a1fe592-170c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d4:71:22:3a:16:65:82:46:21:e9:b4:62:9a:
41:f2:f4:0f:c8:73:86:43:21:f0:e1:27:45:14:e3:
a0:77:28:bf:92:7d:1a:af:5d:71:20:6d:79:a3:ff:
33:88:b8:79:9a:20:64:d6:62:e0:30:9a:28:7c:fe:
42:2f:31:5b:88:c8:7d:2b:a2:ec:49:36:d9:1e:70:
52:36:6a:0a:aa:c2:a1:23:99:1e:37:9f:f5:d4:39:
52:85:25:c1:fa:19:2a:2d:2d:07:b2:ef:66:67:f8:
ab:08:33:a2:52:3f:4e:73:3f:ad:fb:55:49:c3:57:
54:ca:ea:eb:bd:86:9e:8b:c6:bb:ec:c7:07:d1:24:
f0:ca:dc:7d:b8:99:80:dc:d9:45:e7:2c:e3:0f:f7:
07:8f:f6:e8:89:22:5a:60:df:da:2a:9f:7b:d9:87:
15:1e:4f:fd:7d:0f:28:b9:f4:9f:9f:45:7b:c1:67:
7d:69:1d:43:19:03:78:34:3a:46:25:ee:e1:72:f0:
15:de:96:45:7c:bd:63:ad:65:93:b2:8d:3d:4b:11:
52:da:5a:61:cb:aa:59:2c:bc:41:23:94:d5:19:92:
67:1e:ec:5e:a6:bb:88:9d:69:54:16:8f:e4:a4:6b:
92:73:9b:30:a5:c3:63:bf:26:13:8b:91:a6:79:1d:
a1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3E:CE:3E:92:1F:82:CB:B4:69:29:41:4A:FA:24:63:33:75:17:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2285B44E5F2611F189C3D603CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c7:4e:84:d3:3d:13:f8:16:03:cb:a1:89:39:5c:7f:75:63:
57:14:f0:1b:6c:c1:a9:9f:26:5b:96:56:f4:14:9c:be:0e:00:
42:5f:26:a4:6c:11:05:d6:1b:86:f1:6c:69:97:0b:29:d5:a5:
c4:b4:8c:40:f7:9f:c3:0f:8f:76:72:d3:b3:d0:c4:8a:95:1b:
a4:7d:8f:f8:ec:02:c6:56:40:98:9a:06:ea:91:05:0b:4a:0a:
5a:38:82:43:8f:dd:9c:9d:ce:7c:ee:3a:79:32:a3:b1:af:04:
b4:2c:bb:92:f8:db:4c:06:9c:47:70:51:37:78:bd:f2:8d:a6:
c3:85:89:56:c1:fd:2b:0a:50:17:e8:91:79:04:51:3f:6e:0f:
93:3c:a3:0a:7d:88:27:49:18:2a:f9:ad:be:65:1f:89:87:18:
70:17:5b:87:3c:84:40:9b:70:30:a4:84:bc:ef:09:6c:20:b2:
e7:bb:69:fb:34:3a:a3:f9:23:67:b1:12:61:87:74:61:37:3c:
e8:4b:d9:0b:5f:72:49:82:5a:2a:b6:2c:d8:95:e3:ef:89:9e:
40:74:ee:75:7b:28:52:d2:b2:18:f2:30:a5:27:34:5b:1c:b1:
b8:ad:ed:33:eb:0b:78:e8:a0:77:00:9a:7d:7a:a6:de:4f:28:
2d:5a:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:10 2026 by rpki-client