Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E5B2B8506711F193CD2DC5CE1D38B0.roa
File: 22E5B2B8506711F193CD2DC5CE1D38B0.roa (raw, json)
Hash identifier: iRuisx1/koWcRUc4I2vS+1ntjF1NX7rDZMr3F/ZeYSc=
Subject key identifier: 3C:B6:AA:10:61:54:39:23:D9:B8:08:0B:4A:A2:82:8F:77:38:05:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E5B2B8506711F193CD2DC5CE1D38B0.roa
Signing time: Fri 15 May 2026 14:05:33 +0000
ROA not before: Fri 15 May 2026 14:05:28 +0000
ROA not after: Wed 17 Jun 2026 14:05:28 +0000
asID: 153671
IP address blocks: 156.231.70.0/23 maxlen: 24
156.231.88.0/22 maxlen: 24
156.231.92.0/22 maxlen: 24
156.238.12.0/23 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.60.0/22 maxlen: 24
156.242.64.0/23 maxlen: 24
156.242.100.0/22 maxlen: 24
156.242.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111788 (0x1b4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 14:05:28 2026 GMT
Not After : Jun 17 14:05:28 2026 GMT
Subject: CN=6a07282c-95be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:0f:ec:4f:f7:4a:a6:05:16:f7:5f:15:09:
d4:0b:2d:22:31:cf:7a:d2:71:9e:ee:f7:0f:cd:fe:
a8:e7:32:05:5b:ea:d4:00:90:0b:28:a7:8f:47:98:
26:49:f2:65:f0:63:80:74:fa:d7:86:39:63:13:51:
42:73:4e:9a:b3:04:b9:78:e8:23:80:5b:cb:8a:a7:
99:8e:a3:f2:98:c0:1c:9f:33:db:81:22:36:03:8a:
f7:1d:bf:78:07:f5:7f:75:44:96:66:8d:e5:c8:da:
10:67:02:94:d4:88:e8:fc:d3:ad:16:ad:88:f5:8c:
85:e8:56:9e:50:f4:a3:b3:45:49:6d:17:2a:c8:03:
95:69:20:b0:81:09:e9:2b:19:93:81:80:47:2d:15:
a2:b4:de:22:50:c1:46:bc:1e:47:12:5c:02:f2:e0:
e6:dc:a9:58:de:17:ce:10:eb:7a:9f:41:9a:09:6c:
9f:63:7f:8c:d7:3c:de:5f:4d:01:41:28:90:2e:0d:
0b:42:2b:3b:0c:ca:c8:db:3b:a7:2f:f4:49:ca:c9:
dd:8f:25:3f:7e:ea:45:0a:3c:23:53:00:9e:9d:33:
5b:6d:72:17:fe:5f:4e:82:27:59:0c:94:a1:d2:24:
7d:1b:8c:f4:8d:b5:ad:b8:9e:cd:20:82:f2:0c:a3:
50:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B6:AA:10:61:54:39:23:D9:B8:08:0B:4A:A2:82:8F:77:38:05:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22E5B2B8506711F193CD2DC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.70.0/23
156.231.88.0/21
156.238.12.0/23
156.238.28.0/22
156.238.60.0/22
156.242.64.0/23
156.242.100.0-156.242.107.255
Signature Algorithm: sha256WithRSAEncryption
80:34:6e:ce:f5:08:f6:e9:f1:ad:05:06:fe:71:7b:6d:54:52:
df:56:d2:a6:2b:11:b1:bd:5c:86:78:06:a3:67:73:d7:4a:0d:
f2:75:fa:0e:96:04:38:91:c6:88:fb:8c:ee:8a:32:2a:12:60:
e7:21:39:d6:67:44:71:22:d7:e7:88:bb:66:ae:86:b2:e7:32:
27:79:e1:11:d0:aa:c8:2c:95:e5:c1:04:8c:8b:0c:69:af:68:
8f:ce:20:cd:37:4f:d7:9c:ed:4c:81:28:78:2e:01:cb:89:66:
ee:00:df:5d:b3:3a:a5:07:42:c7:33:92:ac:3f:2e:9c:49:60:
5d:c1:13:9c:34:f2:36:1a:41:06:f4:c8:d8:42:2f:a1:08:d5:
c2:54:a9:49:52:a0:2b:60:7f:e9:53:d5:29:b8:f0:4e:3e:47:
20:0c:77:fc:95:2a:9d:10:06:cf:cf:62:4d:9f:c8:fc:5a:97:
72:29:af:f5:f4:0a:b0:cd:95:6a:61:45:e3:3d:53:7e:18:5f:
d4:25:0c:19:c9:fb:bd:62:48:04:d2:67:71:6d:e9:36:45:f1:
7a:32:f2:16:9d:dd:b5:b6:fb:ab:a5:df:a8:9a:db:7b:c3:87:
6e:02:21:52:42:6b:78:d1:40:84:3a:21:1b:f7:6a:f9:75:07:
eb:a6:ce:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:54 2026 by rpki-client