Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F6DAAC5A7111F18564FBE7CE1D38B0.roa
File: 22F6DAAC5A7111F18564FBE7CE1D38B0.roa (raw, json)
Hash identifier: FW58vfGPpTmDskBS9OF4OtGJiQM+G2vR6jFnlopFmEc=
Subject key identifier: 58:D9:26:D1:AE:9F:17:5A:34:8F:DC:C3:77:AC:1E:17:1A:DF:B3:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F6DAAC5A7111F18564FBE7CE1D38B0.roa
Signing time: Thu 28 May 2026 08:42:19 +0000
ROA not before: Thu 28 May 2026 08:42:15 +0000
ROA not after: Wed 01 Jul 2026 08:42:15 +0000
asID: 44559
IP address blocks: 156.233.35.0/24 maxlen: 24
156.233.40.0/24 maxlen: 24
156.233.46.0/24 maxlen: 24
156.233.49.0/24 maxlen: 24
156.233.50.0/24 maxlen: 24
156.243.227.0/24 maxlen: 24
156.243.231.0/24 maxlen: 24
156.243.233.0/24 maxlen: 24
156.243.234.0/24 maxlen: 24
156.243.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113283 (0x1ba83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:42:15 2026 GMT
Not After : Jul 1 08:42:15 2026 GMT
Subject: CN=6a17ffeb-4955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:7c:ee:60:8a:b7:e3:07:02:f9:10:a2:88:
82:ee:e1:c7:29:9e:7a:a4:c1:29:c9:6a:50:83:86:
f0:db:98:ec:fe:36:f8:ae:58:17:d4:98:d4:b9:a6:
4e:46:b9:a4:02:8c:88:79:1d:8e:49:da:f8:71:4c:
b2:a8:64:f8:98:14:ed:41:06:5b:6e:72:fe:4c:14:
35:93:e4:e7:1f:79:77:bd:74:46:ee:4c:4d:92:71:
91:c2:cf:e1:35:70:3d:10:fc:b9:c0:66:ab:49:42:
ab:0a:c3:86:1b:0d:89:9d:1c:3e:23:81:59:aa:88:
12:2e:39:73:9a:d8:5a:e9:f4:73:dc:e0:20:9b:03:
2d:37:2e:ef:7a:ab:66:15:4b:a5:f6:76:ea:18:90:
0b:0a:0d:d7:b6:b7:f2:0f:fa:49:52:e4:1d:28:3b:
4f:bc:7b:fd:d8:64:12:87:aa:4d:48:27:9a:9b:5f:
17:26:85:90:32:70:69:5d:f8:10:a1:89:51:e3:92:
7a:8e:f2:7f:96:ad:19:39:d5:79:8d:5f:c5:67:57:
df:1e:30:bb:79:34:59:ab:27:0a:c9:ba:d7:ca:bc:
17:a7:18:65:da:25:99:9a:4e:2f:2a:13:af:2b:4f:
6e:37:ef:94:07:38:fb:fb:ae:26:45:6f:02:26:36:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D9:26:D1:AE:9F:17:5A:34:8F:DC:C3:77:AC:1E:17:1A:DF:B3:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F6DAAC5A7111F18564FBE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.35.0/24
156.233.40.0/24
156.233.46.0/24
156.233.49.0-156.233.50.255
156.243.227.0/24
156.243.231.0/24
156.243.233.0-156.243.234.255
156.243.240.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b5:70:e3:73:cf:bc:41:b1:f6:4d:0e:0c:97:35:69:12:5f:
36:e3:48:27:21:01:86:28:7a:34:9b:64:2a:52:a5:c4:4e:cd:
df:85:5c:e6:f0:99:ab:9b:cb:3c:4b:bd:c3:5c:1d:68:b7:eb:
da:9f:98:b4:44:3a:41:c4:f5:9d:77:d4:dd:f8:b9:a8:72:45:
74:89:75:ec:3c:44:c8:a8:0c:cd:51:3d:fc:c9:8a:a0:05:47:
c8:0b:1f:12:51:8d:48:a7:d7:02:88:34:24:2d:84:fa:28:ea:
00:4d:17:43:91:49:52:fd:4c:de:f9:b5:fd:1c:d3:d8:53:83:
e9:c2:89:66:85:23:cc:3b:b6:b2:73:55:cc:92:4b:70:c0:12:
1e:c4:3c:ae:20:8e:c0:5e:aa:4f:48:68:d5:18:35:d9:35:19:
00:6c:09:aa:9a:1a:e9:35:fe:a5:96:db:38:24:ca:8d:f5:7c:
c0:ef:bf:95:20:e9:4e:03:5d:36:c9:bb:c9:e2:a8:70:1c:21:
ca:05:05:e4:e3:cc:c1:2b:59:c1:20:c7:56:f2:6b:2d:b9:18:
f5:10:6c:20:63:e7:1e:cb:92:e8:da:7e:83:73:34:11:c3:5c:
40:7b:bf:3b:c3:d3:dc:c6:94:c0:b1:81:4b:a3:79:02:18:87:
3b:24:86:30
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIDAbqDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDg0MjE1WhcNMjYwNzAxMDg0MjE1WjAYMRYw
FAYDVQQDEw02YTE3ZmZlYi00OTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5Zl87mCKt+MHAvkQooiC7uHHKZ56pMEpyWpQg4bw25js/jb4rlgX1JjU
uaZORrmkAoyIeR2OSdr4cUyyqGT4mBTtQQZbbnL+TBQ1k+TnH3l3vXRG7kxNknGR
ws/hNXA9EPy5wGarSUKrCsOGGw2JnRw+I4FZqogSLjlzmtha6fRz3OAgmwMtNy7v
eqtmFUul9nbqGJALCg3XtrfyD/pJUuQdKDtPvHv92GQSh6pNSCeam18XJoWQMnBp
XfgQoYlR45J6jvJ/lq0ZOdV5jV/FZ1ffHjC7eTRZqycKybrXyrwXpxhl2iWZmk4v
KhOvK09uN++UBzj7+64mRW8CJjadPwIDAQABo4IC3DCCAtgwHQYDVR0OBBYEFFjZ
JtGunxdaNI/cw3esHhca37PSMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMkY2REFBQzVBNzExMUYxODU2NEZCRTdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAnOkjAwQAnOkoAwQAnOkuMAwD
BACc6TEDBACc6TIDBACc8+MDBACc8+cwDAMEAJzz6QMEAJzz6gMEAJzz8DANBgkq
hkiG9w0BAQsFAAOCAQEAA7Vw43PPvEGx9k0ODJc1aRJfNuNIJyEBhih6NJtkKlKl
xE7N34Vc5vCZq5vLPEu9w1wdaLfr2p+YtEQ6QcT1nXfU3fi5qHJFdIl17DxEyKgM
zVE9/MmKoAVHyAsfElGNSKfXAog0JC2E+ijqAE0XQ5FJUv1M3vm1/RzT2FOD6cKJ
ZoUjzDu2snNVzJJLcMASHsQ8riCOwF6qT0ho1Rg12TUZAGwJqpoa6TX+pZbbOCTK
jfV8wO+/lSDpTgNdNsm7yeKocBwhygUF5OPMwStZwSDHVvJrLbkY9RBsIGPnHsuS
6Np+g3M0EcNcQHu/O8PT3MaUwLGBS6N5AhiHOySGMA==
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:06 2026 by rpki-client