Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230B15046AEC11F180553D16CF1D38B0.roa
File: 230B15046AEC11F180553D16CF1D38B0.roa (raw, json)
Hash identifier: /KkU5nRauI9xc7cQZWYkaFrl7IbyEMOM+fIoeCjWKbo=
Subject key identifier: 9B:3C:A3:F0:9D:E8:ED:F6:12:9A:B3:46:FD:CA:99:D5:42:09:B4:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230B15046AEC11F180553D16CF1D38B0.roa
Signing time: Thu 18 Jun 2026 08:03:06 +0000
ROA not before: Thu 18 Jun 2026 08:03:01 +0000
ROA not after: Sat 25 Jul 2026 08:03:01 +0000
asID: 271355
IP address blocks: 156.236.204.0/24 maxlen: 24
156.236.205.0/24 maxlen: 24
156.236.206.0/24 maxlen: 24
156.236.207.0/24 maxlen: 24
156.236.208.0/24 maxlen: 24
156.236.209.0/24 maxlen: 24
156.236.210.0/24 maxlen: 24
156.236.211.0/24 maxlen: 24
156.236.212.0/24 maxlen: 24
156.236.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114420 (0x1bef4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 08:03:01 2026 GMT
Not After : Jul 25 08:03:01 2026 GMT
Subject: CN=6a33a63a-9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:90:b7:82:bd:ed:0f:04:a2:9e:33:e5:24:
4b:7e:63:5a:a2:e0:d5:7d:d2:95:23:58:85:9a:92:
04:e6:7e:07:ea:3d:35:0f:f2:ef:24:58:cd:34:30:
0a:e9:94:d1:78:7f:31:2f:95:6a:2c:cb:24:64:c3:
71:5e:cc:6a:08:c3:3e:ef:68:ff:cd:c0:8b:9b:ea:
ce:a6:52:0e:0a:a2:a6:23:c2:af:12:c1:13:8c:20:
40:9d:9f:3a:0d:a8:39:c7:ce:c9:2c:04:59:f3:53:
bd:90:79:10:a9:d7:52:db:3b:32:6a:e9:43:1e:30:
e9:32:5f:a8:09:64:e6:68:e8:1f:2d:e7:42:08:60:
e3:b6:ea:9e:61:ff:45:19:8e:98:b9:99:f3:66:54:
2a:6d:57:f5:ab:74:30:31:ca:df:fb:db:92:98:c9:
45:e7:85:69:f3:4e:38:f2:77:06:65:08:82:28:74:
5b:d4:6b:cf:41:c7:5a:b5:cd:be:b4:df:dd:10:08:
c4:89:da:3e:bb:f1:ad:cd:a9:80:d5:d7:ba:7a:7c:
fe:4d:b5:c6:86:8c:d9:59:b6:7c:78:f6:93:71:62:
ca:cc:b1:bb:a0:be:e5:1a:97:45:86:b5:5a:23:21:
cb:fb:65:bb:96:aa:6a:c0:df:69:2b:48:12:2a:ec:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3C:A3:F0:9D:E8:ED:F6:12:9A:B3:46:FD:CA:99:D5:42:09:B4:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/230B15046AEC11F180553D16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.204.0-156.236.213.255
Signature Algorithm: sha256WithRSAEncryption
05:37:ce:05:08:25:a2:24:1c:09:9f:14:9a:d9:61:e2:36:92:
d1:12:79:d0:d2:f6:21:96:d4:09:f6:68:96:30:aa:39:3d:bb:
b6:52:67:8f:fe:b8:14:6f:e8:26:3e:ae:3a:75:ab:7e:d0:44:
ca:b1:ff:d4:0d:4b:ea:10:de:24:bc:ea:84:11:78:02:31:b0:
2e:3c:40:d2:00:4a:9a:c3:ee:88:f1:f9:4c:1c:be:e0:55:f9:
47:1b:be:4f:3f:8a:84:35:aa:36:a8:3c:ec:d9:50:b2:a6:ff:
a4:0f:75:da:f9:9c:82:8a:01:21:94:9d:58:e1:df:98:d3:6d:
91:33:b5:75:d7:e3:8e:ca:68:48:67:76:4c:d3:a2:c4:f6:07:
38:45:fb:a6:10:1b:28:64:be:6e:4c:31:5f:35:60:f7:b5:ce:
05:80:81:ed:39:fd:ee:7b:b8:40:9f:b7:e6:f4:76:5d:e5:99:
5e:ea:14:20:62:4e:ec:68:9f:18:b3:f8:cd:0c:32:bf:e0:91:
7f:ae:f5:6a:c5:e0:ad:b4:1a:dd:2d:47:58:eb:81:0d:9c:57:
7f:fa:2b:96:c7:64:65:63:6a:30:3b:16:51:67:15:99:10:1c:
a3:af:39:8a:59:31:d1:a5:35:23:8c:49:5b:8a:74:ab:d5:b5:
5f:2c:ac:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:32 2026 by rpki-client