Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A06CB225A6611F1BE3B53A9CE1D38B0.roa
File: 3A06CB225A6611F1BE3B53A9CE1D38B0.roa (raw, json)
Hash identifier: S42zXsBkmvts0JqUCy+eu1/pIcGiHcmQZdgFpDNmSHM=
Subject key identifier: 46:84:12:A8:5E:70:CF:F5:0E:51:D2:DB:50:C9:7C:6C:15:CA:CC:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A06CB225A6611F1BE3B53A9CE1D38B0.roa
Signing time: Thu 28 May 2026 07:24:13 +0000
ROA not before: Thu 28 May 2026 07:24:09 +0000
ROA not after: Wed 01 Jul 2026 07:24:09 +0000
asID: 62240
IP address blocks: 156.229.1.0/24 maxlen: 24
156.229.124.0/24 maxlen: 24
156.229.175.0/24 maxlen: 24
156.229.237.0/24 maxlen: 24
156.229.238.0/24 maxlen: 24
156.229.244.0/24 maxlen: 24
156.229.245.0/24 maxlen: 24
156.229.246.0/24 maxlen: 24
156.229.254.0/24 maxlen: 24
156.229.255.0/24 maxlen: 24
156.233.0.0/24 maxlen: 24
156.233.1.0/24 maxlen: 24
156.233.100.0/24 maxlen: 24
156.233.103.0/24 maxlen: 24
156.233.104.0/24 maxlen: 24
156.233.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113236 (0x1ba54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 07:24:09 2026 GMT
Not After : Jul 1 07:24:09 2026 GMT
Subject: CN=6a17ed9d-c63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:94:bb:1f:29:fa:6e:2c:83:9a:ff:65:75:
46:3f:5f:5d:74:1f:ac:a3:ca:a5:99:a0:eb:ae:79:
66:b1:6f:ef:19:1f:96:cf:27:9c:d4:53:ed:18:fb:
b1:06:38:c9:d3:e4:cb:85:33:98:d6:c4:56:cb:9e:
b8:d7:67:dc:f9:0f:83:75:a4:cc:03:da:87:19:0b:
b2:da:16:83:99:ad:b5:f1:40:77:07:a4:8f:5f:d7:
cd:24:7e:d9:80:56:27:a5:28:2a:df:7a:64:c5:50:
1e:1d:d1:09:69:3f:9f:13:5a:fd:42:83:66:98:1f:
1c:d8:ee:63:50:62:2c:c9:e7:26:00:69:55:07:5f:
90:bf:28:c8:88:e7:be:24:f4:0b:45:7b:cd:c6:b0:
64:20:81:18:04:28:1b:42:1f:42:ca:7c:9e:b1:ff:
b9:5e:6f:01:7d:00:71:ed:61:76:68:1c:ce:1b:cc:
37:91:88:81:eb:d6:79:49:39:17:a2:c5:85:b0:01:
f5:0a:52:b0:d9:ea:73:3c:7e:e8:c8:43:83:a6:06:
da:30:1c:75:20:da:f2:e2:12:9f:ea:cf:d9:58:2d:
a6:36:10:6a:e2:44:06:01:8a:d5:ae:a2:03:49:fc:
ea:91:2c:f8:6d:45:48:ae:ff:17:6e:af:61:9b:50:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:12:A8:5E:70:CF:F5:0E:51:D2:DB:50:C9:7C:6C:15:CA:CC:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A06CB225A6611F1BE3B53A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.1.0/24
156.229.124.0/24
156.229.175.0/24
156.229.237.0-156.229.238.255
156.229.244.0-156.229.246.255
156.229.254.0/23
156.233.0.0/23
156.233.100.0/24
156.233.103.0-156.233.105.255
Signature Algorithm: sha256WithRSAEncryption
2a:1f:40:be:d8:d9:a1:af:1f:1e:e1:cf:5d:d7:ab:f2:a3:bb:
8e:bf:61:12:c4:f1:68:a3:f2:21:32:34:95:d3:98:1b:ac:6f:
f4:81:b9:e8:28:7c:0d:b2:4e:b2:6c:22:74:3d:e0:a9:4b:44:
06:f0:31:53:5f:16:b6:df:a3:47:6b:c7:6f:bf:c9:de:d1:d6:
a9:a2:2f:51:c5:d8:71:3a:2d:64:85:19:42:b9:87:f8:d5:4f:
fe:3c:b8:ed:cd:a4:17:c2:dd:ce:69:ec:8a:65:7d:79:3e:f4:
1d:f4:83:12:53:70:0d:63:8a:8a:88:29:c6:1a:01:21:b8:ce:
d6:e3:76:cc:6c:c2:1e:ca:69:f8:64:ea:cb:3d:97:d7:b8:6f:
ba:20:e3:0c:4e:ef:e7:a5:ac:25:4c:82:e1:56:4f:e1:78:21:
94:cd:91:ed:0b:e2:92:10:a7:b4:34:ab:20:9f:de:49:ae:34:
9c:c9:0e:a2:09:ff:ed:fc:23:4c:b5:0f:7b:18:09:de:b8:4c:
54:47:0e:25:c2:79:18:0f:a2:68:d8:64:ef:de:0a:b1:be:5c:
b2:ca:c3:57:c3:ba:83:2d:c0:75:24:b4:ea:c9:94:41:0f:ae:
c0:71:24:6c:77:7e:5b:15:f6:8a:f1:bb:79:49:f9:de:1a:d6:
31:34:ea:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client