Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BE359AE794911F19085511CCF1D38B0.roa
File: 3BE359AE794911F19085511CCF1D38B0.roa (raw, json)
Hash identifier: jvLTxo4ACPdHuTDgtMLcOM6PtLWkheaXgdvPgacwaNE=
Subject key identifier: 23:89:B8:50:F4:B6:5C:11:77:DA:63:10:BB:B1:0E:88:3B:0F:3D:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C343
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BE359AE794911F19085511CCF1D38B0.roa
Signing time: Mon 06 Jul 2026 14:44:47 +0000
ROA not before: Mon 06 Jul 2026 14:44:43 +0000
ROA not after: Sat 01 Aug 2026 14:44:43 +0000
asID: 9304
IP address blocks: 156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115523 (0x1c343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 14:44:43 2026 GMT
Not After : Aug 1 14:44:43 2026 GMT
Subject: CN=6a4bbf5f-d6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:af:39:f7:ff:29:f8:64:9e:35:95:04:8a:
59:af:5e:f4:bd:8e:44:2d:fa:57:aa:a5:c0:2e:0d:
5c:af:25:a5:8c:99:eb:59:7f:4e:df:52:b3:35:44:
a9:e6:1e:5b:8c:f3:65:33:1f:55:5e:ed:67:84:a4:
cb:64:c4:93:c8:98:b5:89:b7:36:24:a0:b2:4b:6d:
43:c6:a6:4f:43:4c:da:db:9c:2b:8d:25:f6:f8:57:
c0:df:24:47:34:6c:34:02:d4:01:2f:50:11:76:2d:
55:38:9e:64:3c:77:59:b5:d0:f9:f3:e3:43:e2:de:
66:50:55:80:07:71:ee:cd:62:7f:3d:03:32:9f:63:
68:8b:6c:7f:c4:a3:6d:4b:43:68:cc:01:6c:46:f2:
2e:bd:5e:57:bd:a1:2a:66:d3:f3:ff:94:c4:a1:b3:
04:4f:56:6c:b4:28:f6:88:11:d9:80:9d:1f:ae:15:
f4:88:e8:9a:fa:90:b6:10:b2:f9:7b:bb:dc:05:3f:
e6:1f:e1:5a:bd:c1:49:c0:93:de:ad:7e:e8:df:e0:
da:ce:d6:1e:e3:a0:fa:84:af:58:21:6b:54:b1:40:
44:cf:96:b8:66:89:2e:ba:59:24:45:94:00:5f:4a:
8d:d8:1f:18:e7:e1:d4:8c:77:bf:c3:81:57:80:a7:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:B8:50:F4:B6:5C:11:77:DA:63:10:BB:B1:0E:88:3B:0F:3D:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BE359AE794911F19085511CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.211.0/24
156.245.224.0/24
156.249.154.0/24
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.183.0/24
156.249.185.0/24
156.249.187.0/24
156.249.190.0/23
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:94:a2:8a:57:df:4c:22:50:bb:15:e9:e6:cc:fa:37:a2:e9:
76:e4:2c:00:ac:bb:69:cc:a6:ee:2b:c6:2b:17:67:01:ce:a0:
ad:70:67:b2:75:a3:84:61:aa:7f:66:5d:98:b3:89:d7:fb:54:
5d:b9:98:88:ed:3e:c3:fc:4c:79:43:4f:d6:4f:18:e1:8b:48:
5e:65:de:8f:87:08:93:b2:3d:b0:18:0e:2c:d1:30:5c:5b:e2:
11:07:de:70:a8:86:ab:c6:99:67:09:b9:8f:59:b1:62:47:08:
23:cc:77:b3:d9:f9:cc:5a:4c:55:66:3b:5c:66:7a:ad:b2:6d:
73:08:98:ef:cf:7f:7b:24:2f:23:51:a8:42:21:b4:a3:56:3a:
b1:f9:d5:7e:c9:0a:bc:55:51:e8:c1:9e:76:b9:fd:67:f8:37:
f0:33:ae:2e:a9:8c:1e:f3:fb:01:18:8a:e5:7d:cb:3b:3e:46:
4b:58:7a:13:69:03:5e:4a:b6:14:20:b7:c0:9e:d6:fb:81:2b:
e8:44:f6:a5:d7:b1:ca:71:7d:30:c8:db:3a:f9:98:0f:ae:7b:
32:a0:92:d0:55:9b:f8:7b:f5:e6:d0:67:2d:33:be:6d:a6:65:
bb:07:5e:a2:95:ac:62:22:7c:53:77:19:91:c8:52:c8:35:36:
84:7d:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:07 2026 by rpki-client