Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9B050857B611F183ADB5C3CE1D38B0.roa
File: 3D9B050857B611F183ADB5C3CE1D38B0.roa (raw, json)
Hash identifier: aSS/jmXt+eca4UK6m+r23zVc7q70FCx9axqN8aW/hyU=
Subject key identifier: 9B:06:89:58:D7:7D:0A:4D:9A:58:E7:6E:0C:2B:EB:59:0D:23:CB:99
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B93C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9B050857B611F183ADB5C3CE1D38B0.roa
Signing time: Sun 24 May 2026 21:19:26 +0000
ROA not before: Sun 24 May 2026 21:19:21 +0000
ROA not after: Tue 30 Jun 2026 21:19:21 +0000
asID: 9304
IP address blocks: 156.233.66.0/24 maxlen: 24
156.245.163.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.153.0/24 maxlen: 24
156.249.154.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.183.0/24 maxlen: 24
156.249.185.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.249.191.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112956 (0x1b93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 21:19:21 2026 GMT
Not After : Jun 30 21:19:21 2026 GMT
Subject: CN=6a136b5e-ede1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:69:91:f9:75:01:81:c3:af:b1:13:c6:f8:
ea:17:23:3f:e2:46:0d:47:27:73:9a:16:41:1b:14:
72:37:d6:89:89:b8:19:39:13:52:19:d6:3f:26:e4:
86:81:dd:8d:8a:87:6c:fb:1a:90:5a:69:7e:cb:89:
0e:ff:c5:2e:fc:a5:16:d1:d2:65:3f:9b:84:b7:20:
16:9b:42:f3:0f:71:d5:e8:af:6f:f5:a8:ba:bc:70:
a5:8c:66:56:95:df:c9:6d:da:41:71:50:19:8f:66:
bd:2a:1b:c0:9c:37:e5:b3:37:0c:fc:3e:74:91:53:
6d:b3:c1:a1:8d:5b:4c:8a:89:07:ce:82:71:3c:11:
60:76:f0:5e:20:67:e5:76:be:7b:4f:bd:1a:96:5b:
de:a7:c9:c2:64:7f:5a:a6:62:0c:c8:42:78:40:46:
09:b9:4c:0a:a3:7a:6a:e8:af:36:bf:1b:3c:dd:20:
cc:b3:8b:71:5a:a4:87:ab:88:99:88:41:20:86:a0:
fa:bd:cf:61:0e:c7:77:94:8d:2a:17:d2:96:09:d8:
5f:46:94:11:60:84:67:10:8b:9c:3a:7c:86:43:4b:
45:cb:c6:8d:f9:dd:65:d4:f8:c6:76:78:14:f2:b2:
7c:14:db:d6:15:ec:8a:fb:65:1f:78:82:8f:46:40:
3c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:89:58:D7:7D:0A:4D:9A:58:E7:6E:0C:2B:EB:59:0D:23:CB:99
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D9B050857B611F183ADB5C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.66.0/24
156.245.163.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.249.133.0/24
156.249.153.0-156.249.154.255
156.249.167.0/24
156.249.183.0/24
156.249.185.0/24
156.249.190.0/23
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b0:f9:99:c8:04:80:3e:f6:75:8d:09:01:1e:46:4e:04:1a:
7f:c0:e6:b5:5b:6b:0f:f8:16:9f:57:80:64:ac:a5:2e:a9:a1:
79:a2:d7:5c:cf:04:23:2b:cd:0a:54:5a:ad:e1:93:04:b2:33:
a8:0f:7a:fb:53:2f:20:84:7c:bb:00:2d:1c:0e:28:60:fb:c7:
73:0d:b9:0a:8f:68:4e:a6:11:d4:29:85:2a:61:73:39:f5:f9:
8e:99:e3:10:67:b0:1b:92:f1:cb:07:b1:45:e8:8b:50:a0:7e:
91:15:34:53:8e:b5:38:75:5c:1d:99:23:38:f1:ef:ad:08:30:
b4:cf:5a:bb:98:14:c4:f1:49:d0:2a:2b:7c:a6:7c:1b:4f:fd:
a4:d9:9d:d3:3a:26:eb:3e:23:1e:61:d5:1f:c1:11:55:99:8c:
9b:4b:ec:c4:4b:97:1b:a5:65:4c:4a:73:88:0c:85:e4:87:bf:
e1:85:6c:ad:11:38:59:3c:22:d5:b2:95:07:50:75:fa:1e:a8:
51:44:3c:f9:f0:1a:81:6c:4c:dd:7e:c3:9f:86:b9:12:09:6a:
c4:a1:56:17:39:58:23:10:2a:bd:48:f7:05:8e:6a:e2:2d:9a:
19:ac:e0:24:e6:0b:c5:14:3b:eb:2f:3c:be:af:ba:1b:95:07:
ca:70:b2:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:09 2026 by rpki-client