Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/444FDB1842E811F1A3A81BB6CE1D38B0.roa
File: 444FDB1842E811F1A3A81BB6CE1D38B0.roa (raw, json)
Hash identifier: FFOwWL0YQLZpifFBaz/rEX9qguBlgFMFKxb/63q3Ma0=
Subject key identifier: 6B:7C:DF:A8:05:73:4E:9E:CA:50:81:96:38:B3:3F:8D:C3:E4:98:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/444FDB1842E811F1A3A81BB6CE1D38B0.roa
Signing time: Tue 28 Apr 2026 09:54:37 +0000
ROA not before: Tue 28 Apr 2026 09:54:33 +0000
ROA not after: Thu 04 Jun 2026 09:54:33 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110488 (0x1af98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 09:54:33 2026 GMT
Not After : Jun 4 09:54:33 2026 GMT
Subject: CN=69f083dd-947d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:46:c6:26:8a:6b:66:ef:b4:d3:90:b3:2e:
a7:76:15:58:ec:68:c9:f7:fc:e6:3a:3b:9f:38:e0:
cc:3e:dd:05:97:49:37:54:ec:0a:3c:4c:6c:52:c9:
f8:24:fd:c7:60:42:71:d2:3c:58:bc:8d:2d:1f:48:
a6:d6:d2:b0:b9:af:3d:06:55:2f:ca:86:42:ab:08:
8f:c6:9e:5a:de:1b:69:0b:f4:dc:96:21:8d:7e:f5:
d6:07:50:ec:98:a6:d1:d6:1e:07:04:dd:ec:19:8e:
fc:4e:0f:ff:f6:ea:e3:19:12:5d:d7:d6:9a:5b:a7:
2a:25:bd:02:7f:04:79:c1:b3:8c:28:68:3a:11:74:
ab:92:e7:32:f2:de:b9:28:03:91:fa:09:ec:4e:a7:
df:e6:fc:54:1b:e5:45:35:e4:fc:45:21:7d:6f:86:
53:36:3f:da:67:7b:cb:db:5d:9e:8b:a2:09:6c:bc:
2b:18:0e:91:34:d9:ce:b1:7b:70:86:c3:50:80:d2:
ba:12:92:89:19:35:a0:b5:30:25:8c:79:19:c2:d4:
a9:0b:51:b4:40:50:c2:9b:bb:61:62:fd:76:10:ad:
31:a7:cf:c0:4a:46:2c:0e:1b:79:ef:48:5b:6d:c1:
1a:4e:b6:eb:1a:f0:28:12:28:36:fa:7b:83:42:3e:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:DF:A8:05:73:4E:9E:CA:50:81:96:38:B3:3F:8D:C3:E4:98:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/444FDB1842E811F1A3A81BB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:a3:f7:16:90:10:7c:dd:35:c3:51:ba:96:8a:3d:cf:08:3f:
0b:7f:af:89:01:a7:ba:24:27:73:fc:20:d0:a2:cb:a9:0b:0a:
63:e2:20:75:2a:da:8c:0e:cf:1c:90:52:71:60:45:50:aa:f9:
bb:6c:f7:e4:52:56:67:26:1c:10:e6:ab:41:13:54:f9:64:96:
8c:de:db:c2:d8:86:4a:5a:bd:86:ef:4e:ad:3a:a1:81:24:78:
07:bc:d8:30:3c:d1:1b:07:88:91:a9:76:0c:bf:db:06:54:4d:
a2:cf:0d:81:60:e4:64:53:42:f0:40:f2:69:71:70:38:64:8c:
cc:23:f0:af:38:7a:8b:b5:ec:0b:15:7b:d5:8e:53:14:63:e7:
3a:5a:ed:a1:a1:76:d1:ab:51:5e:db:6c:44:7d:22:41:88:bb:
43:76:21:8b:53:b7:77:00:96:66:45:60:d7:b3:70:e0:14:c5:
de:29:f7:be:8b:2f:5b:8b:cf:65:70:0e:69:85:cc:23:8d:58:
12:b2:76:6c:6d:7f:20:fd:49:b6:25:be:47:07:1f:a1:76:8f:
2f:b2:40:c5:78:27:b0:e9:39:3b:83:13:ef:d2:9e:1b:ec:ed:
98:b4:54:fa:b8:3b:7c:b1:da:ab:92:91:6f:8c:52:0b:07:18:
c5:94:af:16
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAa+YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDI4MDk1NDMzWhcNMjYwNjA0MDk1NDMzWjAYMRYw
FAYDVQQDEw02OWYwODNkZC05NDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwGhGxiaKa2bvtNOQsy6ndhVY7GjJ9/zmOjufOODMPt0Fl0k3VOwKPExs
Usn4JP3HYEJx0jxYvI0tH0im1tKwua89BlUvyoZCqwiPxp5a3htpC/TcliGNfvXW
B1DsmKbR1h4HBN3sGY78Tg//9urjGRJd19aaW6cqJb0CfwR5wbOMKGg6EXSrkucy
8t65KAOR+gnsTqff5vxUG+VFNeT8RSF9b4ZTNj/aZ3vL212ei6IJbLwrGA6RNNnO
sXtwhsNQgNK6EpKJGTWgtTAljHkZwtSpC1G0QFDCm7thYv12EK0xp8/ASkYsDht5
70hbbcEaTrbrGvAoEig2+nuDQj6rzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt8
36gFc06eylCBljizP43D5JhpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NDRGREIxODQyRTgxMUYxQTNBODFCQjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOoAAwQAnOoHMA0GCSqGSIb3
DQEBCwUAA4IBAQB7o/cWkBB83TXDUbqWij3PCD8Lf6+JAae6JCdz/CDQosupCwpj
4iB1KtqMDs8ckFJxYEVQqvm7bPfkUlZnJhwQ5qtBE1T5ZJaM3tvC2IZKWr2G706t
OqGBJHgHvNgwPNEbB4iRqXYMv9sGVE2izw2BYORkU0LwQPJpcXA4ZIzMI/CvOHqL
tewLFXvVjlMUY+c6Wu2hoXbRq1Fe22xEfSJBiLtDdiGLU7d3AJZmRWDXs3DgFMXe
Kfe+iy9bi89lcA5phcwjjVgSsnZsbX8g/Um2Jb5HBx+hdo8vskDFeCew6Tk7gxPv
0p4b7O2YtFT6uDt8sdqrkpFvjFILBxjFlK8W
-----END CERTIFICATE-----
Generated at Wed May 6 05:36:17 2026 by rpki-client