Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDFA402456D11F19B1F3C03CF1D38B0.roa
File: 4CDFA402456D11F19B1F3C03CF1D38B0.roa (raw, json)
Hash identifier: 05C6Q/IkkVF5d+TPiCQKxyQq4pBHkMwUvTRlX/srHBE=
Subject key identifier: D5:9E:A9:1B:5F:7A:9D:0C:B9:8F:84:85:BF:3A:47:5E:CE:06:E7:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDFA402456D11F19B1F3C03CF1D38B0.roa
Signing time: Fri 01 May 2026 14:51:57 +0000
ROA not before: Fri 01 May 2026 14:51:52 +0000
ROA not after: Thu 04 Jun 2026 14:51:52 +0000
asID: 18013
IP address blocks: 156.234.0.0/24 maxlen: 24
156.234.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110790 (0x1b0c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 14:51:52 2026 GMT
Not After : Jun 4 14:51:52 2026 GMT
Subject: CN=69f4be0d-5fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:61:e9:10:a8:a8:1a:7f:f2:f1:00:c9:01:
a1:19:30:e5:72:08:10:ad:ee:11:e4:2a:1f:fd:ae:
a4:38:59:73:00:1f:51:cd:c2:3b:ad:06:d7:0d:26:
fb:f3:59:62:e5:27:45:49:64:eb:1d:fc:70:33:86:
d7:de:b9:9f:81:57:ba:55:77:bb:8f:89:ff:54:3a:
aa:28:70:8a:b1:30:11:df:c4:9a:75:05:ff:f4:6c:
e6:09:3b:3b:17:18:7f:13:f8:8c:a1:53:cb:db:15:
ac:52:37:0d:49:7e:1e:d0:f0:e0:b4:e6:5a:bf:71:
d7:1f:97:e7:41:28:2f:37:80:f7:5e:1b:74:e9:6a:
b0:8a:12:84:51:fd:d7:6f:8f:07:59:62:42:43:95:
02:fa:55:fc:b9:79:c3:09:78:2e:47:14:6e:33:9a:
f9:2d:01:05:61:26:0c:ec:bd:ca:7e:bf:af:2c:9b:
22:a8:1b:16:26:c6:61:60:4c:5f:0c:14:ce:af:e6:
a0:8c:57:36:ad:bf:87:b6:f0:aa:e5:40:06:4c:9e:
a0:e9:aa:2a:dd:c8:c4:53:9f:42:c9:db:87:5f:df:
90:42:ce:8a:1b:5e:21:3e:c0:eb:0f:91:2c:f0:aa:
80:0e:77:ac:8b:ce:be:a1:6a:54:a4:40:47:ce:b6:
00:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9E:A9:1B:5F:7A:9D:0C:B9:8F:84:85:BF:3A:47:5E:CE:06:E7:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CDFA402456D11F19B1F3C03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
156.234.7.0/24
Signature Algorithm: sha256WithRSAEncryption
26:20:8d:6b:42:52:71:30:5d:33:3c:25:05:03:ea:36:ee:c4:
98:41:9b:e3:7b:54:8c:e7:28:ff:2f:27:a1:40:86:1b:87:9e:
fb:1f:70:ef:a4:d2:13:5d:69:b9:03:e8:15:8d:6c:f8:23:aa:
e0:ea:60:93:59:66:e2:8a:6b:a1:a1:eb:2e:6f:3e:d5:84:c6:
a3:76:ea:f9:a0:5e:e9:40:a2:43:29:05:16:da:bf:a3:f9:1e:
6d:21:28:9e:8d:b7:77:15:dc:1d:9d:16:4c:31:c6:4d:57:20:
d9:32:c0:4f:9a:57:30:d6:cf:53:a3:08:1a:a3:d7:c2:65:77:
0c:40:6f:47:03:7e:75:c0:8b:79:f2:09:cf:a7:85:15:ab:d2:
3f:bc:5c:d5:1f:f2:8c:44:ed:39:91:44:c7:e5:1a:3b:e8:76:
6d:10:81:4c:d1:46:4a:64:68:f4:9c:03:e7:92:67:3d:6d:2a:
f0:09:96:3a:9b:c3:99:98:1b:e2:29:3e:20:ff:f0:76:4d:3c:
f2:65:7f:a5:a7:3a:58:74:8d:68:30:c4:00:65:7f:33:37:48:
ae:44:08:41:11:6f:8e:d2:79:16:12:b9:f6:68:27:e5:a5:90:
39:05:d3:f9:88:02:2d:72:a0:fe:78:b8:3b:2a:5a:6c:4d:cc:
59:54:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:35:43 2026 by rpki-client