Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91F1E6601811F197A407BECE1D38B0.roa
File: 4D91F1E6601811F197A407BECE1D38B0.roa (raw, json)
Hash identifier: xYtM2SUxXG1EEqwnZMAqamto0FUQtoof6PzyUjqx7RA=
Subject key identifier: 2B:3F:1E:C9:1F:09:8F:A5:23:2B:17:63:D3:43:6A:0B:A3:3F:23:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91F1E6601811F197A407BECE1D38B0.roa
Signing time: Thu 04 Jun 2026 13:21:32 +0000
ROA not before: Thu 04 Jun 2026 13:21:27 +0000
ROA not after: Thu 27 Aug 2026 13:21:27 +0000
asID: 9294
IP address blocks: 156.236.32.0/19 maxlen: 24
156.239.64.0/18 maxlen: 24
156.244.160.0/19 maxlen: 24
156.244.224.0/19 maxlen: 24
156.247.64.0/18 maxlen: 24
156.250.32.0/19 maxlen: 24
156.252.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113626 (0x1bbda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 13:21:27 2026 GMT
Not After : Aug 27 13:21:27 2026 GMT
Subject: CN=6a217bdc-3da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:f9:a3:f6:6b:62:d1:36:79:2d:6f:da:7c:
ec:1f:cd:a4:67:57:01:34:5f:62:f1:91:d7:f5:19:
f5:a3:57:6f:1a:32:93:50:59:d4:f1:e4:43:de:39:
52:a6:8e:cc:f8:03:59:8f:18:12:6a:85:7e:82:19:
fa:de:3a:67:20:79:6f:d1:13:be:4d:47:56:f5:47:
a3:c2:17:29:fe:0b:62:79:18:bb:54:f0:65:5c:d6:
05:2b:75:e9:e1:d4:0f:68:f9:fa:a7:46:b7:5b:14:
84:56:4b:5b:49:64:85:b4:8e:e9:a1:2e:02:1f:be:
a1:b9:34:4f:09:88:eb:17:0d:b9:8e:a9:87:9c:ab:
20:62:8b:08:da:03:8b:01:2a:81:32:b0:8e:fc:ee:
b5:ec:44:7a:22:ae:44:a7:93:9e:1b:d5:b9:8a:1a:
20:15:01:ca:c7:21:f5:af:b1:0a:fe:ad:e4:7f:74:
5b:8d:31:9f:db:6f:dd:13:1c:a0:46:3c:21:6b:15:
70:25:04:76:58:f3:48:9e:cb:2b:c5:65:5b:49:f9:
10:36:c4:95:07:58:b8:26:7a:58:9d:19:da:54:a5:
ce:5d:72:5a:21:be:07:fb:14:51:1e:c5:41:e5:3e:
62:0b:76:a9:3c:c8:97:9f:ec:71:cb:d9:dd:af:fa:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3F:1E:C9:1F:09:8F:A5:23:2B:17:63:D3:43:6A:0B:A3:3F:23:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D91F1E6601811F197A407BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/19
156.239.64.0/18
156.244.160.0/19
156.244.224.0/19
156.247.64.0/18
156.250.32.0/19
156.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
70:fa:19:95:ed:d3:a5:dc:27:d4:eb:71:ca:1b:19:72:05:b3:
e2:23:1e:e0:cc:c3:21:cb:70:49:79:13:c0:f3:62:87:dd:b2:
21:0c:e9:e2:c4:53:d9:1f:0d:40:f5:1a:f2:11:27:40:30:b2:
72:bf:46:eb:05:63:5b:2c:23:61:17:c5:7d:2a:3a:74:ae:80:
0d:a1:a7:24:2f:f6:66:d4:9d:d2:63:99:de:dc:aa:d6:ba:d6:
60:57:62:cd:2b:42:34:f0:19:57:f6:14:7a:e7:58:1b:ef:3e:
5d:c5:f9:11:66:c6:9d:1f:78:bf:99:a2:37:74:7c:34:de:aa:
e4:ef:95:22:8e:c6:14:be:ed:a0:78:38:e2:e6:44:1c:7b:ce:
73:fa:86:bf:7a:4f:a1:64:f9:84:6f:09:40:89:60:aa:d1:71:
21:09:7b:c6:c0:58:de:82:e3:c5:25:15:13:58:40:87:44:df:
50:7b:82:14:36:ee:8f:00:cd:fb:09:53:72:1a:a9:c4:99:55:
0e:fd:c7:de:66:40:0d:08:ea:84:0c:2b:c9:24:ca:04:9b:6c:
4f:b5:e6:15:d0:8c:35:59:52:2e:e3:90:9b:06:e9:8d:4d:a5:
75:b9:c8:01:3f:57:10:49:50:d1:4d:46:05:12:c6:d7:b8:f5:
36:da:65:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:18 2026 by rpki-client