Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D884F0254DB11F1AEBC1CE6CE1D38B0.roa
File: 5D884F0254DB11F1AEBC1CE6CE1D38B0.roa (raw, json)
Hash identifier: sO19FJoTvK14YgCuc3qz6QCXdrOuQRXd5hszENbm++E=
Subject key identifier: 69:A0:1E:AA:7A:60:59:41:35:77:74:32:62:EB:8E:6A:8F:91:D5:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D884F0254DB11F1AEBC1CE6CE1D38B0.roa
Signing time: Thu 21 May 2026 06:07:37 +0000
ROA not before: Thu 21 May 2026 06:07:33 +0000
ROA not after: Thu 25 Jun 2026 06:07:33 +0000
asID: 271355
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.192.0/24 maxlen: 24
156.236.193.0/24 maxlen: 24
156.236.249.0/24 maxlen: 24
156.236.250.0/24 maxlen: 24
156.236.251.0/24 maxlen: 24
156.236.252.0/24 maxlen: 24
156.236.253.0/24 maxlen: 24
156.236.254.0/24 maxlen: 24
156.236.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112325 (0x1b6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 06:07:33 2026 GMT
Not After : Jun 25 06:07:33 2026 GMT
Subject: CN=6a0ea129-af57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:24:ac:e3:a4:3a:59:03:6c:cc:80:e6:fa:23:
f4:84:a0:b7:e6:47:43:e0:d5:a4:5a:46:b1:ba:bb:
23:a5:e7:58:f4:15:9f:ef:a0:a9:ae:99:43:5d:db:
00:1e:30:02:7b:3f:4b:10:8e:09:17:2b:8b:be:d7:
19:ab:24:22:e2:59:f3:61:53:ce:a6:da:ce:b4:8a:
ab:a4:6a:bd:4e:c1:1b:2a:fb:ff:ab:cb:62:ca:21:
cc:b7:e3:fb:d1:88:87:fc:a2:5c:95:65:b7:c8:68:
a0:54:6f:a0:a1:13:1d:d6:63:02:79:6e:ff:9f:74:
e6:4c:66:af:5f:cb:8f:39:7d:85:eb:50:70:8d:8b:
35:c5:5f:d9:81:7c:6e:df:dc:d3:0f:37:ad:b7:1c:
40:99:9a:b9:d9:e1:7c:a7:66:96:36:ca:d3:d3:52:
7a:57:6c:a4:e5:6e:77:33:03:57:bb:a1:bf:33:25:
45:ae:99:d8:30:40:12:bd:87:e0:26:9b:09:09:c9:
e1:20:08:58:17:1d:9c:f2:a9:4e:80:02:c1:c4:c6:
7d:8b:65:77:96:7b:20:eb:a8:7e:fc:2d:82:2f:fe:
ff:59:b9:81:ff:5d:6a:0c:c8:39:f7:99:77:99:2a:
9a:47:ba:2e:8f:5b:72:51:6e:61:73:c0:6e:f0:fe:
29:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:1E:AA:7A:60:59:41:35:77:74:32:62:EB:8E:6A:8F:91:D5:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D884F0254DB11F1AEBC1CE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/19
156.236.249.0-156.236.255.255
Signature Algorithm: sha256WithRSAEncryption
31:42:02:e9:10:0d:4a:94:45:e7:98:a1:a1:37:2c:bd:61:2c:
26:db:70:ba:62:b9:bb:87:22:4e:4f:80:13:ab:f9:f4:f5:a4:
f0:5d:ce:a0:98:d5:92:8a:c4:47:b3:29:75:00:42:d1:bf:1b:
ea:23:0a:0b:1c:8d:51:57:61:67:dc:1f:69:8e:87:3e:4f:26:
2e:b5:d8:ea:1c:f3:0d:1d:2f:a9:8d:df:aa:a6:17:d4:04:9d:
98:95:74:0f:c5:9e:6a:f2:7d:38:c3:bd:d0:a8:de:33:e4:4b:
6b:df:85:fa:45:5f:90:24:9c:db:a2:96:06:ab:52:23:28:7c:
95:f2:86:3c:10:0d:ae:90:c5:61:a2:d4:c7:9a:f1:96:80:fd:
0c:d4:59:1e:cd:c6:57:6c:a8:3b:2d:f5:0b:16:16:bd:01:12:
77:a2:7b:c3:8b:7a:09:54:94:83:1c:08:e6:27:77:38:bf:76:
2b:98:21:4d:e4:ff:4c:5b:b7:30:ce:d7:93:dc:46:ef:d4:17:
6a:00:f9:7f:f0:18:e8:33:de:04:63:b3:39:41:26:11:fc:b4:
80:85:5e:40:b7:a6:7e:11:c0:1d:d9:3e:b7:6f:2c:21:b5:35:
6a:6d:d9:15:76:8c:6a:b0:50:43:e3:2d:b9:a0:5c:f7:46:91:
9d:31:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:01 2026 by rpki-client