Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F882BCA6FBA11F1AB53B607CF1D38B0.roa
File: 5F882BCA6FBA11F1AB53B607CF1D38B0.roa (raw, json)
Hash identifier: 5kinkkO2RA1W8YG1zrBpKm9yhLvCg3nMZtT8Vwo2b04=
Subject key identifier: 12:D7:2E:04:54:C8:3E:0C:F9:96:2A:D3:C8:8F:3D:DD:AD:6F:36:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C01C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F882BCA6FBA11F1AB53B607CF1D38B0.roa
Signing time: Wed 24 Jun 2026 10:49:28 +0000
ROA not before: Wed 24 Jun 2026 10:49:24 +0000
ROA not after: Sat 01 Aug 2026 10:49:24 +0000
asID: 44559
IP address blocks: 156.233.194.0/24 maxlen: 24
156.233.195.0/24 maxlen: 24
156.233.204.0/24 maxlen: 24
156.239.17.0/24 maxlen: 24
156.239.19.0/24 maxlen: 24
156.239.20.0/24 maxlen: 24
156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.239.133.0/24 maxlen: 24
156.239.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114716 (0x1c01c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 10:49:24 2026 GMT
Not After : Aug 1 10:49:24 2026 GMT
Subject: CN=6a3bb638-ff5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:73:e6:4e:62:4a:55:67:ac:81:6b:e2:92:
0f:af:ee:5b:08:26:83:a6:e1:d4:a2:e8:11:d5:9f:
9b:e5:fd:99:d0:e4:b9:0a:73:dd:cf:6d:cf:4d:55:
df:e3:49:2f:e8:76:19:49:b1:58:38:1a:e8:a5:ca:
80:a5:69:12:c4:7a:a6:52:e8:d4:67:c2:b7:5a:15:
cc:35:b4:b7:66:71:d8:2c:7e:6f:57:e4:a4:4d:35:
36:f0:ad:07:09:fb:ce:4c:ea:6c:1c:9b:c2:52:7c:
ab:33:be:d6:f5:b0:e3:bc:7a:b5:57:71:56:7d:96:
c1:ec:59:71:12:ba:d7:dc:11:b5:a2:6d:50:a9:e6:
4c:a6:b0:75:3c:ca:a4:d0:df:0f:8a:7b:79:1b:ed:
b7:39:9c:fc:c1:b4:15:92:56:57:d2:ba:aa:3b:1a:
70:04:82:1e:e4:f6:81:ec:2c:c6:dc:7f:52:1a:7a:
bf:37:14:ee:3d:8a:2d:1c:00:2f:b0:ea:5d:9a:54:
12:36:4e:d2:2d:0e:cb:46:bf:0a:59:83:e3:52:94:
58:30:d5:49:96:2b:11:82:0c:2a:0c:82:aa:80:68:
a8:34:4f:0c:5c:cb:77:53:0c:30:e3:fe:47:5c:bb:
38:e7:54:9b:27:4c:6f:b7:76:af:10:6b:cf:2a:9d:
a7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:2E:04:54:C8:3E:0C:F9:96:2A:D3:C8:8F:3D:DD:AD:6F:36:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F882BCA6FBA11F1AB53B607CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.194.0/23
156.233.204.0/24
156.239.17.0/24
156.239.19.0-156.239.22.255
156.239.133.0/24
156.239.135.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2e:9b:ef:5c:ce:f0:7c:7a:67:08:88:77:99:36:13:69:ac:
e6:ea:f6:06:ae:46:67:d0:c2:5e:fe:06:1c:b9:3a:c4:33:2b:
12:fc:4d:36:aa:29:10:5b:eb:7d:d1:8c:c5:c5:6d:0e:ab:70:
99:29:10:b1:a4:ca:a3:08:7f:13:d9:2e:7f:c6:1e:aa:e8:8f:
dc:81:82:0c:fd:1d:10:3c:47:a0:15:5e:e0:f5:c8:18:3c:8d:
93:46:28:bc:8f:28:86:9b:10:a1:13:1e:45:31:88:0e:70:94:
a4:c5:1a:0f:f7:07:8c:04:b1:5a:1d:f9:04:7f:c7:bb:04:df:
80:37:7a:a6:fa:e9:5d:2a:e3:ca:fd:f0:da:d0:e1:d6:1c:c2:
2c:34:a3:2d:60:00:fe:ef:be:82:6b:c1:0a:6e:92:64:5e:2f:
1b:ef:33:8f:de:94:8e:b3:88:5b:3d:bb:ce:8b:f0:96:25:e8:
8c:d1:f6:9c:d2:20:49:5b:05:a6:d8:cc:0a:f3:90:cf:47:f0:
2f:df:fc:4f:41:d5:55:bc:3e:24:6e:4d:7d:d0:bb:ac:db:9b:
1b:9f:1e:35:4e:cf:6e:8e:c6:8b:b7:25:85:12:df:f4:51:a6:
2f:a8:d3:c4:5e:ba:66:73:33:78:37:9a:15:28:0c:83:59:dc:
b3:28:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:30 2026 by rpki-client