Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649733DE544111F1A77A0FB5CE1D38B0.roa
File: 649733DE544111F1A77A0FB5CE1D38B0.roa (raw, json)
Hash identifier: COST6v3IoWERHN204pfUyRVQxDqaH0Q4xpRrxFmVRJw=
Subject key identifier: F6:1B:5E:1F:48:37:9B:34:B3:BF:CE:AC:A8:5B:E7:9D:B3:A7:2F:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B63C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649733DE544111F1A77A0FB5CE1D38B0.roa
Signing time: Wed 20 May 2026 11:45:27 +0000
ROA not before: Wed 20 May 2026 11:45:22 +0000
ROA not after: Sat 08 Aug 2026 11:45:22 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112188 (0x1b63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:45:22 2026 GMT
Not After : Aug 8 11:45:22 2026 GMT
Subject: CN=6a0d9ed6-5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:60:b2:62:6e:ef:d0:57:17:03:e3:0f:5a:
bd:e6:43:c5:2e:23:fd:a2:f4:94:03:7f:fd:98:85:
f6:6c:58:20:78:f9:e1:f9:ff:e6:2f:33:66:98:c3:
f3:98:df:80:da:ae:91:7d:c8:6a:20:d2:98:da:f6:
e8:79:a5:0c:56:93:e7:d6:75:8f:fe:fe:5d:f5:15:
32:59:3d:dc:b7:7c:3d:2f:67:06:81:cf:2e:37:c1:
ef:ee:5d:d5:ca:6e:8b:db:ad:17:87:6a:ba:a9:e2:
88:42:30:37:20:44:d4:b2:af:cd:b3:9c:ec:d9:59:
11:4d:6c:0c:ca:2b:6e:0b:96:1e:51:bb:14:38:4f:
6f:5b:a0:da:e7:ab:87:b1:2e:2a:0c:c6:7c:6a:2b:
31:64:2b:c2:5b:40:b3:60:98:41:1b:31:f8:ec:c5:
e9:6e:97:f3:ee:6b:b8:b1:21:c6:bb:d2:e7:f3:69:
4c:6a:c3:23:73:90:a2:a7:17:f1:5a:bc:47:1e:72:
58:89:67:24:f2:4a:52:87:4a:ac:21:76:18:fa:63:
9a:36:76:e0:79:ba:f9:4a:d2:a9:44:81:01:eb:6d:
a8:75:00:bc:28:4f:97:62:4c:e5:37:66:cd:06:33:
90:69:c0:5c:5f:dc:43:c8:87:6a:17:de:7d:32:72:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:5E:1F:48:37:9B:34:B3:BF:CE:AC:A8:5B:E7:9D:B3:A7:2F:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/649733DE544111F1A77A0FB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
88:9c:39:4a:52:29:66:9e:15:76:a0:9a:7d:56:ea:8f:48:e5:
35:fb:62:28:a1:f7:56:c9:45:34:27:8e:4a:cf:e0:1e:71:62:
b4:4f:9f:69:4d:b4:69:5e:57:c7:c1:49:ec:ec:9c:dc:d0:9b:
db:c9:07:b1:25:5a:ec:94:ef:0c:d0:3b:36:f9:9f:2d:f7:c4:
24:cd:b6:f2:3e:ab:be:24:0c:42:dc:7b:d3:86:fa:1f:15:e4:
ac:7e:86:60:8d:86:27:e1:dc:35:07:fd:7a:9c:eb:eb:56:f3:
ea:c8:ff:d9:cd:23:5e:ba:5d:99:89:78:37:00:f3:46:53:3f:
5a:67:86:09:b1:8c:a9:17:20:af:5a:8a:4c:c1:b1:79:d2:e0:
82:a6:02:64:41:72:95:2c:34:4a:a5:85:dc:c6:99:c0:b4:03:
17:79:fc:83:c8:6e:3d:85:fc:bc:63:b2:14:e2:ff:ee:78:16:
40:cd:48:22:7d:90:56:6f:4f:2d:a7:fb:e6:97:ca:5f:1f:96:
ef:42:fa:6c:2d:d2:2c:a2:a1:2b:e7:72:82:aa:fd:5c:66:f3:
39:34:2f:6a:24:f5:32:3b:64:d2:c4:0e:c2:3b:2b:21:01:fe:
cf:ba:26:40:7a:94:87:56:23:f0:f8:05:a7:d0:99:5c:00:e6:
ad:e1:b1:d3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbY8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMTE0NTIyWhcNMjYwODA4MTE0NTIyWjAYMRYw
FAYDVQQDEw02YTBkOWVkNi01YTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArQ1gsmJu79BXFwPjD1q95kPFLiP9ovSUA3/9mIX2bFggePnh+f/mLzNm
mMPzmN+A2q6RfchqINKY2vboeaUMVpPn1nWP/v5d9RUyWT3ct3w9L2cGgc8uN8Hv
7l3Vym6L260Xh2q6qeKIQjA3IETUsq/Ns5zs2VkRTWwMyituC5YeUbsUOE9vW6Da
56uHsS4qDMZ8aisxZCvCW0CzYJhBGzH47MXpbpfz7mu4sSHGu9Ln82lMasMjc5Ci
pxfxWrxHHnJYiWck8kpSh0qsIXYY+mOaNnbgebr5StKpRIEB622odQC8KE+XYkzl
N2bNBjOQacBcX9xDyIdqF959MnKsMQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPYb
Xh9IN5s0s7/OrKhb552zpy9hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDk3MzNERTU0NDExMUYxQTc3QTBGQjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAIicOUpSKWaeFXagmn1W6o9I5TX7Yiih
91bJRTQnjkrP4B5xYrRPn2lNtGleV8fBSezsnNzQm9vJB7ElWuyU7wzQOzb5ny33
xCTNtvI+q74kDELce9OG+h8V5Kx+hmCNhifh3DUH/Xqc6+tW8+rI/9nNI166XZmJ
eDcA80ZTP1pnhgmxjKkXIK9aikzBsXnS4IKmAmRBcpUsNEqlhdzGmcC0Axd5/IPI
bj2F/LxjshTi/+54FkDNSCJ9kFZvTy2n++aXyl8flu9C+mwt0iyioSvncoKq/Vxm
8zk0L2ok9TI7ZNLEDsI7KyEB/s+6JkB6lIdWI/D4BafQmVwA5q3hsdM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client