Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B13865A6F11F1AE5285DFCE1D38B0.roa
File: 657B13865A6F11F1AE5285DFCE1D38B0.roa (raw, json)
Hash identifier: feFeobh/qHGT9dqe1XLpvWnVHlNXry83j/na9Njs9a4=
Subject key identifier: AF:CF:C7:E9:5A:82:06:50:03:5D:DE:05:97:DD:BD:43:CE:F7:83:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B13865A6F11F1AE5285DFCE1D38B0.roa
Signing time: Thu 28 May 2026 08:29:52 +0000
ROA not before: Thu 28 May 2026 08:29:47 +0000
ROA not after: Mon 06 Jul 2026 08:29:47 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113275 (0x1ba7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:29:47 2026 GMT
Not After : Jul 6 08:29:47 2026 GMT
Subject: CN=6a17fd00-bcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:29:a0:3c:89:58:0d:11:86:2f:2b:d6:6f:ee:
13:62:b8:12:99:bc:72:74:ec:f1:af:86:7f:50:29:
6e:0c:fe:c5:f4:12:21:66:4d:6c:14:41:35:47:ea:
8a:e0:7d:8b:13:55:a8:a0:fe:7a:4d:8a:76:30:39:
b2:46:15:f4:01:2a:5f:c0:17:f9:23:7a:a3:6f:b8:
cf:95:93:42:ef:4d:ea:ee:33:95:e8:a7:6b:e9:18:
09:0e:56:6e:08:48:3d:6b:0d:c9:a6:76:67:7b:56:
64:b0:e8:2b:06:67:00:8c:ed:2d:a0:94:db:07:f1:
31:82:35:cf:b4:2e:42:22:0e:8f:3d:1d:1d:3c:10:
a4:34:c4:3d:78:72:12:cd:72:38:ff:fb:96:10:9f:
55:a2:cc:a7:7a:a5:a7:50:46:d8:d8:ff:d7:8f:bb:
74:ec:59:8f:6f:d3:67:13:cd:31:f4:96:f8:e2:32:
9a:62:13:38:4e:b3:8d:fa:aa:14:4c:18:f9:9f:ab:
66:72:eb:79:bb:fb:4d:65:eb:9d:8e:3d:f5:1b:47:
00:76:8d:62:9d:b2:b2:6d:bf:25:3f:95:87:9c:ab:
32:0c:76:ba:22:c4:b6:a0:04:da:bf:d8:23:3a:1a:
c8:ad:a4:5b:e2:bf:8c:79:39:f1:c3:87:96:7d:58:
70:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CF:C7:E9:5A:82:06:50:03:5D:DE:05:97:DD:BD:43:CE:F7:83:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/657B13865A6F11F1AE5285DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
45:85:fb:8d:e6:58:a4:d3:94:3a:43:1d:ed:80:6c:ea:94:6f:
fc:04:c5:a9:17:c1:1e:c8:df:cc:46:ac:2c:dc:dc:f0:d6:67:
7d:fb:c0:ba:fa:90:13:70:51:87:f9:47:40:6e:de:2b:f5:9b:
b8:c0:9f:6b:79:44:b6:39:10:db:0d:52:75:8b:2f:57:aa:2a:
10:e1:9e:1b:da:b5:52:f9:c7:18:a2:59:2f:b4:e9:cf:9d:11:
91:b1:af:bd:cf:ac:36:48:c0:c6:16:a9:c4:97:ed:24:dc:e1:
c9:3f:ad:88:95:5d:cb:58:b5:5e:d3:b5:1f:da:67:54:11:16:
c1:6e:01:91:c7:ff:66:d4:f1:57:47:b7:fc:34:6e:73:a8:47:
f4:51:44:2d:7b:4f:b8:1b:69:7e:a2:cc:fe:51:eb:ba:d4:27:
60:e7:b4:88:b7:22:19:17:2f:0e:df:34:35:d2:a6:e0:54:b6:
8a:59:dc:96:e6:db:e3:95:34:43:5c:a0:b1:47:ef:c2:5d:bb:
12:04:4d:93:69:85:6b:a8:ed:1a:a5:05:72:dc:17:6d:45:ae:
b9:1f:b2:86:a9:10:b3:d1:da:9a:79:0c:3f:ba:5a:71:13:a5:
f1:dc:fa:e7:c2:65:1d:d5:52:26:b8:f0:5b:4c:a8:3b:d7:5c:
fd:55:de:f7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbp7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDgyOTQ3WhcNMjYwNzA2MDgyOTQ3WjAYMRYw
FAYDVQQDEw02YTE3ZmQwMC1iY2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8SmgPIlYDRGGLyvWb+4TYrgSmbxydOzxr4Z/UCluDP7F9BIhZk1sFEE1
R+qK4H2LE1WooP56TYp2MDmyRhX0ASpfwBf5I3qjb7jPlZNC703q7jOV6Kdr6RgJ
DlZuCEg9aw3JpnZne1ZksOgrBmcAjO0toJTbB/ExgjXPtC5CIg6PPR0dPBCkNMQ9
eHISzXI4//uWEJ9VosyneqWnUEbY2P/Xj7t07FmPb9NnE80x9Jb44jKaYhM4TrON
+qoUTBj5n6tmcut5u/tNZeudjj31G0cAdo1inbKybb8lP5WHnKsyDHa6IsS2oATa
v9gjOhrIraRb4r+MeTnxw4eWfVhwnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK/P
x+laggZQA13eBZfdvUPO94OHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NTdCMTM4NjVBNkYxMUYxQUU1Mjg1REZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBFhfuN5lik05Q6Qx3tgGzqlG/8BMWpF8EeyN/MRqws3Nzw1md9+8C6+pAT
cFGH+UdAbt4r9Zu4wJ9reUS2ORDbDVJ1iy9XqioQ4Z4b2rVS+ccYolkvtOnPnRGR
sa+9z6w2SMDGFqnEl+0k3OHJP62IlV3LWLVe07Uf2mdUERbBbgGRx/9m1PFXR7f8
NG5zqEf0UUQte0+4G2l+osz+Ueu61Cdg57SItyIZFy8O3zQ10qbgVLaKWdyW5tvj
lTRDXKCxR+/CXbsSBE2TaYVrqO0apQVy3BdtRa65H7KGqRCz0dqaeQw/ulpxE6Xx
3PrnwmUd1VImuPBbTKg711z9Vd73
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:53 2026 by rpki-client