Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E2EEAE456111F18CD92EBDCE1D38B0.roa
File: 68E2EEAE456111F18CD92EBDCE1D38B0.roa (raw, json)
Hash identifier: SHkTkwLMlaarOOOFQDzcttwJ89Zuq7Cv3lRl4nHrsyM=
Subject key identifier: 0A:A6:EB:1F:2B:44:36:A8:5C:A0:02:9F:3E:8B:31:12:A0:4D:76:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E2EEAE456111F18CD92EBDCE1D38B0.roa
Signing time: Fri 01 May 2026 13:26:50 +0000
ROA not before: Fri 01 May 2026 13:26:46 +0000
ROA not after: Fri 30 Apr 2027 13:26:46 +0000
asID: 328608
IP address blocks: 156.255.106.0/24 maxlen: 24
156.255.107.0/24 maxlen: 24
156.255.108.0/24 maxlen: 24
156.255.109.0/24 maxlen: 24
156.255.110.0/24 maxlen: 24
156.255.111.0/24 maxlen: 24
156.255.112.0/24 maxlen: 24
156.255.113.0/24 maxlen: 24
156.255.114.0/24 maxlen: 24
156.255.115.0/24 maxlen: 24
156.255.120.0/24 maxlen: 24
156.255.121.0/24 maxlen: 24
156.255.122.0/24 maxlen: 24
156.255.123.0/24 maxlen: 24
156.255.124.0/24 maxlen: 24
156.255.125.0/24 maxlen: 24
156.255.126.0/24 maxlen: 24
156.255.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110764 (0x1b0ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 13:26:46 2026 GMT
Not After : Apr 30 13:26:46 2027 GMT
Subject: CN=69f4aa1a-f61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:3d:e0:97:7f:ac:fb:7d:02:32:10:4a:b1:
d3:07:2e:08:69:d1:a0:f4:5b:0b:ea:ab:e7:1d:de:
74:71:eb:39:fa:1c:b2:a8:89:00:35:43:62:68:fd:
fc:5a:d0:9f:9c:9d:7c:98:45:3d:9c:f3:62:f5:ac:
26:0d:e4:7c:46:9c:75:03:e8:23:9a:d6:e4:6d:31:
78:69:14:49:54:a9:a8:fc:1c:36:46:08:34:a6:1b:
23:4f:ad:db:03:90:12:83:19:68:89:3c:28:3d:3c:
0d:59:a5:48:2c:78:4b:da:0c:29:38:6b:2f:56:e1:
9d:be:70:82:bb:b2:3d:c2:98:c5:90:79:b7:10:67:
ca:d4:f6:d6:d1:04:28:c0:c2:3c:c4:24:8f:11:84:
81:6f:a1:19:0d:63:68:20:ca:a8:47:8d:80:6a:13:
bd:6a:60:c7:a1:47:5a:8b:42:12:b9:4d:b2:c6:4c:
4d:65:e9:be:34:d3:ba:aa:15:e6:3c:0f:a1:87:eb:
41:be:79:ed:c8:42:45:09:dd:c0:b7:e6:ea:33:c3:
71:4e:b3:7b:20:cc:15:20:f0:f7:92:7b:5d:fe:7e:
82:60:e6:e2:f2:01:61:5d:93:11:02:b7:08:0c:c1:
f1:7a:d0:a1:b3:7b:34:55:92:6e:94:d4:9d:4d:9e:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A6:EB:1F:2B:44:36:A8:5C:A0:02:9F:3E:8B:31:12:A0:4D:76:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E2EEAE456111F18CD92EBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.106.0-156.255.115.255
156.255.120.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:88:3d:0c:57:87:48:85:3a:5b:02:b8:fd:04:3d:7d:6f:78:
b9:64:2d:17:5d:fe:a4:48:49:f1:7f:c8:cf:3c:cb:14:05:39:
e8:0d:ae:a6:ba:e8:07:99:cb:cf:e6:eb:e4:b1:67:f9:d8:19:
8a:19:59:18:dc:70:4f:14:92:98:8d:f6:c4:c9:45:f8:11:e9:
1d:36:39:aa:06:ad:a7:f7:f5:b4:b8:f7:3e:db:73:3b:82:a0:
01:2b:59:71:ec:6e:b8:3c:e4:94:ce:a8:2f:49:d2:77:82:a4:
be:44:ea:fd:06:0b:7b:2c:ba:63:68:6d:f0:5b:7d:07:8b:4b:
6a:be:19:3e:ec:e2:c8:3e:f9:89:03:38:71:28:ef:0f:c6:e3:
2e:9e:87:78:5a:dd:ab:42:20:c3:9c:35:ef:40:f7:0e:6b:1d:
4a:19:96:ab:f2:96:7f:b6:15:1c:06:ab:b9:5c:bd:df:49:76:
8c:5e:2f:10:f2:e7:a0:75:58:13:2e:ec:ca:4f:d1:6c:fc:74:
35:47:9d:03:79:60:d9:a0:ba:f1:94:39:7b:8d:dc:b3:bb:71:
e5:e9:80:80:89:80:b3:23:50:a4:91:92:75:a3:e3:d7:04:69:
1a:f5:75:a6:26:57:c3:09:72:bb:42:af:67:3f:7d:0a:d3:d6:
86:85:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:48:41 2026 by rpki-client