Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C28E859BE11F1AA40ACABCE1D38B0.roa
File: 7B2C28E859BE11F1AA40ACABCE1D38B0.roa (raw, json)
Hash identifier: cr7AeiGPPU1NulSE6y+lpQpygG6D5adGjyBjmAibOB4=
Subject key identifier: B8:74:80:6F:F4:90:2A:71:EA:08:27:F0:BF:87:D5:DB:BE:6C:28:76
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C28E859BE11F1AA40ACABCE1D38B0.roa
Signing time: Wed 27 May 2026 11:23:27 +0000
ROA not before: Wed 27 May 2026 11:23:23 +0000
ROA not after: Fri 26 Feb 2027 11:23:23 +0000
asID: 41095
IP address blocks: 156.231.56.0/23 maxlen: 24
156.231.56.0/24 maxlen: 24
156.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113205 (0x1ba35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:23:23 2026 GMT
Not After : Feb 26 11:23:23 2027 GMT
Subject: CN=6a16d42f-77cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a5:a9:40:9b:86:c6:a3:08:5c:a8:30:1e:88:
c4:28:f6:4f:08:6d:ac:6e:12:24:09:64:61:ba:7f:
82:10:77:0d:d5:4b:53:9b:e7:84:d0:46:30:8b:cf:
a7:36:fe:27:65:40:86:36:32:12:d8:59:1c:58:14:
5e:2a:9d:67:6a:36:d6:32:cd:e9:a8:0a:2b:e3:8e:
43:7a:ca:6a:c0:27:5f:01:c2:41:1e:8b:17:f8:20:
0f:a9:0e:44:b9:18:bb:b2:08:31:16:4c:5a:d7:39:
61:ee:73:7a:c9:ce:56:16:1c:bc:7c:17:1b:3c:ca:
4d:bc:63:79:fb:e1:d8:d3:2d:31:95:94:e1:57:b4:
7d:fd:69:46:81:06:86:0e:67:a7:3d:ad:cc:35:7f:
ab:e3:8a:35:dc:48:1f:9a:d7:a9:d2:a2:d1:73:29:
7a:11:6b:20:93:1c:ce:51:96:d9:d4:4f:c8:67:22:
2b:a7:d3:4d:1b:65:02:8f:e9:5d:a0:49:5c:bf:9e:
6a:0e:84:5d:a2:14:7f:de:a9:cc:26:a2:88:c5:25:
6a:ce:cb:a4:d6:39:2f:9f:9a:c0:8f:d6:0a:81:b0:
1e:48:41:19:ce:bc:79:a1:ec:48:d3:5b:57:a6:8d:
63:35:7a:27:9e:be:c3:e2:29:9d:e7:b6:1b:ac:0d:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:74:80:6F:F4:90:2A:71:EA:08:27:F0:BF:87:D5:DB:BE:6C:28:76
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2C28E859BE11F1AA40ACABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:27:d1:1d:b0:a4:85:70:b2:8f:18:f0:76:30:ca:a4:42:5b:
d6:54:5c:33:62:95:58:3c:e1:26:bb:27:a6:f5:e2:47:8c:56:
43:81:94:a8:b7:2a:bb:4f:e2:cb:c6:73:2f:39:ad:c2:51:19:
33:d7:c0:88:45:6a:64:03:2d:9f:9c:ff:bc:72:e0:00:f3:ff:
ea:59:7d:b8:d6:9c:d5:f7:2f:19:b3:8d:9a:7a:5f:87:ff:77:
3b:ed:a0:7b:02:9d:66:56:31:88:15:16:5f:5d:aa:51:94:64:
27:74:2e:20:97:03:c7:76:a6:bb:12:ee:9b:ed:b9:3a:0a:99:
15:65:50:2f:4a:ae:ac:86:8d:53:d6:50:37:06:26:26:41:6e:
5b:9e:3c:d2:26:2a:d8:8e:12:1b:8a:f4:fc:e0:f6:75:84:90:
60:18:89:22:9a:aa:ba:1f:3b:67:2e:56:1b:be:c5:50:e1:8b:
47:b3:45:61:5c:52:56:48:10:ca:f0:94:36:e7:70:6d:fc:ca:
52:c4:24:84:ca:95:78:8f:5e:cf:13:73:cd:d5:09:df:ef:5a:
68:0d:bd:b3:77:0b:21:81:3e:a8:f7:f2:e4:81:0d:f1:7e:86:
ef:2c:3c:e9:4d:78:bd:64:90:58:1d:c4:08:5a:84:d9:40:f0:
d3:c6:61:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:07 2026 by rpki-client