Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B884CA57F711F1907390DFCE1D38B0.roa
File: 83B884CA57F711F1907390DFCE1D38B0.roa (raw, json)
Hash identifier: xBVswNxZYNW7o1cnGSDP6yMXR9dXDlm2zc/FODcMb6M=
Subject key identifier: 68:CD:8A:23:EA:6F:8B:6E:C9:E7:8A:D8:5F:E0:03:B5:64:E8:DE:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B957
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B884CA57F711F1907390DFCE1D38B0.roa
Signing time: Mon 25 May 2026 05:06:41 +0000
ROA not before: Mon 25 May 2026 05:06:36 +0000
ROA not after: Fri 26 Feb 2027 05:06:36 +0000
asID: 41095
IP address blocks: 156.231.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112983 (0x1b957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 05:06:36 2026 GMT
Not After : Feb 26 05:06:36 2027 GMT
Subject: CN=6a13d8e1-1b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a0:e5:52:7c:6c:b3:c6:f7:e4:d1:24:1c:7e:
ed:91:0e:1b:54:e5:a2:81:c3:c9:18:b4:01:3b:31:
b0:26:cc:3f:7d:ef:90:43:42:b5:3b:73:cb:33:1f:
7c:32:6b:67:8e:08:11:dc:29:a0:55:1a:97:8e:bd:
8a:f5:ee:d5:17:17:cd:ec:6c:16:c0:f4:d2:b6:c8:
67:4f:b8:1b:8d:ec:84:40:e8:6a:9b:c8:6f:7d:db:
7f:e7:2b:56:d5:6c:5a:a2:10:aa:49:ac:b5:00:4b:
5c:3d:76:15:10:4d:a3:d3:e5:a1:cb:66:43:10:a8:
ce:c6:19:89:f4:0d:12:90:aa:25:65:5e:02:99:40:
a6:6f:26:4a:99:21:be:fa:29:6f:0d:53:f1:1b:bf:
e0:1c:07:21:9b:32:be:a0:5f:14:1d:6e:3a:87:4b:
fa:99:f3:ae:36:eb:c6:e8:dd:aa:76:4b:82:54:95:
84:ea:db:ec:2e:56:1b:b5:e2:4d:45:4f:7a:3c:ea:
94:f7:aa:ec:ba:6f:0f:06:65:31:e1:7e:e6:8e:a5:
ad:3f:49:55:d3:8a:7f:15:be:e4:48:d6:75:81:a8:
3e:7e:12:22:3b:ac:86:7d:6c:72:be:83:51:9b:69:
5c:33:dc:52:45:2e:3c:43:3e:3b:65:99:c2:ca:02:
4a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CD:8A:23:EA:6F:8B:6E:C9:E7:8A:D8:5F:E0:03:B5:64:E8:DE:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83B884CA57F711F1907390DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/24
Signature Algorithm: sha256WithRSAEncryption
50:65:51:f2:ff:e5:ef:8a:44:d7:72:52:37:c9:6d:c4:c6:92:
19:c9:cb:ba:f9:66:24:5f:53:eb:47:e5:87:c5:dc:49:89:73:
63:c7:aa:26:d9:bb:0f:c8:cd:d0:eb:a3:73:fb:62:fc:eb:ed:
cf:04:46:43:4e:ee:5f:4b:58:fc:95:6a:d5:69:9c:af:81:8c:
ac:cc:76:80:1e:44:28:b7:a0:5d:6d:ce:04:28:98:1e:bc:d8:
57:ae:62:b9:d3:85:96:5a:56:1c:13:6a:1c:6c:38:8b:ce:5c:
95:04:64:4e:cd:cc:84:0b:00:76:3a:5b:c8:1a:bb:cb:f3:a8:
21:bb:fc:ca:dc:f1:79:cd:72:55:bf:84:58:73:fb:97:82:89:
d2:06:2f:75:05:f6:14:5f:2c:31:79:ea:47:8a:f9:70:86:ae:
6b:e7:fb:d6:74:e7:9c:d6:a8:0b:b1:30:05:07:77:be:c0:54:
80:16:dc:2d:c0:30:1c:00:8c:5d:8e:1e:5b:3a:fa:5d:e2:92:
bd:55:6e:b8:b1:64:28:b0:7c:fd:3b:b7:ae:e7:f4:10:a6:1d:
47:75:aa:35:99:7d:74:79:63:43:49:aa:f1:f6:a6:e7:3a:07:
48:22:f4:06:57:7c:23:5c:f4:5d:c4:b1:b5:c4:52:e1:23:2f:
ca:b0:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:40 2026 by rpki-client