Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E0C28E4F6A11F1B0C009CCCE1D38B0.roa
File: 85E0C28E4F6A11F1B0C009CCCE1D38B0.roa (raw, json)
Hash identifier: RsU6kAuYJKZJeWlAFxwbFLH3eFH63xx/9diHLJPY12I=
Subject key identifier: 60:94:79:90:36:C8:E7:4D:14:74:55:C6:21:8A:D4:CF:7F:4E:7D:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B47F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E0C28E4F6A11F1B0C009CCCE1D38B0.roa
Signing time: Thu 14 May 2026 07:57:16 +0000
ROA not before: Thu 14 May 2026 07:57:11 +0000
ROA not after: Mon 08 Feb 2027 07:57:11 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.240.128.0/18 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111743 (0x1b47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:57:11 2026 GMT
Not After : Feb 8 07:57:11 2027 GMT
Subject: CN=6a05805c-2a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:b1:19:2a:f5:59:d3:a7:a7:22:7f:0f:22:
0e:2d:fe:19:54:d9:99:aa:34:c2:bd:44:d9:79:c5:
8a:2f:68:ca:fb:60:ca:39:53:33:de:89:01:20:59:
2c:0c:d2:16:1f:6a:4e:2d:78:91:97:62:07:62:99:
b7:94:ab:41:cb:0b:32:c5:67:af:db:76:47:ce:09:
55:de:e1:35:25:eb:46:d9:17:ab:48:b6:56:70:64:
66:83:20:73:98:96:29:2b:41:37:bf:20:19:8e:09:
6d:cd:ee:8d:22:75:e6:64:14:0a:13:5c:b7:5b:9d:
3f:46:e1:7c:74:d3:0f:38:de:f8:e5:fc:71:74:77:
a1:5b:a0:2a:2c:e6:b7:5b:2b:0d:bd:11:6d:68:bf:
98:05:98:58:04:ea:8b:a7:d9:ec:36:77:34:12:b3:
db:d9:ba:75:a6:00:46:1a:75:64:25:39:d5:80:9b:
a5:73:c3:aa:52:b7:7f:5d:a5:25:87:7c:b1:ad:5f:
49:08:cd:5b:ec:5c:07:c7:2f:c6:0f:f2:ac:32:aa:
bf:b2:26:3f:7e:93:4e:ef:59:46:14:01:04:f2:c9:
8a:12:16:cb:e0:e2:f2:fc:32:d7:1b:97:bc:f6:d5:
ba:41:1a:8c:2a:35:50:5a:bd:8f:71:ca:e8:b6:4b:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:94:79:90:36:C8:E7:4D:14:74:55:C6:21:8A:D4:CF:7F:4E:7D:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85E0C28E4F6A11F1B0C009CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
156.240.128.0/18
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
34:c5:37:ce:20:83:e7:f1:56:39:b7:84:a8:0c:84:13:53:5d:
4a:e2:6b:b8:50:0e:ad:04:11:9c:fa:94:7b:47:dd:f3:68:82:
32:3f:5a:4f:9e:0a:0d:5d:5b:b2:68:e8:8a:21:21:13:80:c8:
65:c8:a8:5e:3c:68:a8:53:6a:43:02:dc:c8:d8:91:a8:fa:9f:
2e:ac:58:7f:c4:d2:e5:de:5a:4a:63:d4:11:34:58:8a:50:a8:
8c:96:44:a2:5b:42:85:69:db:d4:3d:6d:81:5b:da:21:a7:e1:
4a:59:31:52:f7:03:11:38:a3:d2:d6:75:6a:37:6b:54:a2:21:
aa:4d:9b:aa:74:9c:d6:07:db:36:05:e1:92:0c:88:d4:a1:1e:
0e:7f:d7:9d:eb:39:c6:03:be:44:f9:ea:69:69:75:a4:46:0c:
07:35:47:ee:a0:5b:25:eb:c7:3f:cf:d5:79:ef:9b:e0:ca:19:
74:b8:55:61:59:f3:18:d5:65:40:51:16:2c:62:22:89:d7:c0:
60:88:83:11:4e:2a:28:27:6d:d6:10:0f:89:0e:18:b4:14:90:
8d:bb:94:43:68:62:33:71:8f:82:fe:1a:06:e4:7d:df:c9:1a:
b4:ee:05:48:93:b7:8e:8c:cb:c4:77:14:aa:4f:a2:0f:8b:19:
e4:7b:d6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:50 2026 by rpki-client