Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98231280550F11F18B27EAA1CE1D38B0.roa
File: 98231280550F11F18B27EAA1CE1D38B0.roa (raw, json)
Hash identifier: 2cB7CAO7Zo+vAVoCCbjS1oCH8EzhjQTaBjQ/yRkXN+Q=
Subject key identifier: 10:01:3A:4D:6B:57:3F:33:BE:9B:16:D6:C1:95:00:7D:92:79:88:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98231280550F11F18B27EAA1CE1D38B0.roa
Signing time: Thu 21 May 2026 12:21:30 +0000
ROA not before: Thu 21 May 2026 12:21:25 +0000
ROA not after: Wed 19 Aug 2026 12:21:25 +0000
asID: 154321
IP address blocks: 156.224.18.0/23 maxlen: 24
156.224.18.0/24 maxlen: 24
156.224.19.0/24 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.28.0/24 maxlen: 24
156.224.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112375 (0x1b6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:21:25 2026 GMT
Not After : Aug 19 12:21:25 2026 GMT
Subject: CN=6a0ef8c9-323b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:34:b5:d1:05:00:bb:62:fb:55:84:f3:40:
df:64:2c:bf:21:a0:31:48:07:a7:3a:2f:27:59:2c:
a0:f7:43:f9:03:58:0d:b4:29:a5:76:f2:51:39:b4:
3d:2a:38:48:91:54:c3:6e:7b:7e:cc:c7:4b:49:60:
5e:2d:50:01:d4:1c:69:fa:5b:bc:b1:85:70:a0:87:
43:19:e2:8f:95:b6:21:39:a5:be:85:7d:55:9e:1f:
d7:f4:be:98:cc:6d:b6:72:d6:82:46:84:ea:6a:26:
86:b0:b3:bb:f1:34:81:b2:23:32:ad:e1:c8:49:20:
9a:24:1f:5a:b6:50:4a:d9:6d:39:a2:18:a6:d6:13:
a0:38:ed:17:7d:54:3e:bd:5a:ff:8a:2a:1f:2c:d2:
c4:52:c0:04:e7:6e:d6:ac:31:39:f4:4f:5c:e7:30:
d4:9d:4c:f0:3f:6f:d7:90:f2:5b:8c:8e:bc:dd:d2:
e7:ec:1f:f9:fa:c5:67:de:25:78:dd:8f:b1:14:fc:
49:a5:95:00:11:76:04:93:49:44:ff:aa:04:0f:40:
6d:20:c1:94:9e:8c:a1:cc:05:9a:69:e5:f9:70:2f:
ef:83:a1:df:3a:b0:75:9e:60:57:18:1f:b1:4c:bf:
63:0c:4e:78:95:2a:15:d7:19:fa:a3:49:8c:2d:45:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:01:3A:4D:6B:57:3F:33:BE:9B:16:D6:C1:95:00:7D:92:79:88:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98231280550F11F18B27EAA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
156.224.28.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:c1:4c:c7:c7:95:2c:97:19:45:cf:2d:c3:e6:ac:c3:1a:5f:
7f:64:36:8d:02:98:00:77:6c:5e:67:6b:b3:b8:74:21:8e:68:
2f:28:89:a6:05:fc:c3:0c:73:9b:d5:81:96:57:53:61:2e:8a:
1c:29:9d:82:b3:7f:c3:d5:02:16:36:72:2f:24:9e:d5:e2:63:
99:83:4b:fd:95:79:ec:15:aa:c1:14:22:a2:39:6e:df:11:63:
c7:62:5a:f3:25:4f:64:fc:15:af:da:c5:cf:4d:5c:c4:25:f0:
40:db:70:f8:43:7a:da:43:d2:27:fe:e5:ad:83:3e:c3:d5:b3:
0e:aa:41:e4:80:02:5c:0e:00:a2:73:75:2e:76:a4:12:06:99:
96:e1:71:af:f0:7c:e9:4b:3e:73:d5:49:e0:1a:cc:c0:04:a4:
a2:c2:70:64:80:19:62:1e:96:9f:f4:be:59:bd:af:84:a4:52:
d7:92:4a:36:a8:d4:5d:39:03:88:22:e3:a2:4c:b9:41:b4:c0:
e5:49:1f:b7:a1:27:dd:42:8d:49:b3:80:07:37:cb:84:69:b3:
a7:a5:0a:76:7f:06:25:3e:1c:e9:66:94:71:40:52:a3:8b:ec:
df:63:8b:c1:d3:fa:66:84:1f:46:bc:0c:2e:fa:a6:e6:b7:f1:
fe:a0:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:20 2026 by rpki-client