Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD20EE6447A11F19C40ADC3CE1D38B0.roa
File: 9AD20EE6447A11F19C40ADC3CE1D38B0.roa (raw, json)
Hash identifier: 2+V921shmhLAGVZV3y7pK9gfxDLQLlTzJRbd4p/H63o=
Subject key identifier: E6:A8:B1:25:34:B5:F0:B9:C2:05:10:3D:81:D5:EF:AB:BB:54:11:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B01A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD20EE6447A11F19C40ADC3CE1D38B0.roa
Signing time: Thu 30 Apr 2026 09:54:40 +0000
ROA not before: Thu 30 Apr 2026 09:54:35 +0000
ROA not after: Fri 07 May 2027 09:54:35 +0000
asID: 212238
IP address blocks: 156.232.0.0/24 maxlen: 24
156.232.1.0/24 maxlen: 24
156.239.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110618 (0x1b01a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:54:35 2026 GMT
Not After : May 7 09:54:35 2027 GMT
Subject: CN=69f326e0-e03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:93:9d:09:4a:94:6f:e8:93:49:b5:54:3f:
e7:91:6f:5b:10:a4:78:74:a7:ff:8a:66:65:8e:8e:
eb:c0:c7:0d:94:32:3f:ef:c3:80:30:d7:06:f0:41:
de:2c:70:da:da:54:e1:e7:0d:de:4c:77:19:9c:b0:
30:e2:f4:76:a7:07:8e:86:8f:10:cd:fb:28:9b:46:
f9:83:c7:31:a6:fb:bb:35:1c:3b:fb:b5:2b:c3:b0:
42:d7:b2:db:0c:6e:64:3f:b2:4a:67:4b:c4:4e:b2:
86:06:0d:0c:35:3a:d2:9d:42:4c:fb:15:c1:9a:c5:
b5:99:00:60:71:61:5d:14:e4:a6:47:cc:28:32:71:
43:45:d6:67:40:07:53:7d:61:79:85:c7:8c:6b:32:
71:ba:5e:d4:8b:b3:ba:72:b6:b6:29:aa:32:d7:d7:
7a:c5:7a:7d:92:ed:80:41:96:69:6e:7c:bf:b7:c6:
2a:c6:6e:2f:2e:8f:fa:1d:18:12:6c:65:5d:aa:fb:
62:21:7c:a6:4f:f3:e5:84:d7:8a:08:aa:e9:f3:29:
6f:fa:24:76:8a:9b:4c:23:64:cf:d6:1e:1d:83:56:
b8:90:f0:f6:1d:e1:b5:47:34:78:be:d6:d3:4e:ec:
14:5e:a0:da:ce:9f:5f:e1:a3:2f:00:df:06:66:7d:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A8:B1:25:34:B5:F0:B9:C2:05:10:3D:81:D5:EF:AB:BB:54:11:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9AD20EE6447A11F19C40ADC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8d:48:2b:7c:f1:48:19:3b:c3:b8:71:d8:ae:36:b1:04:91:
e1:6b:c0:e2:67:fa:82:5b:99:c3:1b:bb:04:a9:b5:f5:86:d2:
6a:dd:68:d9:e4:e8:f3:13:28:6f:9e:fc:0c:ca:ae:2d:d6:5d:
54:91:00:ab:01:64:55:2d:3b:5c:ae:90:56:4a:b0:44:bb:c5:
e9:f9:8d:3c:fe:27:2d:1f:6b:c9:f0:ab:8d:d7:93:4e:86:28:
65:a7:6a:93:a7:9b:b8:11:eb:a0:40:94:37:0c:59:f3:ae:88:
3b:b9:5a:92:78:e8:d4:3a:08:04:08:e3:f3:a3:c9:2f:dc:63:
04:6f:6d:1c:11:05:31:f3:2f:db:6b:39:58:91:6c:e5:7f:6f:
7a:a6:93:ae:ec:a3:47:cf:c1:db:d3:e3:8d:a0:37:69:4d:38:
83:8d:fb:37:45:d1:99:5c:22:f6:ff:45:18:b7:f5:41:f0:82:
8a:f8:0c:ef:66:02:71:a1:fe:cd:3f:30:0d:cc:7c:0a:62:e1:
af:c4:25:0a:93:c5:33:40:9a:d7:bb:3f:74:36:60:c6:78:f3:
f6:fa:ae:24:b9:da:c7:28:93:12:0f:50:31:f7:e0:03:9a:02:
ac:9f:f3:91:dc:4a:2d:b6:82:cd:39:93:29:cf:fc:0c:b5:54:
70:a9:c8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client