Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1170980446D11F1B12EB7F6CE1D38B0.roa
File: A1170980446D11F1B12EB7F6CE1D38B0.roa (raw, json)
Hash identifier: NNTvhrM+aUd3wVapIp0gxlvXPn0msM0wnF9FYOc4rFc=
Subject key identifier: 6C:C8:4E:62:3E:DE:7E:B9:97:E1:1B:84:88:C3:76:5E:60:4A:6B:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B004
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1170980446D11F1B12EB7F6CE1D38B0.roa
Signing time: Thu 30 Apr 2026 08:21:47 +0000
ROA not before: Thu 30 Apr 2026 08:21:43 +0000
ROA not after: Fri 05 Jun 2026 08:21:43 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110596 (0x1b004)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 08:21:43 2026 GMT
Not After : Jun 5 08:21:43 2026 GMT
Subject: CN=69f3111b-e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2a:d0:a8:14:8a:bd:ec:08:cc:03:b6:0a:42:
78:91:e2:a5:c0:f2:6f:b2:f1:17:cb:bf:1d:c0:ac:
aa:ab:74:8d:19:b1:1d:56:97:e8:8c:77:dc:20:9e:
15:b4:71:31:40:44:95:60:11:d0:d9:14:2b:9a:ef:
50:d8:5d:49:d3:e1:56:55:31:57:eb:df:d7:dc:ff:
16:bf:73:9d:77:ac:29:aa:fb:a3:f6:05:ca:6c:2f:
1f:2c:be:c5:82:a8:0c:78:c2:0c:66:22:9e:2f:37:
fc:ef:b8:65:3a:a8:96:71:7a:75:46:00:dc:b3:bc:
df:1b:35:7d:8e:6a:66:66:9d:25:c5:b2:1e:bc:77:
b8:97:39:06:52:1b:5b:a9:07:9e:5d:5a:b0:a6:f3:
92:56:c2:fe:9e:d1:75:f4:7e:a0:55:5b:9c:7c:fd:
3d:00:dd:3d:d9:ec:47:49:88:fb:a6:a9:89:3d:af:
e0:57:c0:79:a9:ac:0b:c8:8f:39:04:b1:98:cd:d9:
ee:7e:ce:69:21:80:2e:73:48:27:02:dc:33:21:1f:
a9:ac:66:d6:a9:38:f8:12:42:40:ba:a8:a9:c2:48:
ef:a4:14:30:b4:3c:ef:a5:e7:2f:c0:63:07:85:9c:
25:4f:8e:71:ef:d6:48:69:86:9b:f1:9c:10:6d:6b:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C8:4E:62:3E:DE:7E:B9:97:E1:1B:84:88:C3:76:5E:60:4A:6B:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1170980446D11F1B12EB7F6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:1f:15:f6:01:9b:7c:d1:64:9d:8c:3e:94:30:7c:25:c2:9e:
e0:ac:d6:15:c5:68:7d:6a:77:bf:4b:75:62:73:48:37:d9:f4:
9a:d3:de:88:a2:85:fa:65:96:22:07:cb:a6:3c:ac:b5:5f:6d:
5f:02:72:04:78:5b:c0:2f:20:7b:6c:27:e1:57:26:74:a0:9c:
79:b3:0b:d9:c8:33:0f:7a:96:af:14:bc:89:77:40:5c:87:df:
55:26:7c:f5:12:3c:b1:7c:83:6e:aa:a1:7c:95:ad:51:a4:e3:
51:6f:bd:33:a4:5e:e5:15:2c:63:b8:3f:29:b5:74:ef:3f:3a:
bb:a6:ef:4e:c1:c8:9d:47:68:a6:78:ec:36:71:5a:b4:c0:69:
8c:e2:50:dd:fc:68:62:74:63:25:6d:b5:f4:0a:eb:e2:14:94:
6b:56:f9:1f:1e:6e:92:61:a0:4d:e5:5e:b7:95:87:e3:c9:12:
75:c7:fa:6b:54:94:a5:f1:a1:8c:12:08:9e:55:1a:76:06:50:
6c:a7:c9:7c:3a:65:99:62:06:e0:93:28:00:5d:3a:70:2d:16:
b3:6b:47:5e:1c:52:c7:9f:b0:9e:38:6c:09:48:70:27:81:b3:
c4:37:02:2c:3d:d7:97:ed:93:57:e1:fb:50:2b:ec:32:8d:f9:
fb:aa:d6:c8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbAEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDMwMDgyMTQzWhcNMjYwNjA1MDgyMTQzWjAYMRYw
FAYDVQQDEw02OWYzMTExYi1lNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvSrQqBSKvewIzAO2CkJ4keKlwPJvsvEXy78dwKyqq3SNGbEdVpfojHfc
IJ4VtHExQESVYBHQ2RQrmu9Q2F1J0+FWVTFX69/X3P8Wv3Odd6wpqvuj9gXKbC8f
LL7FgqgMeMIMZiKeLzf877hlOqiWcXp1RgDcs7zfGzV9jmpmZp0lxbIevHe4lzkG
UhtbqQeeXVqwpvOSVsL+ntF19H6gVVucfP09AN092exHSYj7pqmJPa/gV8B5qawL
yI85BLGYzdnufs5pIYAuc0gnAtwzIR+prGbWqTj4EkJAuqipwkjvpBQwtDzvpecv
wGMHhZwlT45x79ZIaYab8ZwQbWvYhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGzI
TmI+3n65l+EbhIjDdl5gSmtxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMTE3MDk4MDQ0NkQxMUYxQjEyRUI3RjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBaHxX2AZt80WSdjD6UMHwlwp7grNYVxWh9ane/S3Vic0g32fSa096IooX6
ZZYiB8umPKy1X21fAnIEeFvALyB7bCfhVyZ0oJx5swvZyDMPepavFLyJd0Bch99V
Jnz1EjyxfINuqqF8la1RpONRb70zpF7lFSxjuD8ptXTvPzq7pu9OwcidR2imeOw2
cVq0wGmM4lDd/GhidGMlbbX0CuviFJRrVvkfHm6SYaBN5V63lYfjyRJ1x/prVJSl
8aGMEgieVRp2BlBsp8l8OmWZYgbgkygAXTpwLRaza0deHFLHn7CeOGwJSHAngbPE
NwIsPdeX7ZNX4ftQK+wyjfn7qtbI
-----END CERTIFICATE-----
Generated at Wed May 6 05:36:18 2026 by rpki-client