Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD16888A59B911F1BF5C860DCF1D38B0.roa
File: AD16888A59B911F1BF5C860DCF1D38B0.roa (raw, json)
Hash identifier: CLBMzxAoF6XmoOG3OSTC/Fr7REiEg1q8DLpG2INqNmg=
Subject key identifier: 72:C9:2A:35:72:A1:E6:11:EF:12:A6:A5:9B:AA:EC:80:D6:03:C6:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD16888A59B911F1BF5C860DCF1D38B0.roa
Signing time: Wed 27 May 2026 10:49:04 +0000
ROA not before: Wed 27 May 2026 10:48:58 +0000
ROA not after: Fri 03 Jul 2026 10:48:58 +0000
asID: 45382
IP address blocks: 156.228.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113201 (0x1ba31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 10:48:58 2026 GMT
Not After : Jul 3 10:48:58 2026 GMT
Subject: CN=6a16cc1f-6e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:de:46:e7:9c:12:ee:91:6d:7e:8d:0f:8d:
27:d4:1f:5c:2f:06:95:2f:04:df:23:2a:f9:0e:cf:
d7:b9:f5:a8:cb:49:d4:cd:56:0d:49:df:df:67:b9:
2d:79:0c:c2:8c:fe:b8:51:6d:2f:7f:76:2b:fb:eb:
6b:e5:10:b8:b3:2f:a5:3f:aa:41:3c:80:ec:03:f1:
67:c3:2c:e9:c8:03:5c:b3:a1:e1:5a:55:da:62:01:
c1:9b:03:cd:ef:a2:32:51:df:a3:a2:f8:00:4f:ca:
d5:ba:a8:91:36:bf:d8:f0:4c:d7:45:9a:b9:ee:3e:
dd:71:4a:32:a2:4f:05:3e:b5:a4:df:f2:dc:2c:84:
14:7f:63:94:44:00:49:e1:49:ee:5b:40:8f:0e:a9:
b9:22:b8:02:c8:ba:44:9a:b3:03:b8:10:38:49:5f:
9a:03:6c:b4:d2:93:f3:f2:2b:c9:99:6f:53:6f:43:
60:79:6e:65:22:07:29:80:cc:e3:13:0f:7c:bb:3a:
3a:71:7b:1d:68:f4:1e:86:6a:f1:5f:c5:54:a9:f3:
98:25:ec:58:74:b4:fa:c0:f0:69:a4:18:30:58:ec:
a0:3f:2b:7c:7c:62:86:0b:7c:80:08:f1:cf:99:84:
c9:cf:d4:79:2b:44:23:21:c1:bb:28:17:2e:bb:d0:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:C9:2A:35:72:A1:E6:11:EF:12:A6:A5:9B:AA:EC:80:D6:03:C6:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD16888A59B911F1BF5C860DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.8.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3c:38:1b:2e:19:b9:d6:3d:f6:e1:44:57:36:0d:ec:c5:06:
1e:8b:e0:d1:cc:f2:58:47:9f:8b:f5:e1:3d:1c:89:ce:52:e8:
9c:a4:de:9d:d4:50:11:e3:13:a6:36:21:cd:5b:1f:4b:43:1f:
a7:66:0e:32:33:55:73:f3:a1:fe:e4:54:0e:3e:91:5c:45:5e:
58:fa:2c:d2:7e:d2:63:87:a5:af:a9:0d:74:dc:1a:ce:9b:80:
a8:b4:bd:53:68:7d:cf:69:7d:dc:a6:6b:81:4c:ba:c8:7c:85:
d3:b7:81:56:01:c4:1c:e5:93:9e:06:3a:85:aa:79:23:a4:d9:
78:a6:e0:c2:8e:e7:4f:fd:ec:cd:27:42:96:b9:cc:b0:cb:01:
e9:11:a8:01:75:fe:d7:15:c5:25:f0:9c:e4:9e:4b:83:0d:74:
95:42:d9:fd:8c:e2:72:df:72:cc:49:34:66:99:8f:76:c8:90:
8d:61:cc:c3:8b:16:92:c4:a0:62:76:92:f4:eb:a5:cb:36:44:
8a:ce:b4:63:1f:88:06:5b:f0:48:a0:91:55:54:a3:e5:ce:f1:
9c:6f:57:b1:fc:99:69:66:5f:67:dc:bb:77:b6:d1:48:ff:6b:
bf:44:c1:4b:33:7e:01:ba:85:f5:11:f9:65:20:7c:05:ee:98:
d3:36:6c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:07 2026 by rpki-client