Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA5C3E2447411F1A8D2E8A0CE1D38B0.roa
File: ADA5C3E2447411F1A8D2E8A0CE1D38B0.roa (raw, json)
Hash identifier: +cAxf8eTmQXXgeBqNAgQm1yFgWLZk5RYd2R976lc16U=
Subject key identifier: 45:96:F5:47:9C:41:0D:38:C4:8F:E6:23:C2:0B:9C:5D:78:DF:9C:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B016
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA5C3E2447411F1A8D2E8A0CE1D38B0.roa
Signing time: Thu 30 Apr 2026 09:12:15 +0000
ROA not before: Thu 30 Apr 2026 09:12:10 +0000
ROA not after: Fri 30 Apr 2027 09:12:10 +0000
asID: 328608
IP address blocks: 156.255.106.0/24 maxlen: 24
156.255.107.0/24 maxlen: 24
156.255.108.0/24 maxlen: 24
156.255.109.0/24 maxlen: 24
156.255.110.0/24 maxlen: 24
156.255.111.0/24 maxlen: 24
156.255.112.0/24 maxlen: 24
156.255.113.0/24 maxlen: 24
156.255.114.0/24 maxlen: 24
156.255.115.0/24 maxlen: 24
156.255.120.0/24 maxlen: 24
156.255.121.0/24 maxlen: 24
156.255.122.0/24 maxlen: 24
156.255.123.0/24 maxlen: 24
156.255.124.0/24 maxlen: 24
156.255.125.0/24 maxlen: 24
156.255.126.0/24 maxlen: 24
156.255.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110614 (0x1b016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 09:12:10 2026 GMT
Not After : Apr 30 09:12:10 2027 GMT
Subject: CN=69f31cef-f1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:65:c1:28:fe:ff:c6:90:e3:0d:e5:72:23:
8f:54:04:82:50:dc:ff:4a:d3:2e:6a:52:e2:67:d2:
b3:c3:af:df:42:27:e8:ba:bc:86:d8:91:f4:dd:4c:
00:01:27:5d:e1:91:40:cc:44:c0:ff:ba:68:26:4c:
41:5f:95:fb:22:40:90:68:70:85:3d:98:ed:73:b3:
4b:04:16:4a:2a:94:1b:06:a9:07:b8:d2:4a:e2:da:
ac:9b:74:73:fa:5f:e0:b8:2e:f4:8a:16:93:5f:bd:
f0:34:78:84:95:a7:4c:80:e6:f1:81:b4:39:5c:c3:
54:08:7e:8f:ae:e4:14:4f:ce:cf:87:f5:78:da:be:
1c:11:3c:1b:5e:90:95:29:52:01:7c:47:e9:d4:62:
b5:3a:e6:f8:d6:06:00:33:f6:fa:39:2d:30:34:7e:
43:9f:df:77:b8:95:5a:7d:cb:4c:29:91:18:88:61:
a7:48:50:2f:fb:77:2b:91:fd:15:1a:ef:16:e9:12:
7d:8c:49:d7:0a:b5:ef:b3:8c:37:c2:68:f9:30:cc:
2d:46:4d:b7:7b:c9:38:78:8f:f2:ab:c0:69:2a:ea:
2e:ae:56:43:85:85:a4:a1:cc:ff:07:0e:46:66:f3:
e9:e8:d0:98:c9:71:d8:83:43:f8:cf:89:f6:22:fa:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:F5:47:9C:41:0D:38:C4:8F:E6:23:C2:0B:9C:5D:78:DF:9C:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADA5C3E2447411F1A8D2E8A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.106.0-156.255.115.255
156.255.120.0/21
Signature Algorithm: sha256WithRSAEncryption
51:8d:95:69:05:94:40:6d:23:c9:1f:1a:c4:98:1f:70:15:eb:
11:8f:5f:4a:fb:a5:e8:24:b5:3c:6a:5f:30:98:ac:9f:c3:71:
4b:10:77:11:d7:21:03:a8:0d:ef:f4:0a:34:4c:d3:8e:db:83:
c6:5e:3a:51:61:1b:ee:fe:7b:20:f0:ab:75:36:45:d5:35:fe:
a5:a8:53:0a:f2:9e:81:8c:84:27:3e:b6:88:f7:02:a5:41:d4:
48:fd:35:c5:0a:71:cc:be:3e:4e:5d:19:fa:bd:e9:3b:91:f5:
67:d3:06:60:4c:8d:d2:e8:2b:7d:ca:41:0b:f6:75:34:80:96:
bf:47:98:75:cb:27:ed:c7:66:3f:63:e8:2c:b9:0e:d5:85:ee:
48:34:a3:fd:e8:6e:85:de:d3:b2:69:6d:15:79:20:4d:b4:47:
87:52:8a:69:9a:bd:01:0c:a7:70:a5:4a:47:69:c5:67:38:42:
9b:81:7d:e2:ce:c8:cd:0e:27:d4:ca:bc:ca:18:f2:dd:46:41:
e2:fb:b4:52:cd:ad:58:30:c8:58:4a:11:24:60:1f:98:b1:d0:
87:e0:2b:42:1a:fd:c2:94:20:55:21:7b:1d:61:46:63:18:36:
24:71:01:4f:27:af:2a:72:e2:cc:6c:31:c3:ea:15:d7:b7:38:
c6:ca:52:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 23:48:39 2026 by rpki-client