Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B583DE86398A11F194A6C1DECE1D38B0.roa
File: B583DE86398A11F194A6C1DECE1D38B0.roa (raw, json)
Hash identifier: TCPGRWlQEQH4wh0aJIjaN4Io/xGYaE5I3+iPVpyxL0A=
Subject key identifier: 2D:C5:34:6B:22:D7:9E:EB:F9:8C:CB:30:94:AE:01:24:38:EA:46:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B583DE86398A11F194A6C1DECE1D38B0.roa
Signing time: Thu 16 Apr 2026 11:52:14 +0000
ROA not before: Thu 16 Apr 2026 11:52:09 +0000
ROA not after: Sat 23 May 2026 11:52:09 +0000
asID: 401739
IP address blocks: 156.247.40.0/24 maxlen: 24
156.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109873 (0x1ad31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 11:52:09 2026 GMT
Not After : May 23 11:52:09 2026 GMT
Subject: CN=69e0cd6e-177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:11:b4:01:8d:10:59:5b:68:63:41:ba:ea:
48:00:35:6c:d0:40:56:d7:9d:64:a0:33:a9:de:74:
e6:cb:50:c1:70:ed:47:30:69:56:d7:e3:1d:52:4a:
75:8e:ac:ab:e7:95:7c:b6:4e:ce:fc:8d:d3:d8:80:
4e:11:b6:a8:c2:b1:1c:88:2c:26:b1:be:59:19:c7:
e3:41:74:d8:9c:bb:64:81:3d:a9:ef:3b:be:4d:18:
49:d1:61:0a:a7:3e:12:57:e0:aa:2a:a3:a1:1b:a1:
ea:7f:53:96:06:dd:14:20:03:5d:55:d1:94:c6:b3:
aa:b8:73:1c:a2:eb:ff:d8:79:44:c4:35:1e:eb:8b:
e0:74:a5:e4:ec:6f:43:f5:22:ee:8c:8b:78:98:87:
6e:05:a3:39:d7:7e:2d:95:f3:03:7e:b8:51:63:be:
2b:b4:d0:b6:c6:74:21:44:87:f8:3a:74:b1:9f:36:
c6:e4:fb:5b:7b:a5:bb:1e:2a:63:9b:67:de:9d:ff:
b3:c8:8a:c5:49:21:5c:72:37:0f:bd:9a:b0:84:a3:
be:c0:c6:4c:97:8e:cc:2b:60:39:ca:d9:89:3a:f0:
d2:11:65:b5:30:72:3e:0d:55:31:69:3e:7b:99:ca:
35:37:8b:cf:1f:c5:b3:f0:fa:e0:94:0b:1f:a6:c0:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C5:34:6B:22:D7:9E:EB:F9:8C:CB:30:94:AE:01:24:38:EA:46:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B583DE86398A11F194A6C1DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.40.0/23
Signature Algorithm: sha256WithRSAEncryption
41:8f:16:c9:d3:38:66:cb:c5:b3:37:28:8c:a5:5f:0c:8b:90:
71:d4:8b:c6:80:5f:85:50:80:f2:d7:af:0e:d4:34:a7:07:c1:
dd:5e:92:5e:8f:ef:51:b9:6f:75:44:71:a2:68:0d:9f:c8:07:
00:13:3e:30:22:0b:20:fe:e3:b6:83:f1:b7:ae:5a:e4:b3:c7:
b5:ea:1e:5b:ba:cc:40:20:70:62:66:78:a7:ab:9b:5f:74:21:
7d:9b:92:dc:fc:b9:45:23:e9:bf:00:3f:19:b1:64:fb:49:4c:
ba:04:8b:33:52:ac:7a:cf:07:f0:13:35:76:c8:49:bc:a3:df:
b6:44:35:79:32:3b:ae:49:70:2a:91:8a:60:37:9d:2e:73:c6:
cd:65:94:bb:45:68:eb:d1:b4:83:69:f2:d3:5d:9b:d6:b8:32:
38:3c:6d:ac:02:b2:31:74:c7:00:b0:4a:eb:32:27:e5:e0:f1:
c3:9e:f2:a9:ce:02:2a:f9:00:9e:7c:e3:c3:72:e7:a1:ce:7c:
51:c6:f8:28:bd:4a:0e:41:50:70:27:35:56:9d:ad:d6:c3:9b:
29:24:40:fc:b4:a1:d1:0c:c4:87:59:2e:02:76:61:06:a7:ba:
18:03:b0:63:f9:a9:cc:7a:e6:61:ea:e4:59:ab:19:9b:3d:d8:
ee:2c:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:54 2026 by rpki-client