Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5AB8C543F11F1BAADA3ACCE1D38B0.roa
File: D2A5AB8C543F11F1BAADA3ACCE1D38B0.roa (raw, json)
Hash identifier: mO596RxfDh0gpKwafXijRCtmd0rU4hf8ZjsElMQsZpA=
Subject key identifier: 2E:AC:64:57:EF:D4:16:E6:7C:D0:0B:52:0A:83:EB:23:19:61:37:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B638
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5AB8C543F11F1BAADA3ACCE1D38B0.roa
Signing time: Wed 20 May 2026 11:34:12 +0000
ROA not before: Wed 20 May 2026 11:34:07 +0000
ROA not after: Sat 08 Aug 2026 11:34:07 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112184 (0x1b638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:34:07 2026 GMT
Not After : Aug 8 11:34:07 2026 GMT
Subject: CN=6a0d9c34-83b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8b:a7:32:fe:57:7f:00:7d:b1:5e:fd:9a:fb:
69:7e:2e:2c:b1:f9:36:4c:70:d9:95:3d:ba:28:61:
36:2e:55:8b:e9:0f:d2:97:0e:07:77:f2:da:54:35:
6d:c1:d9:e8:d1:84:e5:5c:be:d1:95:c3:f6:d3:4f:
c0:af:1f:6c:f5:65:04:72:40:ec:8e:4f:8e:56:44:
bc:2c:ef:8a:46:a2:bd:25:2d:da:b0:49:4d:7f:bf:
df:5e:0b:1e:30:ee:73:4b:96:53:01:93:6f:a3:63:
c7:38:0d:33:5e:18:fc:cc:92:17:3e:66:05:a9:eb:
66:f9:6c:7a:4b:07:76:98:27:f2:38:1b:bb:ea:00:
76:3c:6e:69:ee:5f:35:00:a7:71:87:34:e9:d1:98:
85:6a:39:d9:4e:3e:69:2f:cc:bf:4b:c7:f0:2e:4c:
8c:f0:1b:cc:4f:24:d5:49:3c:5f:b3:5a:ce:8d:e2:
41:3a:05:06:ef:c5:2a:1e:e2:47:b5:8f:44:00:68:
20:2e:4d:c1:15:91:a8:43:66:06:88:b1:6c:67:02:
fa:b7:ee:21:66:e1:f8:ea:59:cf:31:db:4f:9c:8f:
0e:4a:71:36:6c:8f:4b:42:84:b6:a3:53:56:fe:97:
69:f5:f1:41:6a:1f:ef:6d:43:e0:8b:1d:53:6d:c0:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AC:64:57:EF:D4:16:E6:7C:D0:0B:52:0A:83:EB:23:19:61:37:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2A5AB8C543F11F1BAADA3ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:5a:7a:53:36:ff:36:cd:1b:4c:98:96:20:3b:2a:f2:45:8b:
fb:e4:cd:5d:0d:31:2a:dd:52:0d:f6:11:2d:10:4d:e8:94:ec:
94:c5:62:84:3d:90:71:d0:25:9c:32:0f:6b:63:8f:7e:7f:40:
25:7b:50:47:42:72:1f:ff:eb:79:66:06:41:2f:4b:dd:58:6a:
17:1f:11:0c:60:7a:8b:02:be:0b:66:2e:b2:0f:b7:32:a6:13:
b0:0c:02:e6:43:26:e5:24:5b:d0:ce:ff:d2:b1:80:14:40:53:
7d:51:16:76:7c:96:8f:d8:4b:a3:32:89:3d:78:ef:bb:e0:25:
9f:40:9d:bf:fd:3b:e4:fb:fa:30:86:fd:7c:21:ae:ad:c1:9e:
53:5c:9d:8f:43:1c:f4:ba:f8:91:83:58:60:17:ac:db:fa:8d:
4d:56:a0:7e:74:5b:04:db:79:d5:8d:21:55:4d:0b:21:3f:59:
f4:5d:16:c4:74:39:b7:1d:fb:cf:7c:a5:02:ef:a8:b4:ae:52:
e6:76:f4:cf:cd:c7:43:df:43:17:23:45:be:3f:fe:3d:c4:65:
01:81:28:53:98:eb:31:93:bc:51:12:2d:c6:5f:54:76:e5:d4:
2d:a9:d6:52:1d:16:f7:90:d4:f9:96:6f:6c:5f:df:84:72:ad:
5c:ca:e7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:24 2026 by rpki-client