Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD4404160611F1901208EDDAE4EC9C.roa
File: D9DD4404160611F1901208EDDAE4EC9C.roa (raw, json)
Hash identifier: AA+5VMzZGaQGm4Rhy+8zAk9JroqPJhnzhjv2NAA7L1A=
Subject key identifier: 7A:6B:86:70:A4:85:81:59:16:D9:EE:F6:90:CD:02:A0:11:C9:71:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD4404160611F1901208EDDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:10:11 +0000
ROA not before: Mon 02 Mar 2026 07:10:06 +0000
ROA not after: Mon 09 Mar 2026 07:10:06 +0000
asID: 149014
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106923 (0x1a1ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 07:10:06 2026 GMT
Not After : Mar 9 07:10:06 2026 GMT
Subject: CN=69a537d2-4a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:be:09:96:f0:b3:1e:5f:4f:a0:f4:bd:a0:
05:75:a8:a5:9e:3c:b4:45:b7:d9:e3:92:2d:f1:33:
df:58:c7:f5:dd:7d:2d:66:d3:05:80:b1:d4:9f:de:
dd:22:f4:07:47:3a:e5:21:8a:07:db:c4:db:77:d4:
d3:eb:ac:12:ae:8d:3f:c7:fe:b3:e4:9f:24:9d:95:
85:4f:be:20:06:83:17:68:c4:3c:1c:15:60:fb:ad:
17:a2:53:18:2f:ea:57:1b:a0:5d:fb:f4:b5:f7:f4:
4c:f2:d4:51:18:76:ae:20:db:47:8a:57:60:35:6d:
b7:0e:51:81:df:d7:9b:a9:ff:d9:5e:2d:a6:f6:5f:
c5:79:47:97:6e:f8:84:06:eb:0d:21:55:57:9c:11:
db:89:96:e5:99:38:95:3f:a1:48:00:85:b1:69:ec:
ee:6e:c6:1d:e6:a4:c8:6f:b3:85:85:7b:f5:78:a7:
05:df:2b:b2:c9:19:99:41:e4:ff:4b:50:64:c4:70:
9e:5e:4a:f3:75:40:e2:0f:92:bc:76:4d:94:9b:b9:
28:92:c3:62:e4:a9:48:8d:c1:35:d7:26:22:f5:dd:
a8:1e:e1:4f:32:5b:a7:b6:f0:8d:cb:04:94:7a:f6:
35:e2:a1:21:08:78:37:62:b0:a3:f6:c7:6e:7b:d3:
3b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6B:86:70:A4:85:81:59:16:D9:EE:F6:90:CD:02:A0:11:C9:71:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9DD4404160611F1901208EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
92:7b:51:fe:fa:88:a0:fb:61:bd:fd:f5:ec:81:06:77:2a:73:
48:45:e5:8b:82:3b:cb:fe:38:99:c5:2f:ce:d9:68:c6:6f:f0:
3f:90:85:02:92:ce:a7:33:c5:bc:f8:a8:2d:45:30:f3:86:b7:
3d:2e:cc:d1:5b:d5:8c:36:c3:50:92:d5:2c:7e:b2:86:cf:80:
c8:11:2e:a7:43:c3:88:de:b3:12:1c:fc:cc:24:43:73:a7:d0:
00:d0:64:85:4d:6a:20:3e:d8:44:2c:4b:eb:ff:1f:5d:40:66:
52:29:d5:8f:8c:74:2d:25:07:a2:69:97:66:ea:dd:e1:7e:e0:
0a:ae:0f:03:82:23:12:2a:52:71:0a:ce:47:9c:17:9b:35:b0:
51:9f:36:d2:d0:96:c8:27:e4:ba:16:de:19:2e:3e:3c:b4:2c:
4d:0a:e3:52:dc:13:97:c9:73:e0:bf:b8:86:e0:b1:cf:b8:17:
c7:0f:b6:56:81:2c:71:93:bd:b9:87:e4:7f:80:5f:eb:c7:4e:
a5:78:f2:0c:c4:9a:a3:14:9f:f9:2d:3c:20:26:24:70:62:bc:
3b:2d:a7:2b:e9:21:03:52:23:20:d6:af:b6:a1:b2:e0:3f:6f:
27:25:aa:99:e4:85:4f:b5:6d:0b:1f:32:06:61:52:ee:e7:31:
0b:e5:b7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 12:44:42 2026 by rpki-client