Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA1F00D817B411F1A938E1BBDAE4EC9C.roa
File: DA1F00D817B411F1A938E1BBDAE4EC9C.roa (raw, json)
Hash identifier: DsCU3zq8Tsr/cWZen0g1Qe0Vc6hPNLls/eEy8AmdfA0=
Subject key identifier: AE:D7:0B:22:C7:CC:82:A4:31:B5:6E:DC:64:73:E4:09:3C:1E:2C:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A230
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA1F00D817B411F1A938E1BBDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 10:28:15 +0000
ROA not before: Wed 04 Mar 2026 10:28:10 +0000
ROA not after: Fri 08 May 2026 10:28:10 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107056 (0x1a230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 10:28:10 2026 GMT
Not After : May 8 10:28:10 2026 GMT
Subject: CN=69a8093f-c330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:7e:07:c8:30:bb:7c:30:a4:79:a6:4c:26:
f1:83:78:35:61:64:08:5a:a1:26:94:81:3b:e1:a5:
37:ba:5e:8e:dd:f1:21:55:b9:bc:bb:83:bd:21:79:
3f:db:7a:08:c1:a0:08:f2:3d:c5:d2:b4:c8:bc:71:
9b:b1:0c:59:f6:5f:a7:d5:a3:a6:93:11:28:98:bb:
d4:65:ec:fd:63:66:34:03:e5:7f:89:38:fd:62:4c:
ae:66:2f:5f:20:bf:7e:10:cd:63:ce:ef:82:32:c4:
46:98:dd:79:c4:ee:41:91:7f:a2:1f:73:5b:a1:c5:
39:35:56:35:58:56:df:3b:47:6b:f6:f7:cf:50:2a:
50:ee:f3:e7:3a:c0:ca:6b:6d:16:86:b8:20:d5:64:
63:a9:25:52:64:94:38:25:1c:a0:ec:c3:88:ae:af:
98:b4:b4:ee:b5:d7:12:94:bf:8c:61:b9:17:d3:0e:
07:1e:36:70:42:a5:d4:bb:b5:55:40:56:33:50:c1:
0b:61:82:d5:82:3d:e9:5e:3e:ed:c9:a8:25:94:c7:
1b:1f:cf:6c:f6:ff:01:23:b0:8a:40:bb:62:d9:ef:
e5:99:2c:67:f6:96:f1:f2:6c:bd:d1:b3:75:46:f8:
02:8a:76:3f:26:fb:01:d5:59:8b:a4:d9:4c:e4:af:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D7:0B:22:C7:CC:82:A4:31:B5:6E:DC:64:73:E4:09:3C:1E:2C:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA1F00D817B411F1A938E1BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b9:6a:98:ac:9a:9a:19:e4:6d:a7:50:1c:24:86:65:5b:d8:
5b:05:a1:5d:88:85:7d:46:bb:32:ea:89:4b:72:31:17:29:9b:
f4:30:08:6f:7d:46:85:2f:18:fe:fd:1e:66:31:b7:58:f2:d2:
ad:5e:74:1e:6f:98:7d:55:1f:fe:38:ec:79:12:07:fb:79:06:
da:b8:40:69:ea:51:ef:9e:65:2e:04:30:a3:fb:c2:d4:b7:46:
02:1e:7f:32:02:3b:74:48:93:2b:29:9b:61:3d:37:90:0d:29:
7d:9b:b7:53:06:9d:70:6d:43:6d:6c:7c:26:cb:47:b3:a1:46:
1d:36:e7:0c:f2:9b:1b:87:1a:cb:f7:1e:16:49:7b:86:ee:75:
19:ed:90:fc:3a:af:cf:fa:0b:56:24:a0:04:2f:15:87:2e:d5:
a4:b7:e9:24:a2:8b:16:5b:c2:d1:1e:c4:b9:81:38:23:f4:38:
d8:66:b9:05:f5:8c:1f:9d:37:62:38:29:09:eb:c7:a5:25:26:
bb:08:18:20:9b:da:c9:3c:9d:6e:8c:f3:96:3d:2d:6c:e1:ac:
24:d2:0c:26:6c:08:22:50:ab:1d:66:d2:a3:86:9b:df:32:3a:
71:a1:ce:0f:8e:a7:dd:92:6d:44:58:a3:3c:29:73:9d:e0:fd:
ee:8c:95:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:55:02 2026 by rpki-client