Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD331A58250511F19484DBA8DAE4EC9C.roa
File: DD331A58250511F19484DBA8DAE4EC9C.roa (raw, json)
Hash identifier: EHBrWy3yJulwYOQkNOVOEbqO8W98Kt8TqrAITPrrFF4=
Subject key identifier: 10:19:A0:B0:BE:65:84:3F:8E:91:AF:9D:6A:06:B6:20:F4:F5:1F:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A646
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD331A58250511F19484DBA8DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 09:10:55 +0000
ROA not before: Sat 21 Mar 2026 09:10:50 +0000
ROA not after: Mon 30 Mar 2026 09:10:50 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
156.240.128.0/18 maxlen: 24
156.253.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108102 (0x1a646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 09:10:50 2026 GMT
Not After : Mar 30 09:10:50 2026 GMT
Subject: CN=69be609e-8bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:71:83:16:8b:9a:c2:3f:71:b4:f6:c3:ed:57:
bc:1e:ec:14:5b:69:e7:7a:82:61:03:a8:4c:2b:f6:
d2:c0:89:21:c0:4d:8a:73:43:a9:81:e5:27:1a:f1:
ce:52:f8:bf:51:81:f8:3e:d2:49:cc:21:cd:ed:73:
98:ff:35:c4:6a:dd:89:df:df:ee:19:81:f7:e3:06:
64:56:93:b3:24:d0:fa:db:c8:3f:d1:8b:b2:fe:a6:
1b:be:de:7f:97:60:e9:e1:8e:ab:6c:de:72:77:a6:
63:6d:5f:87:97:1d:d4:10:e4:32:f9:86:52:d2:aa:
7a:c8:f6:f0:6c:ce:69:79:4d:e4:41:25:6b:19:1a:
55:03:b7:d6:1a:21:3d:31:1a:59:e4:c9:0d:80:29:
f2:b2:e4:8a:9c:39:52:48:ca:05:d4:de:05:82:ca:
c9:25:c2:20:8f:65:54:74:c6:2b:63:4a:d8:9d:6f:
99:92:c4:6a:c3:65:bf:fb:db:04:2d:93:e7:0e:44:
a5:46:dd:32:7b:21:eb:69:1b:96:ab:57:62:5d:71:
fd:e6:73:16:1e:3e:93:45:16:71:8c:b8:98:04:56:
37:3c:59:7b:6a:c5:cc:10:24:59:13:a5:44:bf:7c:
d4:26:d4:f6:9b:cf:ae:c9:ef:11:48:fd:d4:d3:e7:
71:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:19:A0:B0:BE:65:84:3F:8E:91:AF:9D:6A:06:B6:20:F4:F5:1F:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD331A58250511F19484DBA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
156.240.128.0/18
156.253.16.0/20
Signature Algorithm: sha256WithRSAEncryption
80:a2:25:90:d0:d3:2d:97:87:e2:43:15:58:48:ae:35:62:e3:
4f:20:0e:5a:f0:00:da:e1:94:f9:ab:81:d5:62:07:0e:6e:bf:
a0:3c:08:e5:12:d0:0e:78:b9:fe:32:da:ae:84:87:c1:9a:2c:
ad:9e:c1:ac:93:39:3a:85:ca:b7:69:fb:27:4c:d6:6a:e0:4c:
36:64:1b:0e:6a:23:39:35:7e:7b:58:92:aa:20:4e:0e:a5:44:
10:a5:fe:f7:4e:09:56:8d:8d:55:89:6d:af:db:c5:7e:4c:0f:
b4:74:af:0b:9e:95:ed:a6:57:42:33:b8:e3:ee:c1:33:43:61:
5b:7e:4c:3e:7c:26:cb:15:8b:d1:6c:5c:8d:18:91:5c:89:79:
d5:0b:6f:4f:f1:d9:75:b6:db:73:bc:39:38:e9:3b:cd:26:8b:
79:2d:76:74:da:30:fb:ca:ac:74:a1:75:a9:1c:43:1d:cd:d1:
3e:f3:be:dd:bd:7e:fc:3c:e8:1d:e5:07:51:a3:31:ba:73:f9:
11:36:d6:38:68:90:a1:d6:50:6e:db:b8:4a:19:10:42:e5:85:
c0:18:3c:c1:90:10:04:67:b8:2f:12:ee:e3:ac:98:54:da:7c:
0e:3c:b5:a3:55:10:a2:59:0e:2d:e7:ac:d0:f0:b3:cd:e1:51:
13:2e:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:32:40 2026 by rpki-client