Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC3756A1F9211F196A008E6DAE4EC9C.roa
File: DFC3756A1F9211F196A008E6DAE4EC9C.roa (raw, json)
Hash identifier: Hvid1siEUpiDCBE5JrNH5Fp/I89k/4Pvg+5YVJyl8ic=
Subject key identifier: 1B:F0:8C:F6:71:B3:7A:86:F8:19:CA:E3:8C:35:29:26:7B:B6:CA:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A512
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC3756A1F9211F196A008E6DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 10:45:11 +0000
ROA not before: Sat 14 Mar 2026 10:45:06 +0000
ROA not after: Sun 31 May 2026 10:45:06 +0000
asID: 399077
IP address blocks: 156.240.194.0/24 maxlen: 24
156.240.195.0/24 maxlen: 24
156.240.196.0/24 maxlen: 24
156.240.197.0/24 maxlen: 24
156.240.198.0/24 maxlen: 24
156.240.199.0/24 maxlen: 24
156.240.200.0/24 maxlen: 24
156.240.201.0/24 maxlen: 24
156.240.202.0/24 maxlen: 24
156.240.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107794 (0x1a512)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 10:45:06 2026 GMT
Not After : May 31 10:45:06 2026 GMT
Subject: CN=69b53c37-6947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b8:0b:6f:94:4f:9d:f5:5b:d4:3c:3a:76:ca:
79:6f:fb:b6:ee:bd:28:9a:d1:9d:b1:a3:6f:70:cc:
c6:45:29:e9:61:7a:76:4b:b2:1b:aa:e9:37:90:a7:
cd:21:49:e9:84:34:f8:9d:b7:94:a7:ca:eb:e2:db:
24:5f:09:74:bf:11:0f:ae:9d:5a:3a:21:a2:87:18:
d5:52:aa:eb:94:44:3a:3a:38:4a:0c:15:a6:3f:9f:
ee:18:a3:92:ff:e9:98:9a:1a:57:15:b7:88:45:72:
d1:ce:54:52:2f:05:a9:9e:15:37:8a:1c:fd:e5:8e:
cc:4c:81:68:6e:39:f5:0a:78:06:7a:1e:00:67:9c:
ff:77:fd:9d:12:2d:1d:bb:b5:89:34:51:8a:6a:5e:
c3:37:75:e4:06:19:79:9c:bb:32:83:c1:96:97:a9:
95:74:13:8f:0c:22:b4:85:8c:fb:52:9f:71:27:50:
a8:18:5b:00:49:a3:8c:3a:5e:f7:6c:da:4e:70:88:
03:0a:06:cf:a1:4d:e1:c2:0e:7a:87:e8:6e:24:42:
5c:35:20:ab:f5:1f:9e:94:d9:b9:31:33:c2:e5:ba:
4f:39:10:29:28:47:9f:89:8e:6d:03:ea:d9:69:de:
66:9b:80:64:68:5f:cc:d4:e8:9f:53:5f:ea:32:6f:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:8C:F6:71:B3:7A:86:F8:19:CA:E3:8C:35:29:26:7B:B6:CA:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DFC3756A1F9211F196A008E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.194.0-156.240.203.255
Signature Algorithm: sha256WithRSAEncryption
68:d8:8b:54:7a:52:52:32:17:d5:6b:5c:a7:b9:1b:b8:24:d0:
50:68:8a:6b:b2:d8:e5:37:02:ab:8f:7a:6d:1f:85:82:5c:25:
00:97:5f:39:e0:94:46:c9:30:47:42:28:4e:08:89:d0:9e:a0:
78:4c:38:7a:a5:af:ff:8c:cc:26:0a:61:02:4b:b4:6c:9b:37:
c8:5c:d0:13:1c:7d:34:d8:c7:fa:2b:a2:0e:49:f1:f1:07:ce:
fd:d3:67:78:c6:0e:cd:b3:f6:ab:45:e5:98:7f:6a:93:a6:82:
22:05:19:7d:85:c4:5a:53:a7:b5:6a:0f:5c:15:13:e6:ad:cf:
a9:be:c8:ae:fc:a8:a1:c6:b1:53:84:05:f2:61:ee:69:96:5a:
d3:d2:06:0a:2a:30:fa:5a:b0:4c:15:31:fa:6e:3f:5b:69:ad:
c2:e7:95:1d:ef:5e:d0:b2:4e:67:c5:d3:2e:38:95:4b:80:5f:
4d:04:39:f5:93:16:51:78:1f:71:21:a6:3f:f7:76:a4:fa:35:
bb:c8:30:af:88:f9:9b:dd:1b:f6:fe:79:4f:8e:23:0f:a2:3f:
ca:78:45:94:b3:40:0a:13:1d:04:27:f1:09:d6:a8:b5:35:6d:
19:c2:66:1f:78:d1:a7:14:7f:8e:a1:ff:81:22:d9:60:e5:fa:
f5:15:4d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:29 2026 by rpki-client