Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19358B24ED911F1B8FCC9D3CE1D38B0.roa
File: E19358B24ED911F1B8FCC9D3CE1D38B0.roa (raw, json)
Hash identifier: dV8MUcAodloUqIdhJ9mLGFYkN3Dazn6/2b6Yc4eWFNc=
Subject key identifier: 11:06:9F:D8:38:02:FF:E4:8F:63:ED:45:00:43:66:F4:21:26:C1:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B445
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19358B24ED911F1B8FCC9D3CE1D38B0.roa
Signing time: Wed 13 May 2026 14:41:53 +0000
ROA not before: Wed 13 May 2026 14:41:48 +0000
ROA not after: Fri 19 Jun 2026 14:41:48 +0000
asID: 11404
IP address blocks: 156.226.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111685 (0x1b445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 14:41:48 2026 GMT
Not After : Jun 19 14:41:48 2026 GMT
Subject: CN=6a048db1-5296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:ed:ba:5a:23:f8:8d:fc:65:9e:cc:ae:0c:
77:3c:e7:4d:d3:2a:96:38:70:42:e6:29:a3:62:5e:
e1:ee:1b:5b:17:11:4d:3f:88:2b:7d:79:1a:fc:53:
98:5a:10:1f:f0:02:a6:a8:ac:c2:2e:69:7e:d8:5d:
82:d1:ea:cf:7b:f5:ee:6a:ea:ed:ce:8f:1f:13:e0:
3f:7c:75:91:e3:e0:cb:53:7f:48:af:80:e2:e2:9b:
1f:af:62:39:ff:e0:9d:d6:e5:56:4f:29:a4:ce:b1:
ed:34:06:39:2e:f9:ec:4c:3c:0b:27:36:0b:af:1e:
27:80:9f:62:cc:a5:64:9d:aa:f6:28:49:ee:95:a6:
94:79:c7:60:6c:4a:ac:2c:b1:71:6f:33:1f:20:0f:
dd:42:db:b9:63:3a:47:cb:48:f0:98:01:2f:c1:d5:
b6:cd:63:98:f8:dd:34:d1:36:fc:c9:f1:6a:8c:31:
ea:f4:26:46:84:8c:95:d4:76:6e:93:ba:57:94:05:
75:4c:83:ba:8a:20:dc:ea:aa:4f:38:12:0f:ed:d6:
65:d3:87:58:89:48:76:fa:78:bc:2c:09:44:7e:68:
3a:b6:d5:ed:51:77:8e:b2:91:21:76:77:7e:24:e5:
99:b0:9d:0f:76:59:cb:f5:3e:1a:c2:af:c4:f6:c6:
5b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:06:9F:D8:38:02:FF:E4:8F:63:ED:45:00:43:66:F4:21:26:C1:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E19358B24ED911F1B8FCC9D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:67:f3:e7:1a:50:16:38:16:61:76:c5:1b:47:03:24:fd:59:
e4:0a:d0:7b:f0:6c:29:f4:76:21:08:94:6d:f5:8e:3b:bf:4e:
92:0a:c1:40:5b:00:89:da:c6:ee:48:1a:24:10:81:57:cb:27:
6a:e6:45:36:65:7c:96:40:05:67:4b:0d:51:7e:33:5c:20:39:
e4:81:82:81:52:64:ee:57:51:ed:d0:22:5d:98:f8:6b:c5:0a:
5c:59:c3:56:c5:28:ea:b9:a4:5c:e0:ae:e7:6c:43:3f:4e:ef:
3c:16:84:41:0b:bb:50:b3:6c:50:d6:4e:f4:73:7b:a5:7e:9e:
02:ce:cb:97:6d:a1:be:2f:42:d8:0f:8e:7d:de:66:ea:4a:65:
cb:df:14:8d:32:58:4f:58:6d:8d:ac:b4:a6:7e:99:94:99:e0:
3f:25:d4:87:38:d2:c0:da:c8:e6:ce:4a:5a:b3:95:29:16:d9:
af:da:a7:53:2b:e2:3f:ea:4c:0d:84:ec:85:aa:5d:88:d1:67:
b5:c3:59:93:20:7b:26:38:c9:0d:d6:1e:8c:87:a4:af:ca:4a:
c4:0d:c3:19:81:67:ca:e1:8b:09:08:9b:23:5a:9e:eb:fe:83:
ca:5a:4a:c5:13:2d:d4:1d:ca:15:2c:22:83:fa:fa:00:76:28:
d7:f8:15:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:11 2026 by rpki-client