Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56647FA5A8C11F191F1270DCF1D38B0.roa
File: F56647FA5A8C11F191F1270DCF1D38B0.roa (raw, json)
Hash identifier: 3oCKAz7R2Jzxk5TVHqJ70eita9YHUywYRzCP4yPXK0k=
Subject key identifier: 11:9B:F0:17:8A:11:53:4D:09:8E:47:4A:E2:A3:1E:96:2B:0D:46:57
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56647FA5A8C11F191F1270DCF1D38B0.roa
Signing time: Thu 28 May 2026 12:01:29 +0000
ROA not before: Thu 28 May 2026 12:01:24 +0000
ROA not after: Mon 08 Jun 2026 12:01:24 +0000
asID: 269984
IP address blocks: 156.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113311 (0x1ba9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 12:01:24 2026 GMT
Not After : Jun 8 12:01:24 2026 GMT
Subject: CN=6a182e99-d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:14:d5:3a:06:58:7e:1e:69:54:f3:a7:f5:
c8:19:6b:4f:1c:fa:6f:14:7b:67:ec:ba:60:b2:46:
03:10:2a:17:36:28:ce:94:fb:c1:fc:b7:8a:3a:ee:
37:af:77:20:61:48:14:50:15:22:ac:0a:9b:a5:e7:
93:35:45:fb:42:b3:0d:3d:45:a5:23:37:4a:b1:1a:
0d:37:95:af:e1:63:44:97:37:20:55:a7:51:0a:b7:
6f:51:46:98:c2:df:27:ae:7d:af:c0:75:ab:b6:7c:
fd:14:a6:92:47:39:ba:51:1b:64:9a:e5:55:5c:14:
93:a2:11:c3:7f:82:70:f6:67:50:08:10:b7:59:b7:
4d:bf:98:6a:a7:42:a4:2f:39:6c:ca:47:60:b4:eb:
b3:78:43:50:8f:c3:5f:98:66:0b:7a:4a:91:05:73:
33:ac:a6:3e:4b:3a:d8:a5:8c:18:ad:27:41:70:54:
e2:5c:93:f7:0d:b6:70:23:bc:21:25:4f:98:52:46:
97:ea:0c:56:61:5a:ce:0e:6d:3d:79:54:02:b6:71:
43:b8:c9:9d:da:90:c9:d5:3b:d8:d7:45:7c:e0:b7:
a8:ac:50:b4:04:f6:77:7c:79:f1:9d:75:45:23:67:
20:44:26:6b:7f:d4:2d:be:ee:0a:e8:9d:33:ed:3d:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9B:F0:17:8A:11:53:4D:09:8E:47:4A:E2:A3:1E:96:2B:0D:46:57
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F56647FA5A8C11F191F1270DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
44:c8:f1:93:19:61:a2:44:1c:04:e6:ab:8d:d4:bb:54:61:56:
50:b2:5d:5b:09:2f:d7:0f:6d:17:67:ba:54:c7:b6:1d:90:c9:
6b:26:67:37:75:40:d0:80:73:9a:45:32:99:30:2c:73:d0:30:
4a:30:03:c3:a7:4e:d2:a7:a9:fc:78:d4:99:af:0f:de:f1:5e:
b4:06:d8:32:94:5f:83:9d:12:96:e6:c2:4b:d8:4e:ab:1e:38:
9a:3f:c8:bb:fc:a8:8a:de:ce:e1:84:e2:a5:a0:57:5c:c5:6e:
03:04:fe:04:8b:d3:58:f1:a4:a6:ba:2e:e8:c6:6f:26:c7:c4:
28:3b:f7:b3:29:eb:e2:8d:09:2b:dd:4d:89:e2:4e:da:cc:5f:
1b:eb:69:fa:d1:6b:f5:78:3e:b6:c5:d9:89:6d:f6:c2:ba:7d:
14:53:33:72:68:71:44:cb:8c:3e:67:78:25:63:b2:20:71:dd:
f6:51:e2:e1:bd:07:07:d8:c1:6b:b6:95:9d:bb:50:26:c4:71:
18:da:82:60:11:67:0a:a9:a4:f8:34:56:7b:ff:0c:52:88:c8:
43:6d:c8:03:56:0c:06:9a:95:d9:9c:c3:9a:a8:58:13:9d:48:
6a:9d:a1:08:54:ab:c7:81:79:cf:af:5e:c5:75:22:9e:11:35:
a2:0b:18:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:48 2026 by rpki-client