Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B81AA83A8E11F18CB1B810CF1D38B0.roa
File: F5B81AA83A8E11F18CB1B810CF1D38B0.roa (raw, json)
Hash identifier: XS/4aU41pFJF1gZtL7B9Z6PdmUCKuhmEqwf7QYe4jl8=
Subject key identifier: FA:68:41:D8:FC:0F:54:3B:9A:E9:84:6A:2A:F1:F6:D0:FC:32:0B:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B81AA83A8E11F18CB1B810CF1D38B0.roa
Signing time: Fri 17 Apr 2026 18:55:11 +0000
ROA not before: Fri 17 Apr 2026 18:55:04 +0000
ROA not after: Sun 26 Apr 2026 18:55:04 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109956 (0x1ad84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 18:55:04 2026 GMT
Not After : Apr 26 18:55:04 2026 GMT
Subject: CN=69e2820f-1ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:39:45:18:68:4a:1a:47:b9:f1:c9:c5:77:
e3:52:71:82:ba:c9:20:2b:0e:24:a0:bf:2b:ec:e0:
13:7c:48:fa:fd:57:85:db:7a:2c:70:b9:d8:cc:68:
a3:ee:e2:99:7f:b6:4b:80:bb:4f:de:c6:23:38:dc:
de:eb:87:70:87:a3:2d:8a:4a:10:0e:28:0e:23:9f:
7f:5e:7e:88:b4:1c:0d:e6:0f:bd:36:47:24:17:90:
25:e9:0a:33:dd:03:03:79:aa:3c:49:f9:fc:b0:ff:
2f:74:fc:4e:e9:7e:34:1b:8f:70:d7:8f:26:0d:06:
74:57:03:1b:88:0e:e2:53:e2:a0:e6:f8:0d:86:2c:
e2:62:6f:f4:d1:7c:cf:85:5e:88:d9:95:2b:89:50:
7d:07:67:7e:37:66:ae:df:59:83:23:92:10:8c:ea:
fb:84:27:04:6d:f9:f3:d1:db:91:d2:86:1b:12:e3:
a6:35:c7:e0:b5:11:60:f3:ea:b6:11:a8:33:98:9e:
00:1b:be:01:90:de:26:eb:7b:1b:91:e8:0b:3f:1b:
67:7f:f0:ae:16:c9:77:19:7d:8f:33:3c:ad:9e:be:
d8:c7:48:ab:36:5c:8f:ec:93:c7:e5:c9:0a:4d:ab:
58:f1:c3:26:40:30:95:28:39:ee:d6:e1:f9:52:e0:
23:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:68:41:D8:FC:0F:54:3B:9A:E9:84:6A:2A:F1:F6:D0:FC:32:0B:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5B81AA83A8E11F18CB1B810CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
Signature Algorithm: sha256WithRSAEncryption
30:5a:e3:ff:b3:bc:a5:67:62:30:df:fa:20:d4:ea:15:34:19:
38:cb:2e:09:f0:f2:13:c5:9d:81:ba:b2:56:37:23:0d:73:d4:
79:a6:7e:f7:b2:6f:83:1a:20:63:ca:12:39:06:63:2a:0b:26:
c1:2e:c4:98:f4:e6:ea:f3:fd:f4:61:eb:77:8d:c9:1b:e7:81:
2b:7a:ac:31:6b:52:f4:b2:2c:98:e4:39:03:c0:6e:22:04:e5:
15:ae:3c:8f:2d:75:6e:d4:9c:4d:9a:22:0d:83:37:dc:0f:4f:
ce:6c:25:9a:7a:3d:37:d3:65:4a:79:b8:7b:b8:93:7f:77:00:
f5:45:fa:f8:b7:2e:46:c6:4d:4f:31:d2:f0:51:94:4f:00:ac:
44:4c:cf:1c:58:d1:1c:b5:e7:06:e3:49:37:79:73:63:30:e5:
79:ff:9a:12:d3:45:fd:37:75:31:8f:93:98:96:e0:48:fb:a3:
78:8a:6b:d8:03:a8:38:ed:a1:3c:31:9c:c8:ae:46:3f:23:b0:
49:65:25:78:25:59:71:3c:9c:57:30:c3:86:1e:7f:96:67:5e:
82:39:3a:db:08:e5:d5:bc:60:03:10:45:97:f4:67:78:50:3e:
0f:92:57:fe:e3:4c:83:e9:b0:cc:c0:c4:00:08:10:fc:42:44:
c0:2a:88:4d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAa2EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE3MTg1NTA0WhcNMjYwNDI2MTg1NTA0WjAYMRYw
FAYDVQQDEw02OWUyODIwZi0xZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxE85RRhoShpHufHJxXfjUnGCuskgKw4koL8r7OATfEj6/VeF23oscLnY
zGij7uKZf7ZLgLtP3sYjONze64dwh6MtikoQDigOI59/Xn6ItBwN5g+9NkckF5Al
6Qoz3QMDeao8Sfn8sP8vdPxO6X40G49w148mDQZ0VwMbiA7iU+Kg5vgNhiziYm/0
0XzPhV6I2ZUriVB9B2d+N2au31mDI5IQjOr7hCcEbfnz0duR0oYbEuOmNcfgtRFg
8+q2EagzmJ4AG74BkN4m63sbkegLPxtnf/CuFsl3GX2PMzytnr7Yx0irNlyP7JPH
5ckKTatY8cMmQDCVKDnu1uH5UuAjgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpo
Qdj8D1Q7mumEairx9tD8MgtkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNUI4MUFBODNBOEUxMUYxOENCMUI4MTBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEnOYgAwQGnOZAMA0GCSqGSIb3
DQEBCwUAA4IBAQAwWuP/s7ylZ2Iw3/og1OoVNBk4yy4J8PITxZ2BurJWNyMNc9R5
pn73sm+DGiBjyhI5BmMqCybBLsSY9Obq8/30Yet3jckb54Ereqwxa1L0siyY5DkD
wG4iBOUVrjyPLXVu1JxNmiINgzfcD0/ObCWaej0302VKebh7uJN/dwD1Rfr4ty5G
xk1PMdLwUZRPAKxETM8cWNEctecG40k3eXNjMOV5/5oS00X9N3Uxj5OYluBI+6N4
imvYA6g47aE8MZzIrkY/I7BJZSV4JVlxPJxXMMOGHn+WZ16COTrbCOXVvGADEEWX
9Gd4UD4Pklf+40yD6bDMwMQACBD8QkTAKohN
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:30 2026 by rpki-client