Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D7B38A254011F1A68604F3DAE4EC9C.roa
File: 00D7B38A254011F1A68604F3DAE4EC9C.roa (raw, json)
Hash identifier: r2y3nWaPrUlKYddx2PxcEDHp9ma2hErqLk8MQ3g8Z0Q=
Subject key identifier: BE:BF:49:BD:38:39:15:B9:97:92:BC:70:35:53:F1:80:81:FD:CA:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A688
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D7B38A254011F1A68604F3DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 16:07:05 +0000
ROA not before: Sat 21 Mar 2026 16:07:00 +0000
ROA not after: Tue 28 Apr 2026 16:07:00 +0000
asID: 48031
IP address blocks: 156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108168 (0x1a688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 16:07:00 2026 GMT
Not After : Apr 28 16:07:00 2026 GMT
Subject: CN=69bec229-d372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:72:26:a9:6e:b8:ab:4d:54:0a:e5:49:80:
9c:fe:35:c1:0c:10:b0:78:d8:d9:03:ff:4a:6e:59:
95:2d:64:bc:68:3d:26:41:84:eb:8f:93:3a:44:c4:
c5:b3:06:fb:5e:b6:9b:e5:73:92:b5:bc:12:36:9c:
93:d0:ba:4a:d6:69:7e:86:dd:ae:87:2f:11:b6:e9:
e1:b9:23:fa:94:56:a6:76:c2:6a:7d:27:9c:d8:1b:
d0:d0:da:08:3d:52:1e:f1:d8:73:86:b8:13:92:b5:
70:f7:6b:78:e7:46:98:85:77:d8:26:3b:90:5b:b0:
cb:ae:82:e0:79:db:79:51:3e:c9:9c:1d:68:10:6d:
38:32:a9:d6:3a:b1:50:a8:d3:3d:74:2d:3f:ec:68:
cd:cc:2b:08:9a:27:29:5e:b2:4f:fc:a5:8a:aa:8f:
be:f0:76:33:06:e6:e8:e2:43:38:21:5a:41:ad:5f:
4f:45:a3:58:d3:fe:4a:8e:fa:4b:b4:cf:03:8f:2c:
71:28:4d:ce:06:c8:c6:87:ed:8a:29:e6:6f:8c:13:
d8:08:5e:f5:89:f7:46:03:61:57:52:57:a3:a7:db:
5a:00:66:0e:32:15:0e:7c:39:d8:5f:87:15:63:5a:
51:30:f1:aa:f4:ec:b7:6e:38:4d:4a:73:58:10:c5:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:49:BD:38:39:15:B9:97:92:BC:70:35:53:F1:80:81:FD:CA:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D7B38A254011F1A68604F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.138.0-156.246.147.255
Signature Algorithm: sha256WithRSAEncryption
8e:22:24:48:9b:df:bb:5d:20:2b:fd:28:85:6a:7f:a0:45:37:
78:6c:93:64:a6:f5:31:81:84:2d:56:5c:99:af:78:76:7d:4d:
fa:23:6e:2e:51:88:a2:4d:61:f5:fb:ab:20:24:17:15:f8:48:
8c:6d:cd:f8:22:fc:56:6d:a1:c5:91:75:ca:50:fb:f6:d9:10:
a8:a3:11:af:f2:f6:99:d6:98:97:03:45:2e:f4:c8:07:45:76:
35:51:d7:7f:31:4d:e4:b7:f0:9f:23:9d:d7:c9:82:4b:0e:e7:
06:29:37:73:23:0b:14:e1:cd:68:bf:6c:80:25:2c:99:f7:35:
6d:31:ea:2f:7a:23:66:7f:70:97:37:97:52:b0:20:c2:57:13:
26:a6:13:fc:4d:1a:19:cd:07:e4:13:54:a6:5f:aa:2b:a2:fa:
1d:c8:56:4e:8b:83:fb:2f:fd:2d:56:96:56:d7:d3:a3:4e:ff:
59:fe:d9:df:b2:0e:1b:81:94:4e:a4:c8:0e:ba:49:2d:4e:dc:
86:3c:73:35:b5:00:d4:ca:ac:41:29:9e:38:0b:df:64:55:10:
77:36:93:56:07:b0:84:27:94:e7:6f:b3:c6:e5:ba:fd:53:3d:
fc:fa:9e:12:ef:ff:9a:25:32:45:17:81:b4:ab:a0:fc:a9:96:
25:97:e0:ea
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaaIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMTYwNzAwWhcNMjYwNDI4MTYwNzAwWjAYMRYw
FAYDVQQDEw02OWJlYzIyOS1kMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz1pyJqluuKtNVArlSYCc/jXBDBCweNjZA/9KblmVLWS8aD0mQYTrj5M6
RMTFswb7Xrab5XOStbwSNpyT0LpK1ml+ht2uhy8RtunhuSP6lFamdsJqfSec2BvQ
0NoIPVIe8dhzhrgTkrVw92t450aYhXfYJjuQW7DLroLgedt5UT7JnB1oEG04MqnW
OrFQqNM9dC0/7GjNzCsImicpXrJP/KWKqo++8HYzBubo4kM4IVpBrV9PRaNY0/5K
jvpLtM8DjyxxKE3OBsjGh+2KKeZvjBPYCF71ifdGA2FXUlejp9taAGYOMhUOfDnY
X4cVY1pRMPGq9Oy3bjhNSnNYEMUDCwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFL6/
Sb04ORW5l5K8cDVT8YCB/cq8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMEQ3QjM4QTI1NDAxMUYxQTY4NjA0RjNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc9ooDBAKc9pAwDQYJKoZI
hvcNAQELBQADggEBAI4iJEib37tdICv9KIVqf6BFN3hsk2Sm9TGBhC1WXJmveHZ9
Tfojbi5RiKJNYfX7qyAkFxX4SIxtzfgi/FZtocWRdcpQ+/bZEKijEa/y9pnWmJcD
RS70yAdFdjVR138xTeS38J8jndfJgksO5wYpN3MjCxThzWi/bIAlLJn3NW0x6i96
I2Z/cJc3l1KwIMJXEyamE/xNGhnNB+QTVKZfqiui+h3IVk6Lg/sv/S1WllbX06NO
/1n+2d+yDhuBlE6kyA66SS1O3IY8czW1ANTKrEEpnjgL32RVEHc2k1YHsIQnlOdv
s8bluv1TPfz6nhLv/5olMkUXgbSroPypliWX4Oo=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:22 2026 by rpki-client