Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0278F90A26A411F1BDE6C997DAE4EC9C.roa
File: 0278F90A26A411F1BDE6C997DAE4EC9C.roa (raw, json)
Hash identifier: a69ayXtf5xMKXXxYkzORfoCLvaEwjhD17zmtrqt3B+g=
Subject key identifier: 5B:80:91:9A:F7:88:F1:B8:C6:00:C0:42:DE:66:C8:BA:A2:0F:91:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0278F90A26A411F1BDE6C997DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 10:35:29 +0000
ROA not before: Mon 23 Mar 2026 10:35:24 +0000
ROA not after: Thu 30 Apr 2026 10:35:24 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108268 (0x1a6ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 10:35:24 2026 GMT
Not After : Apr 30 10:35:24 2026 GMT
Subject: CN=69c11771-401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:e9:ae:8f:49:f7:2e:33:a7:3d:38:5a:6f:
0b:9c:d5:86:77:79:ca:81:ac:cf:8e:33:f9:66:1f:
8d:a4:ed:a2:b7:0e:38:5e:b3:79:42:3b:ca:b7:af:
a4:81:d9:f0:24:fd:cb:1c:10:b2:e1:f3:03:b4:23:
e9:1f:24:68:7f:58:2d:44:45:04:e7:d8:6e:f6:74:
57:58:c6:25:d3:88:02:85:e6:fd:92:66:56:4c:a2:
5d:d7:87:c1:47:b4:2c:0e:c4:60:2d:03:bb:72:37:
a4:f6:c4:b0:8b:51:45:94:32:23:7c:95:c7:d6:c5:
90:19:02:41:85:16:58:3f:53:de:52:ee:59:18:78:
78:0e:79:30:c2:37:25:85:d9:3c:97:d1:34:71:0e:
2d:d1:f8:dd:aa:3e:06:33:92:61:fa:7e:68:fe:be:
0b:bd:93:83:1a:30:27:28:b9:23:a9:71:a8:cc:a3:
b0:68:fd:07:3b:5c:bf:76:20:de:50:74:01:33:f5:
7c:7b:8e:b0:40:a5:d0:8b:88:cf:f3:40:de:70:ce:
8b:c8:58:ff:7b:f0:2a:ba:0b:ff:30:10:45:92:b9:
14:02:ea:c8:7a:0e:a1:91:2f:35:18:c0:d3:a8:fb:
27:8f:be:b2:5c:8b:c9:c9:cc:0d:95:16:2c:09:55:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:80:91:9A:F7:88:F1:B8:C6:00:C0:42:DE:66:C8:BA:A2:0F:91:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0278F90A26A411F1BDE6C997DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
89:93:ba:49:d6:9a:02:3b:b3:9d:83:23:88:28:ad:83:0a:96:
a5:32:c5:d4:b7:51:e7:64:43:dd:f2:2f:ea:2f:a8:ed:82:09:
c0:bf:01:1e:0c:b5:2c:42:86:a8:e0:0e:ae:0e:e5:cb:8a:53:
26:08:0c:45:a5:fb:34:33:58:16:02:77:3e:d7:39:71:2e:e9:
fa:c3:09:95:d7:bf:19:9e:5e:dd:9d:92:7d:a7:38:d8:4e:91:
ea:4b:00:bd:a3:0c:f5:53:7e:41:91:dd:0f:cd:f9:5c:6f:d0:
0a:d0:23:b1:f7:89:41:b0:ae:67:d5:e2:6b:08:f3:d0:70:75:
50:18:90:17:05:17:00:a0:09:5e:36:d5:2b:49:d3:ba:b8:f0:
b0:1c:e6:d3:ff:01:35:9d:d8:06:60:e3:62:96:3b:9d:03:6a:
59:a0:31:57:83:ee:0a:ef:bd:46:ba:72:26:89:e3:90:3f:f7:
43:e2:d6:92:2c:eb:67:94:69:87:62:7c:29:e8:d7:e5:ee:58:
f2:c1:40:a1:83:16:b8:c5:3a:90:89:1d:cb:18:f8:71:d3:0a:
ef:09:15:49:53:b0:b9:b4:1d:6b:75:97:cf:bd:1b:d6:61:c2:
59:25:33:0b:fe:82:14:bc:d3:a5:75:34:b9:13:e2:52:dd:78:
98:8d:4b:42
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAabsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIzMTAzNTI0WhcNMjYwNDMwMTAzNTI0WjAYMRYw
FAYDVQQDEw02OWMxMTc3MS00MDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHPpro9J9y4zpz04Wm8LnNWGd3nKgazPjjP5Zh+NpO2itw44XrN5QjvK
t6+kgdnwJP3LHBCy4fMDtCPpHyRof1gtREUE59hu9nRXWMYl04gCheb9kmZWTKJd
14fBR7QsDsRgLQO7cjek9sSwi1FFlDIjfJXH1sWQGQJBhRZYP1PeUu5ZGHh4Dnkw
wjclhdk8l9E0cQ4t0fjdqj4GM5Jh+n5o/r4LvZODGjAnKLkjqXGozKOwaP0HO1y/
diDeUHQBM/V8e46wQKXQi4jP80DecM6LyFj/e/Aqugv/MBBFkrkUAurIeg6hkS81
GMDTqPsnj76yXIvJycwNlRYsCVUlVwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFFuA
kZr3iPG4xgDAQt5myLqiD5E4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMjc4RjkwQTI2QTQxMUYxQkRFNkM5OTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBnPW8MAwDBAGc9cYDBAKc9cgw
DAMEAJz10QMEAJz10gMEAZz18jANBgkqhkiG9w0BAQsFAAOCAQEAiZO6SdaaAjuz
nYMjiCitgwqWpTLF1LdR52RD3fIv6i+o7YIJwL8BHgy1LEKGqOAOrg7ly4pTJggM
RaX7NDNYFgJ3Ptc5cS7p+sMJlde/GZ5e3Z2Sfac42E6R6ksAvaMM9VN+QZHdD835
XG/QCtAjsfeJQbCuZ9Xiawjz0HB1UBiQFwUXAKAJXjbVK0nTurjwsBzm0/8BNZ3Y
BmDjYpY7nQNqWaAxV4PuCu+9RrpyJonjkD/3Q+LWkizrZ5Rph2J8KejX5e5Y8sFA
oYMWuMU6kIkdyxj4cdMK7wkVSVOwubQda3WXz70b1mHCWSUzC/6CFLzTpXU0uRPi
Ut14mI1LQg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:00 2026 by rpki-client