Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B814EDC210C11F1893D3C81DAE4EC9C.roa
File: 0B814EDC210C11F1893D3C81DAE4EC9C.roa (raw, json)
Hash identifier: JQxgarAb1HMi/Bu/8zjzPNVTddXt5wMipzQVnG/r4FQ=
Subject key identifier: C8:17:C3:DE:BF:1B:6C:8B:42:69:6B:21:6D:69:00:1A:19:F7:67:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A572
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B814EDC210C11F1893D3C81DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:45:04 +0000
ROA not before: Mon 16 Mar 2026 07:45:00 +0000
ROA not after: Thu 23 Apr 2026 07:45:00 +0000
asID: 138415
IP address blocks: 156.247.32.0/24 maxlen: 24
156.247.33.0/24 maxlen: 24
156.247.34.0/24 maxlen: 24
156.247.35.0/24 maxlen: 24
156.247.36.0/24 maxlen: 24
156.247.37.0/24 maxlen: 24
156.247.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107890 (0x1a572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:45:00 2026 GMT
Not After : Apr 23 07:45:00 2026 GMT
Subject: CN=69b7b500-8241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:38:38:32:36:8c:4d:a8:b5:54:d2:74:22:
c8:78:d2:57:2f:de:2a:d0:b9:5c:24:3d:0d:8f:0b:
dc:e0:bf:f4:6b:2b:50:dd:a1:c0:99:82:73:2a:f3:
1c:4f:78:5d:bc:9c:51:aa:c6:45:02:5d:fb:cc:dd:
ae:e9:0c:b4:62:89:c6:e5:6e:1c:bd:56:31:39:bf:
54:e1:a1:3f:7b:a4:3b:3f:fb:d6:83:76:17:0d:e6:
aa:c4:d7:e8:36:bd:7c:8e:63:8b:75:db:3a:a1:83:
79:a7:0b:61:2b:56:45:ac:09:c1:3f:a2:e6:a0:a3:
7b:c0:f6:90:8f:c6:16:a9:ba:d8:f4:ec:8e:2e:96:
67:4f:32:d6:a5:97:b2:90:10:3e:63:b9:ce:9f:ed:
99:a6:30:b1:ca:3b:8b:de:29:39:a9:9e:df:15:e7:
ef:68:2f:ce:dc:9d:b9:11:52:f6:4a:29:aa:a2:db:
ac:69:4d:9e:15:b6:f1:49:a0:9b:48:34:56:92:53:
33:c0:34:8f:72:f5:b0:c4:26:21:a3:a2:28:34:bc:
30:60:cb:f9:b3:ee:cc:53:49:8c:be:7e:62:96:37:
7c:d3:b5:0e:a4:b1:7d:d5:aa:ad:44:3c:62:d4:b5:
e9:05:76:ed:6c:62:96:3d:2f:21:61:ee:ae:2a:22:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:17:C3:DE:BF:1B:6C:8B:42:69:6B:21:6D:69:00:1A:19:F7:67:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B814EDC210C11F1893D3C81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0-156.247.38.255
Signature Algorithm: sha256WithRSAEncryption
13:07:84:4a:12:05:fc:ec:31:57:94:1b:58:b7:58:30:1e:97:
1d:34:40:35:70:6f:6f:e8:4f:f7:fc:03:75:ca:e8:29:d9:d3:
9a:13:8d:8f:28:a4:d0:5e:11:76:0b:99:01:84:d3:2f:a0:c7:
65:68:e9:77:85:d3:40:7b:bf:ba:40:eb:12:cc:60:6c:cc:1a:
89:85:c3:fa:bd:fe:af:bf:ce:5a:5f:88:40:43:e6:e8:ba:b4:
a7:4f:d1:97:41:1d:9f:26:28:05:d6:23:c1:b6:d4:ab:42:d3:
52:a5:6c:b0:b4:75:1d:c4:a1:76:d2:94:f2:21:22:9d:1e:b5:
05:1b:97:6f:cb:9b:be:76:06:ac:c3:f8:ed:19:4e:d5:25:54:
35:09:31:5b:a3:cf:d1:83:6e:3f:1c:07:4d:62:39:2d:b0:1f:
21:31:5d:2c:2b:b4:36:3c:e9:d9:90:a8:19:08:9a:98:86:56:
ee:f0:fc:9a:98:87:5f:02:3d:07:f1:47:73:6e:ac:7f:24:73:
53:8e:71:83:f0:3c:70:68:47:01:14:53:b5:a5:89:60:c3:33:
a7:68:f5:54:23:b4:ac:f4:6b:9e:6c:4a:fb:df:11:cd:cf:8b:
72:29:1b:b9:fa:92:a1:09:51:7c:ab:53:7f:8f:3c:ff:8e:20:
b4:4f:84:18
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaVyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE2MDc0NTAwWhcNMjYwNDIzMDc0NTAwWjAYMRYw
FAYDVQQDEw02OWI3YjUwMC04MjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwY44ODI2jE2otVTSdCLIeNJXL94q0LlcJD0Njwvc4L/0aytQ3aHAmYJz
KvMcT3hdvJxRqsZFAl37zN2u6Qy0YonG5W4cvVYxOb9U4aE/e6Q7P/vWg3YXDeaq
xNfoNr18jmOLdds6oYN5pwthK1ZFrAnBP6LmoKN7wPaQj8YWqbrY9OyOLpZnTzLW
pZeykBA+Y7nOn+2ZpjCxyjuL3ik5qZ7fFefvaC/O3J25EVL2SimqotusaU2eFbbx
SaCbSDRWklMzwDSPcvWwxCYho6IoNLwwYMv5s+7MU0mMvn5iljd807UOpLF91aqt
RDxi1LXpBXbtbGKWPS8hYe6uKiL7SwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMgX
w96/G2yLQmlrIW1pABoZ92c8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQjgxNEVEQzIxMEMxMUYxODkzRDNDODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc9yADBACc9yYwDQYJKoZI
hvcNAQELBQADggEBABMHhEoSBfzsMVeUG1i3WDAelx00QDVwb2/oT/f8A3XK6CnZ
05oTjY8opNBeEXYLmQGE0y+gx2Vo6XeF00B7v7pA6xLMYGzMGomFw/q9/q+/zlpf
iEBD5ui6tKdP0ZdBHZ8mKAXWI8G21KtC01KlbLC0dR3EoXbSlPIhIp0etQUbl2/L
m752BqzD+O0ZTtUlVDUJMVujz9GDbj8cB01iOS2wHyExXSwrtDY86dmQqBkImpiG
Vu7w/JqYh18CPQfxR3NurH8kc1OOcYPwPHBoRwEUU7WliWDDM6do9VQjtKz0a55s
SvvfEc3Pi3IpG7n6kqEJUXyrU3+PPP+OILRPhBg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:17 2026 by rpki-client