Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D5EF584491F11F18BA90403CF1D38B0.roa
File: 0D5EF584491F11F18BA90403CF1D38B0.roa (raw, json)
Hash identifier: oq1ScorHWHbRndvK+91a2WFRCQPbATFxZXBoNX42/TI=
Subject key identifier: 3A:80:9A:DD:09:5B:7B:C2:C7:4F:7F:B6:29:F9:C2:BF:EE:49:64:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D5EF584491F11F18BA90403CF1D38B0.roa
Signing time: Wed 06 May 2026 07:41:55 +0000
ROA not before: Wed 06 May 2026 07:41:50 +0000
ROA not after: Sun 06 May 2029 07:41:50 +0000
asID: 17561
IP address blocks: 156.235.168.0/24 maxlen: 24
156.235.169.0/24 maxlen: 24
156.235.170.0/24 maxlen: 24
156.235.171.0/24 maxlen: 24
156.235.172.0/24 maxlen: 24
156.235.173.0/24 maxlen: 24
156.235.174.0/24 maxlen: 24
156.235.175.0/24 maxlen: 24
156.235.176.0/24 maxlen: 24
156.235.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111020 (0x1b1ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 07:41:50 2026 GMT
Not After : May 6 07:41:50 2029 GMT
Subject: CN=69faf0c2-979c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:55:1f:71:8f:d8:66:55:00:9e:1c:5c:36:
53:7c:07:b7:4e:e8:c0:dd:b0:19:03:8c:02:7b:88:
be:06:79:df:9a:cb:fa:e7:49:4c:27:37:d8:05:8f:
b9:b4:73:e0:a7:7c:b2:f4:35:00:98:47:2f:15:83:
7a:4d:41:c6:eb:12:69:b7:ca:fc:fa:16:48:2b:d5:
0f:a8:3d:1a:5e:d3:37:41:9a:20:f5:b5:a2:2f:37:
4f:f9:25:e6:4e:eb:e9:be:5b:de:cc:35:bd:22:1d:
4b:10:d6:85:f6:76:c6:ae:a5:02:b0:7e:c0:01:5b:
02:7f:c2:fb:09:5f:21:cb:6e:01:20:36:8c:73:8a:
c9:5b:ef:fe:cb:33:db:f3:6a:13:2c:4f:b4:1b:5b:
06:d6:dd:7b:ef:7b:54:7c:ac:d5:4e:38:bd:05:64:
59:99:b1:a1:1a:ee:da:af:39:9a:57:a5:88:32:31:
93:8d:d9:a0:a0:06:08:8f:8d:6e:a3:87:2c:92:3e:
19:17:a7:d3:1f:52:8e:1e:9c:c5:fd:3d:cb:2d:09:
59:3d:81:28:f1:86:b5:2e:80:dd:3a:7e:5e:27:05:
5b:09:7f:b1:8e:99:cb:99:1c:ea:0f:24:17:2c:fd:
88:10:b4:95:80:fd:bb:20:69:82:8e:f4:69:8a:4a:
f0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:9A:DD:09:5B:7B:C2:C7:4F:7F:B6:29:F9:C2:BF:EE:49:64:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D5EF584491F11F18BA90403CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.168.0-156.235.177.255
Signature Algorithm: sha256WithRSAEncryption
94:ad:ef:08:c5:11:dd:5f:48:fd:64:06:c8:b9:76:97:cd:5f:
0e:0e:fa:4c:a0:cb:f5:f2:04:35:e4:1a:02:a2:ba:6d:dd:ce:
c3:65:2d:5c:5c:ee:5e:fe:10:31:da:e6:d8:97:da:30:ea:3d:
21:8d:09:a6:0b:0a:3c:de:d9:03:31:5e:8f:ab:4a:41:f2:15:
f7:16:4f:06:b4:7a:65:22:43:ae:ef:4f:55:b3:b0:36:02:a6:
46:90:12:ff:00:d6:9b:b1:dc:46:f7:1c:d1:eb:89:1f:6d:7f:
f3:c1:4d:da:82:08:74:c1:33:2b:ab:e3:07:af:7f:c3:86:a4:
77:52:8f:88:73:21:46:20:00:d9:05:5d:72:70:ef:46:5b:66:
72:98:a3:2c:86:46:ef:39:ec:6d:6b:2b:3e:fe:89:01:79:42:
7e:d4:17:b5:8d:0c:8a:84:4e:a9:2f:59:64:a4:de:21:0f:16:
c1:26:2f:ed:e5:8e:28:ef:c8:1a:c0:f1:cd:ee:2e:a8:76:de:
89:f7:43:b1:59:d7:db:21:ee:bb:2e:84:15:44:dc:35:2f:53:
0d:d4:7b:74:d9:18:72:9d:d0:3b:77:b5:44:60:62:ee:22:ef:
68:f3:af:3d:80:ce:b6:8b:f4:23:6b:52:54:f2:64:56:16:f8:
47:8f:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:02:42 2026 by rpki-client