Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BBFB8E42D211F1B95700B2CE1D38B0.roa
File: 11BBFB8E42D211F1B95700B2CE1D38B0.roa (raw, json)
Hash identifier: 4ywd/eZMVvKi7Yrz14nkER3R0w22fhLqspLjrErDTbY=
Subject key identifier: 8C:C9:64:3F:C0:42:AB:7B:8B:D0:6F:97:38:45:34:6A:C7:B5:61:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BBFB8E42D211F1B95700B2CE1D38B0.roa
Signing time: Tue 28 Apr 2026 07:15:44 +0000
ROA not before: Tue 28 Apr 2026 07:15:36 +0000
ROA not after: Fri 27 Apr 2029 07:15:36 +0000
asID: 17561
IP address blocks: 156.226.208.0/24 maxlen: 24
156.233.205.0/24 maxlen: 24
156.233.206.0/24 maxlen: 24
156.233.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110474 (0x1af8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 07:15:36 2026 GMT
Not After : Apr 27 07:15:36 2029 GMT
Subject: CN=69f05e9f-cad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:35:ca:0b:2d:83:65:39:4b:75:d7:21:7f:
77:58:81:0e:79:a7:91:8e:dd:65:51:4d:0f:18:08:
04:a1:62:aa:4a:cc:db:ff:42:90:23:9b:7b:15:a9:
6d:e4:d3:27:a3:56:ad:7a:20:31:45:6c:cd:a7:ae:
34:94:19:e8:2d:e9:60:68:f7:2c:bb:0d:e6:5a:ea:
2c:87:47:80:8c:39:6b:0a:f5:35:c5:ce:da:23:ee:
43:b8:40:3b:c6:50:4c:d7:6a:cb:2c:6b:12:1c:aa:
74:f1:f7:a6:62:42:a9:50:45:59:3e:d7:89:b9:7f:
58:de:f4:d3:cd:4a:e6:b6:03:0c:cb:9a:63:e2:f7:
98:38:f3:61:9f:2e:55:1b:7d:7a:e4:6c:9e:68:b0:
16:ae:01:f1:90:11:2f:3f:af:c2:87:db:ea:28:4e:
31:8d:6c:2b:2d:74:bb:f5:0b:a6:a6:3b:fd:4d:53:
70:10:2b:04:54:9e:a2:2d:d3:27:9b:92:09:e4:fc:
c0:b7:ac:10:87:75:1a:d1:8d:52:8c:6c:f9:d1:65:
df:f0:54:80:c4:e9:0b:f4:49:d3:c7:81:c1:b6:3c:
27:a9:eb:86:d7:8a:31:f8:db:f1:21:90:bc:4d:ae:
fe:bc:37:8c:c5:0b:99:d5:04:04:bb:0c:c1:55:59:
d8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:64:3F:C0:42:AB:7B:8B:D0:6F:97:38:45:34:6A:C7:B5:61:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11BBFB8E42D211F1B95700B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.208.0/24
156.233.205.0-156.233.207.255
Signature Algorithm: sha256WithRSAEncryption
b0:31:22:4a:11:b2:97:d7:da:75:cf:b4:7e:a2:a3:08:0a:4d:
20:24:76:e8:8b:ae:a8:3a:25:fb:90:c5:73:a3:c3:b7:ff:41:
e0:10:df:d2:59:5c:70:03:7e:bc:e9:25:b3:10:66:38:6d:48:
c0:f8:21:4c:2b:38:2e:ad:dd:cc:ac:91:3a:c9:6b:d8:ac:5c:
13:00:1b:b2:b9:01:76:f2:51:ab:61:ff:66:e1:41:09:20:3a:
f7:35:2a:07:e1:44:3d:16:04:1f:4d:63:c4:94:87:ea:f1:13:
0d:de:9d:a6:b3:51:5d:bf:7f:9e:57:2e:f0:f2:f7:54:94:f8:
04:e8:32:5f:f1:06:52:29:93:56:33:9a:95:d8:79:5b:c6:b7:
f8:e8:61:20:2f:bf:57:0e:84:27:8d:3b:33:87:65:e5:28:0f:
b5:aa:bc:3e:17:97:ef:55:cb:f3:76:71:4e:ef:5a:26:1b:26:
a3:a1:21:8d:cf:1a:e8:8e:ce:fb:ab:ef:dd:8b:c7:8a:cc:b1:
78:cc:b2:ea:aa:0d:6d:96:3c:da:04:d1:2b:b1:61:f0:14:ba:
9a:5f:62:80:a3:bf:c7:04:81:48:71:33:ab:69:30:21:c6:8b:
9e:c9:60:40:ac:d8:97:d3:93:46:b6:df:bb:ed:de:12:fa:b4:
51:7b:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:43:27 2026 by rpki-client