Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D464AD43E8311F19E22EFD5CE1D38B0.roa
File: 1D464AD43E8311F19E22EFD5CE1D38B0.roa (raw, json)
Hash identifier: jXMPDLF8eT7MNOd+U4JfktyLSQCYo1aXwdYOFd+f1ps=
Subject key identifier: 04:C7:1C:23:66:44:C5:3A:81:FE:56:97:54:64:7A:89:34:37:DC:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D464AD43E8311F19E22EFD5CE1D38B0.roa
Signing time: Wed 22 Apr 2026 19:40:28 +0000
ROA not before: Wed 22 Apr 2026 19:40:23 +0000
ROA not after: Thu 28 May 2026 19:40:23 +0000
asID: 44559
IP address blocks: 156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110166 (0x1ae56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 19:40:23 2026 GMT
Not After : May 28 19:40:23 2026 GMT
Subject: CN=69e9242c-0a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:94:45:94:70:6c:68:72:38:ce:ce:e2:65:
57:28:bd:06:4a:6c:3f:90:e8:ec:ac:e1:35:ad:16:
1f:35:ce:15:d1:84:3e:d7:85:69:e4:6a:4c:e7:41:
ca:61:ed:7d:ff:2b:9d:3f:64:e8:8f:dd:94:d7:ea:
22:1c:61:7f:e5:91:12:7f:53:e0:de:d3:ec:9c:82:
47:56:33:c7:5d:05:f6:45:77:8d:e4:fb:bf:3f:51:
26:17:27:5e:ba:62:db:d3:de:1f:d3:3e:60:83:70:
a1:95:16:e0:f8:81:d0:c9:37:b1:d3:6b:e1:51:63:
99:1c:4a:21:17:d0:b6:ed:91:59:af:a4:e2:fb:c9:
49:33:41:32:78:14:10:25:f8:d1:02:16:98:be:f7:
29:fa:d1:6a:31:1e:29:5b:1c:23:82:7a:ac:e9:bb:
73:3c:47:5e:f6:9b:bb:54:cb:d8:a7:67:5b:81:74:
4b:81:c2:8b:d3:ad:aa:d6:fe:37:b5:73:e1:b1:0e:
94:b5:08:05:ef:a2:81:7d:ef:54:ec:eb:e1:24:94:
07:9f:ae:b1:3e:fc:ee:b9:df:b4:bc:17:4d:fa:13:
73:5a:e5:80:24:37:c9:fd:96:bf:28:6c:e5:54:76:
80:dc:4e:35:9e:27:c6:bc:03:b5:69:8f:20:05:39:
33:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C7:1C:23:66:44:C5:3A:81:FE:56:97:54:64:7A:89:34:37:DC:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D464AD43E8311F19E22EFD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0-156.246.248.255
Signature Algorithm: sha256WithRSAEncryption
a7:7c:96:9c:a7:01:a6:59:92:4e:a3:42:93:71:ac:13:74:47:
7d:77:df:a9:b4:41:e6:f4:8c:44:60:db:18:6c:3d:e1:9e:88:
b2:e3:0f:1b:ba:d6:24:d6:6c:ad:f5:3c:bc:86:6d:83:4d:09:
2a:3d:42:bd:0b:72:30:99:81:48:99:18:3e:97:51:31:00:6c:
25:81:08:fe:78:8a:32:cc:13:48:d4:1f:79:d9:c7:33:fc:70:
5f:42:8b:f7:45:59:dd:da:60:38:e8:d3:ff:2c:41:0d:15:08:
53:0e:64:41:a3:37:54:b2:f1:4a:b8:8e:ef:92:02:b7:de:fd:
97:09:a5:4e:de:95:e1:0c:39:94:b9:5e:f3:82:a6:fd:0f:6b:
f7:b3:59:52:70:ca:8d:11:62:63:af:ba:c0:31:aa:77:11:90:
4e:5b:d8:93:33:65:d7:47:28:fe:a9:94:df:2a:e5:ac:b2:44:
58:a4:56:08:a0:24:75:d4:a7:c0:99:c8:4f:29:3c:3b:19:bb:
4d:25:3f:14:56:0f:e0:a9:26:74:73:08:db:fa:a3:84:8c:90:
17:f1:50:9f:28:79:6e:5b:18:2a:72:e7:3c:4a:06:3a:d6:73:
4a:c0:8b:85:10:71:44:83:33:1a:de:25:73:a1:0a:df:ff:f5:
cf:4a:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:13 2026 by rpki-client