Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE23CCE492511F18DE5A1A7CE1D38B0.roa
File: 1FE23CCE492511F18DE5A1A7CE1D38B0.roa (raw, json)
Hash identifier: waEZSaUai6NUC/6k9yVWBnKUi6M4jwmQEFlDvHBIHdc=
Subject key identifier: C4:F5:CC:89:C0:57:FD:E9:4D:4D:76:F4:E4:4A:BF:2E:2A:37:E5:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE23CCE492511F18DE5A1A7CE1D38B0.roa
Signing time: Wed 06 May 2026 08:25:23 +0000
ROA not before: Wed 06 May 2026 08:25:18 +0000
ROA not after: Sun 06 May 2029 08:25:18 +0000
asID: 17561
IP address blocks: 156.235.238.0/24 maxlen: 24
156.235.239.0/24 maxlen: 24
156.235.240.0/24 maxlen: 24
156.235.241.0/24 maxlen: 24
156.235.242.0/24 maxlen: 24
156.235.243.0/24 maxlen: 24
156.235.244.0/24 maxlen: 24
156.235.245.0/24 maxlen: 24
156.235.246.0/24 maxlen: 24
156.235.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111040 (0x1b1c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 08:25:18 2026 GMT
Not After : May 6 08:25:18 2029 GMT
Subject: CN=69fafaf2-b1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:22:fa:1a:90:65:d2:77:d2:36:9a:a4:e5:c5:
fe:5a:58:f6:7b:7f:51:ae:c6:73:9a:33:96:f8:da:
11:15:76:10:7d:97:9c:cc:59:c6:ba:ac:8b:f5:38:
11:3c:6a:b2:02:98:c5:1b:86:17:01:26:3c:8a:cc:
5f:f2:cc:2e:da:04:e0:90:06:e8:65:21:57:01:7f:
7a:6f:2e:b1:dd:41:b6:fe:31:1a:ca:cd:07:bb:4e:
61:ae:79:78:d4:94:88:38:67:a9:a4:14:e3:90:b1:
82:94:d5:a9:84:b0:8c:49:e0:8d:5d:06:1d:0a:09:
52:4d:ed:41:21:67:be:8c:6c:d1:92:f4:2e:ee:21:
2f:2c:6f:81:6e:35:b2:a2:cb:57:3b:c6:83:b1:27:
5d:a1:2a:d9:33:a1:6e:76:58:ef:06:52:b5:6a:d5:
9e:45:0e:06:43:a7:41:d7:59:f4:69:f8:60:16:ec:
44:f3:9a:85:d5:75:52:c5:16:04:b2:d1:e2:e2:fa:
2a:9d:ad:c7:d6:b5:92:97:8c:ee:69:30:aa:b9:1f:
27:ee:39:91:2b:6f:12:bb:bd:24:8a:d2:0d:67:29:
71:33:4d:c5:51:ff:d5:c2:28:ea:66:a3:4a:cf:3b:
68:61:9d:2d:c1:b9:8d:5a:ae:ab:13:be:88:e7:97:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F5:CC:89:C0:57:FD:E9:4D:4D:76:F4:E4:4A:BF:2E:2A:37:E5:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE23CCE492511F18DE5A1A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.238.0-156.235.247.255
Signature Algorithm: sha256WithRSAEncryption
26:0c:52:71:77:b1:2e:98:77:3c:78:3e:19:08:78:bb:e1:5d:
c2:11:dd:3c:e9:59:f6:d8:ac:d4:4d:e1:43:cb:68:76:6d:c5:
27:25:84:da:3e:98:fe:61:f6:5b:70:de:98:8d:9f:36:da:e7:
16:da:e8:f0:9e:e6:9d:e5:48:6f:9a:db:da:52:0e:53:32:a3:
e9:d8:2b:73:ba:d1:fe:76:bf:50:5e:ae:78:75:f5:a9:58:57:
27:39:6d:31:8c:32:8b:e9:79:dd:b4:1c:70:8a:8d:92:b1:cc:
57:3b:80:64:a6:13:4f:ac:4c:a3:b2:7d:10:70:d4:47:c9:43:
fb:ff:3d:6d:5b:6c:21:8b:5d:fb:fb:f6:97:32:c4:aa:68:61:
2e:7d:5b:98:ad:fe:51:5a:70:2b:34:0c:00:cb:35:5b:62:c1:
b3:e6:1c:59:32:41:03:74:bc:ba:2d:17:7d:0f:60:a1:9e:74:
a2:71:b6:92:73:63:46:3e:6c:45:05:9a:a3:01:85:82:1f:a7:
3d:0d:d3:b8:1a:51:4c:94:bd:df:57:5b:fc:92:3e:c3:7c:67:
87:86:8c:77:ad:6c:08:cb:34:52:54:4b:71:98:ac:9a:f9:ea:
50:77:bd:ea:2c:d5:9a:5c:da:90:1c:ed:1a:00:ef:dc:fb:92:
38:96:35:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:42:28 2026 by rpki-client