Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F3565844A711F1B56D3ECFCE1D38B0.roa
File: 33F3565844A711F1B56D3ECFCE1D38B0.roa (raw, json)
Hash identifier: FmvwkVbEIoXqXgWUgkeOi3hVj7+HYjotr4w/LO3kKik=
Subject key identifier: 52:2D:57:A6:BF:62:34:C9:A1:C0:D4:3B:86:2F:64:7C:31:50:2A:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B04C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F3565844A711F1B56D3ECFCE1D38B0.roa
Signing time: Thu 30 Apr 2026 15:13:55 +0000
ROA not before: Thu 30 Apr 2026 15:13:49 +0000
ROA not after: Sat 20 Jun 2026 15:13:49 +0000
asID: 63018
IP address blocks: 156.233.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110668 (0x1b04c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 15:13:49 2026 GMT
Not After : Jun 20 15:13:49 2026 GMT
Subject: CN=69f371b3-436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0b:45:17:8d:4e:f4:c2:1e:55:a9:4d:a7:7b:
17:dd:80:a1:b9:32:50:82:2d:b8:bf:9e:58:42:80:
ba:51:23:8e:47:a8:a8:94:bd:35:e9:04:97:bc:0d:
12:db:c1:6b:0c:0b:b0:fa:63:d4:1c:ff:dd:32:1f:
0a:86:ba:c9:c0:83:92:1d:23:14:e3:91:32:a6:b5:
81:27:04:b1:6e:cb:69:91:c0:97:19:d0:0d:41:dd:
5b:f9:8c:ed:09:d8:a7:07:64:b1:e2:be:31:4c:ef:
db:25:3b:fa:29:93:cb:48:4a:99:72:d4:f1:d0:25:
e3:ba:85:1a:43:04:24:37:21:3c:3a:65:00:7c:7b:
71:06:33:12:72:0c:50:b1:22:fe:5d:9a:ad:92:5a:
22:2a:47:02:17:74:d1:78:ec:f4:42:55:98:66:0b:
e6:71:70:6e:34:5d:42:65:43:36:4d:5d:27:8f:cc:
b1:a4:fb:f4:12:4b:30:e8:ef:e3:a7:c6:4f:da:07:
08:f5:33:4d:29:d3:11:96:ad:03:5f:fa:1f:4d:8e:
cc:25:c0:9b:b5:ce:eb:c1:f7:97:22:ed:99:a5:02:
bc:c7:cc:d1:84:c4:76:52:89:c4:69:2a:fd:81:ee:
30:9a:d2:35:93:eb:92:dd:c6:ee:6a:55:ab:67:db:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:57:A6:BF:62:34:C9:A1:C0:D4:3B:86:2F:64:7C:31:50:2A:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F3565844A711F1B56D3ECFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.80.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ec:66:dc:c1:6f:50:3b:7b:6e:ca:39:17:3d:2b:29:b2:1d:
9d:d9:db:40:8e:10:d5:d8:7c:3c:ca:e3:f3:1a:04:65:36:ff:
33:ab:ec:ae:e0:aa:b4:68:50:3a:52:2f:ce:a1:be:4a:19:ed:
5a:11:5c:37:09:36:a7:75:01:b6:19:95:5d:2a:64:d1:ab:a8:
91:2f:b7:73:f5:d6:02:5c:5f:72:68:df:9e:1b:bf:90:a0:bf:
39:af:ed:ae:e5:bd:e8:dd:9b:cb:2f:b5:77:cc:21:97:cd:88:
23:c7:92:bb:72:f6:cb:6d:11:10:d4:45:bd:5b:97:ed:2b:de:
e3:ab:a4:f3:5c:63:38:01:72:74:d1:e6:7d:dc:07:15:1b:9b:
5e:f9:7e:07:54:c7:cd:97:48:71:d2:ec:6e:2e:79:36:ee:04:
cf:39:8f:2f:32:01:47:3f:c1:ff:0e:9f:0c:be:ec:b2:fd:09:
89:14:aa:03:2d:01:c9:20:b4:b6:2c:ee:a2:fa:f9:ab:9e:01:
7e:4d:b4:dd:78:85:d1:8e:59:66:0a:08:83:83:48:2c:0f:ec:
01:22:6c:c8:86:b5:4a:20:a0:82:29:a0:3d:ef:e7:ee:52:75:
00:5a:3f:38:af:05:fc:3e:9c:47:3f:12:bf:9f:49:6a:f4:c2:
3d:66:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:07:14 2026 by rpki-client