Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34F985B2268F11F1997BEAA0DAE4EC9C.roa
File: 34F985B2268F11F1997BEAA0DAE4EC9C.roa (raw, json)
Hash identifier: Q9hSW+ostKTmNTq1hD20WO98BHRqZi24SOoGK/l5ATA=
Subject key identifier: DA:6A:78:1A:09:D8:BB:BD:E6:25:38:18:1C:3F:B0:C0:4E:9E:72:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6C7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34F985B2268F11F1997BEAA0DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 08:06:34 +0000
ROA not before: Mon 23 Mar 2026 08:06:29 +0000
ROA not after: Thu 30 Apr 2026 08:06:29 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108231 (0x1a6c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 08:06:29 2026 GMT
Not After : Apr 30 08:06:29 2026 GMT
Subject: CN=69c0f48a-a54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:9c:2d:ba:5d:34:b0:ce:7a:7a:2d:91:81:
bb:b1:2b:8a:b9:4e:e5:f1:93:13:b8:0e:6a:ad:d4:
46:ac:cf:5d:32:29:07:ba:c7:52:e9:87:5c:3e:ff:
19:c9:98:04:65:95:a7:6f:72:4d:af:0c:72:f2:7e:
6c:c6:9e:37:38:30:96:b7:58:42:90:d0:3f:e9:26:
ab:af:c1:19:8f:19:1d:82:be:e4:e6:96:3d:36:0b:
f9:68:90:2a:b9:b8:3d:2e:9d:1f:f8:52:83:e0:d3:
26:8c:1c:83:75:f4:5d:ac:df:3e:e4:32:65:86:82:
1d:ac:87:9c:43:75:17:2d:41:23:a3:e1:f0:7b:77:
90:c8:25:35:4a:45:65:01:ae:91:26:64:2a:31:b8:
e5:9c:b3:fb:4a:af:dd:8f:55:5b:ad:23:c9:fa:f4:
78:5e:6e:a9:b5:00:9a:7c:ef:9d:97:5e:1b:71:12:
9b:13:1c:c6:e3:23:19:b6:c1:c3:c1:65:9d:a0:ac:
19:59:a7:4a:98:b1:6b:76:28:97:74:d3:5b:1e:b0:
89:97:4c:96:fa:f8:ae:b1:e2:6b:7a:ec:30:0a:79:
30:7d:74:cc:4b:88:f3:76:fe:12:ac:64:d1:a7:d4:
46:d1:12:bf:04:25:b2:1f:1c:25:55:bf:d7:2c:bf:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6A:78:1A:09:D8:BB:BD:E6:25:38:18:1C:3F:B0:C0:4E:9E:72:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34F985B2268F11F1997BEAA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
45:b1:86:b1:cb:fd:61:d4:76:43:f0:68:a1:c3:44:4d:9e:77:
df:56:13:5d:d0:a7:16:3a:3e:43:a6:a1:3f:89:67:1b:8d:99:
eb:ee:ac:6a:9a:9e:38:fd:44:1c:3c:8b:10:55:6b:8f:94:af:
95:62:cf:d5:ec:27:a7:bf:8d:6d:08:34:a3:da:9e:10:e1:7c:
df:6d:25:2e:c8:3c:37:dd:13:85:dd:2d:d9:c8:70:0e:47:fe:
31:6b:7f:30:57:50:d3:89:03:f2:4a:59:73:52:73:e9:b8:e1:
ab:17:86:50:78:03:d9:6e:89:df:f3:4d:92:58:68:ba:b5:fa:
d5:92:66:81:ea:67:bc:e3:40:39:01:96:58:69:3c:36:07:ce:
53:56:d0:25:a7:e5:d8:d6:5c:ad:e9:d9:d6:49:61:21:7e:47:
8b:a4:32:65:ac:3e:a3:7e:8e:dc:9a:2d:f9:bf:f8:1b:0a:b7:
66:ef:58:3c:48:74:4f:5d:26:25:3c:5d:23:2b:b5:83:18:01:
b0:a1:fd:81:00:12:af:1c:fd:43:74:93:b3:ea:df:c0:82:d4:
7e:dc:50:db:55:b3:2c:c4:cb:f4:48:1a:56:2d:a4:e6:b3:6d:
20:c2:31:cd:94:42:c0:d5:4d:e7:1f:96:f4:e1:62:d2:4e:c2:
e6:17:68:90
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAabHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIzMDgwNjI5WhcNMjYwNDMwMDgwNjI5WjAYMRYw
FAYDVQQDEw02OWMwZjQ4YS1hNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5omcLbpdNLDOenotkYG7sSuKuU7l8ZMTuA5qrdRGrM9dMikHusdS6Ydc
Pv8ZyZgEZZWnb3JNrwxy8n5sxp43ODCWt1hCkNA/6Sarr8EZjxkdgr7k5pY9Ngv5
aJAqubg9Lp0f+FKD4NMmjByDdfRdrN8+5DJlhoIdrIecQ3UXLUEjo+Hwe3eQyCU1
SkVlAa6RJmQqMbjlnLP7Sq/dj1VbrSPJ+vR4Xm6ptQCafO+dl14bcRKbExzG4yMZ
tsHDwWWdoKwZWadKmLFrdiiXdNNbHrCJl0yW+viuseJreuwwCnkwfXTMS4jzdv4S
rGTRp9RG0RK/BCWyHxwlVb/XLL+LdwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFNpq
eBoJ2Lu95iU4GBw/sMBOnnLdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNEY5ODVCMjI2OEYxMUYxOTk3QkVBQTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBnPW8MAwDBAGc9cYDBAKc9cgw
DAMEAJz10QMEAJz10gMEAZz18jANBgkqhkiG9w0BAQsFAAOCAQEARbGGscv9YdR2
Q/BoocNETZ5331YTXdCnFjo+Q6ahP4lnG42Z6+6sapqeOP1EHDyLEFVrj5SvlWLP
1ewnp7+NbQg0o9qeEOF8320lLsg8N90Thd0t2chwDkf+MWt/MFdQ04kD8kpZc1Jz
6bjhqxeGUHgD2W6J3/NNklhourX61ZJmgepnvONAOQGWWGk8NgfOU1bQJafl2NZc
renZ1klhIX5Hi6QyZaw+o36O3Jot+b/4Gwq3Zu9YPEh0T10mJTxdIyu1gxgBsKH9
gQASrxz9Q3STs+rfwILUftxQ21WzLMTL9EgaVi2k5rNtIMIxzZRCwNVN5x+W9OFi
0k7C5hdokA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:33 2026 by rpki-client