Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CDF07183E9D11F18C5716F0CE1D38B0.roa
File: 3CDF07183E9D11F18C5716F0CE1D38B0.roa (raw, json)
Hash identifier: Lg9UcMIMCaOscMnxc10soH0qkIpq/RmqHUKmU9QOGqA=
Subject key identifier: FB:6D:C7:FC:0A:29:26:43:94:90:B5:6A:91:62:DA:F5:2E:4A:79:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CDF07183E9D11F18C5716F0CE1D38B0.roa
Signing time: Wed 22 Apr 2026 22:47:28 +0000
ROA not before: Wed 22 Apr 2026 22:47:23 +0000
ROA not after: Thu 28 May 2026 22:47:23 +0000
asID: 44559
IP address blocks: 156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110198 (0x1ae76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 22:47:23 2026 GMT
Not After : May 28 22:47:23 2026 GMT
Subject: CN=69e95000-6286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b3:8c:ae:64:6f:a0:46:3c:04:af:00:d6:28:
af:69:8d:c6:5d:ac:9d:60:c6:64:4c:d7:0b:be:e0:
02:97:a9:96:ea:ce:05:c0:07:48:f9:f6:0f:34:98:
8d:c4:4b:0d:bf:21:e2:3f:91:78:d2:e6:6b:10:27:
cb:aa:a5:81:95:7e:6d:92:3d:63:bf:70:e8:dd:d1:
d0:dc:54:a9:19:a8:0e:e5:52:e7:9b:57:1d:aa:99:
10:95:5c:2a:b0:8d:6d:08:5e:f6:a3:9f:ac:85:2b:
84:89:4a:19:44:d1:9f:88:49:55:23:7d:94:97:0c:
e6:48:05:40:a0:e8:49:9b:87:6e:26:f8:c1:60:e1:
05:8e:52:8c:58:41:b4:11:2d:f9:bc:38:c0:c1:cf:
24:e1:40:45:26:d9:81:c8:d1:b1:69:b0:72:dd:7e:
22:31:16:0e:2f:7e:19:5c:02:05:7c:51:f7:19:f0:
96:89:bf:a1:04:64:c6:c8:c8:33:0b:e3:e6:d2:21:
9b:f5:96:a1:73:0c:56:09:2f:cd:ad:60:34:68:ab:
17:63:a2:d6:3c:0b:4c:34:f8:23:d9:f5:bb:fc:9d:
e4:98:da:dc:f4:a4:ec:cd:d7:8a:25:70:c4:59:62:
0c:56:66:70:8e:eb:38:65:a9:0a:c1:12:9a:e6:29:
1b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6D:C7:FC:0A:29:26:43:94:90:B5:6A:91:62:DA:F5:2E:4A:79:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CDF07183E9D11F18C5716F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.229.0-156.246.248.255
Signature Algorithm: sha256WithRSAEncryption
78:71:5e:dc:68:fb:82:8b:e7:e4:42:9c:f7:2b:df:89:aa:ab:
67:5b:39:69:3c:f4:3e:f3:2d:e4:0e:3e:0f:0d:fa:11:1d:45:
cc:2a:70:f1:98:7b:e3:c8:65:6a:95:38:02:81:c9:7d:4b:f0:
05:9b:2e:58:fe:e9:ce:be:86:58:de:15:ed:de:91:d2:d5:59:
82:45:ec:b4:24:ef:7f:cf:fd:08:92:c4:6d:4b:7c:cd:2e:5f:
5d:2b:bf:b7:29:c9:e6:e3:fa:fe:2d:bb:b3:88:c1:f1:4b:ae:
21:5a:32:3d:4f:bd:03:e4:58:42:46:19:eb:05:a2:ab:5c:ec:
2e:06:29:29:ee:be:2d:a7:f5:06:9e:23:0d:ab:79:11:32:c8:
b9:82:9c:ce:51:58:79:51:4b:5a:9e:f0:8e:cf:c2:d1:18:9e:
78:32:45:30:c9:2f:03:08:5f:62:76:6d:d4:82:ab:c3:f4:0c:
e9:a9:11:39:10:e1:35:65:c1:31:4f:0b:03:84:cf:c0:f4:e5:
0c:b2:ba:fb:79:cb:5a:c1:2e:aa:f5:9a:45:9f:23:85:13:37:
71:9c:3d:b4:e5:55:0a:47:3c:08:7a:a4:6c:34:66:c1:e5:85:
40:46:c3:c3:fb:de:ba:48:93:f2:15:1a:69:07:46:1f:a5:64:
3f:45:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:08 2026 by rpki-client