Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4449DBC04A0711F195E6F705CF1D38B0.roa
File: 4449DBC04A0711F195E6F705CF1D38B0.roa (raw, json)
Hash identifier: HpQMUuNpxbD69Ab9lYONEsidiJdfDjp8y4IoyfEVoaM=
Subject key identifier: 75:0A:40:A8:8B:7F:48:4D:F2:30:67:B5:8A:CB:AA:E0:96:C4:F6:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B246
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4449DBC04A0711F195E6F705CF1D38B0.roa
Signing time: Thu 07 May 2026 11:24:10 +0000
ROA not before: Thu 07 May 2026 11:24:05 +0000
ROA not after: Fri 15 May 2026 11:24:05 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111174 (0x1b246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:24:05 2026 GMT
Not After : May 15 11:24:05 2026 GMT
Subject: CN=69fc765a-26ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:bc:08:9f:9a:5b:37:b9:6e:24:49:5b:3c:
3d:dd:09:7f:82:9c:29:d2:13:be:d9:5f:25:1f:50:
54:fe:ff:6f:02:60:25:64:51:1c:3f:ff:f8:cf:9b:
74:9f:77:5a:56:e4:a0:80:7c:f5:25:a0:6a:7f:c3:
92:8a:d9:90:26:dd:cd:00:6d:46:9d:00:f2:8d:a4:
5a:1a:79:3b:f2:92:58:8a:12:12:a2:88:b4:c6:03:
d7:bb:72:71:c0:7f:a4:63:a6:0e:92:75:91:68:ab:
55:3e:0f:a0:75:b4:61:47:3b:8f:c5:88:b0:dd:24:
47:84:d4:d8:da:03:42:1f:91:63:19:2d:87:2d:c2:
61:b2:98:c3:a7:29:9d:2b:fb:7c:97:95:96:ba:85:
1a:61:8f:e7:1d:92:84:cd:22:13:a2:f4:8f:05:54:
ae:c3:72:85:6a:d6:60:14:9b:f7:66:26:51:50:bd:
2c:48:1e:d1:60:fb:6e:b8:5b:d6:bb:3c:30:20:b1:
dc:ad:33:96:d9:1c:b0:0d:8a:5e:74:f5:ce:37:33:
5c:cf:4c:5d:89:d7:67:dd:6c:7e:cc:82:88:20:56:
53:29:2c:79:fa:f7:a1:dc:5d:1e:c2:92:13:95:a5:
e3:3f:14:b3:b2:1a:d6:67:1c:af:77:49:84:82:fa:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0A:40:A8:8B:7F:48:4D:F2:30:67:B5:8A:CB:AA:E0:96:C4:F6:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4449DBC04A0711F195E6F705CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
65:10:d8:de:62:f1:b6:fb:82:3e:8b:0a:f4:e4:b3:bd:7b:d9:
67:cb:45:8c:b9:57:b5:ff:c4:0d:9a:c6:83:28:97:54:51:50:
a3:a6:a1:95:d6:5a:88:c2:d6:51:14:9c:bb:2d:fb:85:70:ae:
34:86:b5:4e:a3:4f:10:dc:6d:e4:df:d6:49:64:fd:53:64:3b:
6c:82:d6:3f:4a:6c:71:79:f7:bd:08:12:c1:aa:ce:00:fa:48:
65:7c:a9:bb:fd:1a:57:58:12:c0:51:44:21:b5:2c:70:7b:5b:
c3:a6:ec:6a:67:7c:a3:7c:6d:01:fe:e9:b7:79:e3:11:3e:4b:
5f:02:62:dc:a5:65:27:df:87:04:e0:aa:09:f4:93:cf:6d:b2:
58:cf:be:06:68:25:35:7e:ad:64:bf:a0:93:50:1f:2f:eb:44:
cb:ea:91:1b:17:a1:61:12:f9:7d:71:ba:2a:d2:b0:23:fc:34:
c7:b0:e3:5b:22:53:8a:23:9d:a9:e4:d9:d7:1e:67:43:d2:08:
48:40:c3:1f:9f:c0:c3:7c:5d:cb:4a:04:c4:02:a7:c2:2c:58:
6a:bd:a3:08:8b:15:7c:ba:63:19:ff:30:9c:4f:d3:2b:54:dd:
57:78:38:15:06:72:9a:da:c8:d4:09:35:b2:d6:94:0f:29:a2:
5e:3e:ee:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:15 2026 by rpki-client