Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D70181C6B11F1BEEB97F6DAE4EC9C.roa
File: 469D70181C6B11F1BEEB97F6DAE4EC9C.roa (raw, json)
Hash identifier: MZ3hcv+nT1RtEJxuiLQMS+LmxzL5N/8NY3tFmQJ7zdw=
Subject key identifier: 0A:BD:CA:FD:6A:C2:76:D1:79:0E:82:52:EE:5D:F0:EC:D9:78:46:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D70181C6B11F1BEEB97F6DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:24:10 +0000
ROA not before: Tue 10 Mar 2026 10:24:03 +0000
ROA not after: Thu 16 Apr 2026 10:24:03 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107450 (0x1a3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 10:24:03 2026 GMT
Not After : Apr 16 10:24:03 2026 GMT
Subject: CN=69aff14a-b83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e6:d4:8c:61:22:80:ba:13:7a:ab:f3:84:a9:
18:39:46:bd:70:e0:b9:38:f8:72:3f:2b:db:80:5e:
91:b0:79:2f:9d:91:be:e4:ef:d4:b4:a1:f4:20:7d:
07:39:3e:80:84:23:97:39:63:7b:63:f9:37:66:88:
eb:27:63:30:05:df:a5:c4:e0:c5:f3:cb:72:02:ff:
bf:14:16:03:fc:44:65:9c:40:f5:3a:89:1a:6f:fe:
ae:ee:0f:29:ad:be:c2:8a:5b:e5:0d:20:d4:b1:a6:
ce:e2:29:ac:cf:cb:2e:d8:d8:fd:d1:26:e3:41:f4:
b4:1b:73:f8:05:74:af:4d:3c:71:c0:45:05:28:a9:
b8:27:29:b9:6a:7e:6b:7d:8c:4b:c9:8e:e4:00:ab:
61:7f:17:82:6c:7c:9b:f1:1c:1d:fd:5d:0e:6a:95:
b8:9d:d8:a6:f7:cb:44:d1:b7:e7:67:8b:ac:d5:ca:
4e:1c:8a:63:de:f7:6b:13:25:59:e0:86:14:9a:25:
8b:71:d0:0b:61:3f:fb:ae:04:69:6a:38:ba:1a:86:
86:95:e4:47:07:66:6a:1f:0b:23:e8:84:37:38:8f:
40:99:12:fd:58:17:f9:b0:77:66:65:35:56:15:ff:
30:d2:3a:2f:00:dc:fe:99:1f:e8:d5:d6:7d:ab:f5:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:CA:FD:6A:C2:76:D1:79:0E:82:52:EE:5D:F0:EC:D9:78:46:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/469D70181C6B11F1BEEB97F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:86:d5:92:ca:81:2e:93:52:6e:3d:eb:34:0b:ae:ed:5c:0f:
cb:7c:22:37:c4:21:6d:94:17:d8:fc:5b:0b:11:a9:e5:b7:12:
6f:e2:03:0e:46:14:ef:a2:5f:b6:ad:e4:4a:29:67:3c:b4:3b:
9c:06:45:47:f7:f3:60:6b:95:b1:2f:e2:5c:c3:95:80:f1:2b:
1d:d2:f7:7a:4e:05:38:fa:b0:d6:11:a1:13:62:e3:21:bc:96:
63:7b:92:5c:7a:ff:ca:fa:a4:82:24:41:31:59:1d:fb:51:d0:
e6:1f:e1:37:d0:84:ae:f4:9d:b7:20:ff:3b:ad:37:83:6d:c7:
61:91:91:f2:8f:2a:ac:9d:6b:5f:46:e6:05:26:ef:3b:83:6d:
d3:de:12:dc:34:38:21:39:31:d6:07:2e:75:64:e9:e5:a1:6a:
4c:74:d2:96:13:f4:aa:22:6f:46:78:e7:8a:43:7d:f2:69:4e:
7b:3a:dd:a8:58:a9:ec:93:73:10:5e:d1:ce:f4:3a:99:00:4b:
0b:c3:d6:84:2e:41:de:0f:3e:a9:ef:ea:f2:99:2e:cc:9f:b8:
91:42:ac:ff:c8:a0:d1:d6:a1:c3:be:12:36:5b:ed:f2:ef:54:
cc:33:1f:65:d6:db:b1:5d:b4:c3:9e:82:f9:47:10:56:b1:58:
32:9b:e0:33
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAaO6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEwMTAyNDAzWhcNMjYwNDE2MTAyNDAzWjAYMRYw
FAYDVQQDEw02OWFmZjE0YS1iODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsebUjGEigLoTeqvzhKkYOUa9cOC5OPhyPyvbgF6RsHkvnZG+5O/UtKH0
IH0HOT6AhCOXOWN7Y/k3ZojrJ2MwBd+lxODF88tyAv+/FBYD/ERlnED1Ookab/6u
7g8prb7CilvlDSDUsabO4imsz8su2Nj90SbjQfS0G3P4BXSvTTxxwEUFKKm4Jym5
an5rfYxLyY7kAKthfxeCbHyb8Rwd/V0OapW4ndim98tE0bfnZ4us1cpOHIpj3vdr
EyVZ4IYUmiWLcdALYT/7rgRpaji6GoaGleRHB2ZqHwsj6IQ3OI9AmRL9WBf5sHdm
ZTVWFf8w0jovANz+mR/o1dZ9q/U14QIDAQABo4ICrjCCAqowHQYDVR0OBBYEFAq9
yv1qwnbReQ6CUu5d8OzZeEZrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NjlENzAxODFDNkIxMUYxQkVFQjk3RjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOBMAwQAnOeLAwQDnPZYMA0G
CSqGSIb3DQEBCwUAA4IBAQClhtWSyoEuk1JuPes0C67tXA/LfCI3xCFtlBfY/FsL
EanltxJv4gMORhTvol+2reRKKWc8tDucBkVH9/Nga5WxL+Jcw5WA8Ssd0vd6TgU4
+rDWEaETYuMhvJZje5Jcev/K+qSCJEExWR37UdDmH+E30ISu9J23IP87rTeDbcdh
kZHyjyqsnWtfRuYFJu87g23T3hLcNDghOTHWBy51ZOnloWpMdNKWE/SqIm9GeOeK
Q33yaU57Ot2oWKnsk3MQXtHO9DqZAEsLw9aELkHeDz6p7+rymS7Mn7iRQqz/yKDR
1qHDvhI2W+3y71TMMx9l1tuxXbTDnoL5RxBWsVgym+Az
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:24 2026 by rpki-client