Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C67BDDA211811F19A6092C6DAE4EC9C.roa
File: 4C67BDDA211811F19A6092C6DAE4EC9C.roa (raw, json)
Hash identifier: b4le4JbQ+JLpKXH5Rnqhjgg1RIokIcMtv6OQMrfgjB0=
Subject key identifier: FA:32:97:45:BD:87:B1:66:36:68:3D:39:32:D0:DA:61:B9:41:66:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C67BDDA211811F19A6092C6DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 09:12:47 +0000
ROA not before: Mon 16 Mar 2026 09:12:43 +0000
ROA not after: Fri 16 Mar 2029 09:12:43 +0000
asID: 17561
IP address blocks: 156.247.253.0/24 maxlen: 24
156.247.254.0/24 maxlen: 24
156.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107928 (0x1a598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 09:12:43 2026 GMT
Not After : Mar 16 09:12:43 2029 GMT
Subject: CN=69b7c98f-335b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c3:01:76:62:07:98:08:16:be:9a:37:5d:c5:
8a:c8:e0:de:b5:6d:5b:b4:83:52:eb:a2:21:0d:0f:
dd:a9:65:18:ac:db:e3:83:27:9d:47:5c:1d:64:f7:
5b:ef:e5:79:b1:c0:d4:eb:cd:7e:d0:95:ed:8a:47:
da:6e:5f:56:49:3b:85:00:1d:0f:7e:1c:37:db:62:
8a:e0:ff:03:0f:0e:d8:e1:5f:bd:80:38:d1:78:aa:
84:e9:fb:f3:7e:89:19:41:f2:60:25:1b:21:e8:e5:
47:01:ff:60:f8:d2:59:a6:97:2e:3a:44:fd:ee:ce:
87:46:d5:98:76:99:77:9f:58:d9:3c:cb:58:fa:68:
07:1a:1e:e3:3d:ca:fd:9f:58:05:e9:8a:2d:e3:cc:
c6:7e:b6:5f:50:a3:de:a3:9e:c5:d0:ad:e7:0c:de:
52:e4:12:64:b7:b5:1e:67:88:42:72:63:28:0e:13:
8c:2d:0a:41:2d:8d:a7:ea:2a:5a:29:9d:20:6f:73:
ea:2b:8c:27:1f:60:4c:1e:ab:d3:00:35:38:10:80:
41:ca:b7:44:df:b7:76:d8:91:49:34:a5:1e:1d:ea:
da:3d:8e:3e:0b:48:0f:80:b4:aa:ba:0c:99:87:ec:
f1:35:18:ef:45:6d:9c:05:0f:ae:ce:fe:32:9c:11:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:32:97:45:BD:87:B1:66:36:68:3D:39:32:D0:DA:61:B9:41:66:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C67BDDA211811F19A6092C6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.253.0-156.247.255.255
Signature Algorithm: sha256WithRSAEncryption
73:72:dc:1f:0c:c0:bb:a0:08:d1:1d:e6:6c:1f:3a:87:f7:ed:
19:51:72:db:83:28:c6:15:63:c8:ce:e7:60:b8:16:61:6f:12:
77:b6:ed:fb:72:97:e5:ef:ea:05:b4:96:89:7d:3c:4b:ad:79:
4a:a0:2e:8b:39:68:72:c1:c9:11:fd:e1:ef:36:c0:2c:a5:e2:
6d:dd:34:75:9d:b5:cf:35:b9:94:70:5e:d9:4e:46:4d:8b:f1:
90:ee:75:24:43:3a:12:89:74:6f:46:5c:a3:5b:cd:96:a9:5d:
fd:c0:88:f0:97:fc:3a:25:a6:04:59:b7:35:2c:f5:ab:c2:37:
71:ed:a3:98:ba:3c:bd:7c:42:a4:0a:a5:18:54:a6:2a:9d:e9:
41:e1:02:e2:d7:4e:d2:8f:63:b8:1e:8a:c9:39:17:26:44:37:
ec:2f:d7:bb:20:51:d2:73:b0:11:cf:03:5c:de:ce:c8:7d:90:
f9:46:4d:0d:f8:49:b8:40:e9:90:29:da:77:a1:a6:50:a2:b4:
27:82:21:8e:3b:94:d8:9f:f9:08:05:9f:ae:52:6a:7b:0b:fb:
1a:3a:34:67:7d:50:9c:07:1a:b6:64:9e:8a:b3:78:32:d3:93:
88:48:df:bc:c4:2f:a0:a2:ea:31:fb:7e:32:96:0a:0c:31:8f:
18:7f:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:31 2026 by rpki-client