Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562C53224D5911F19C09A2B0CE1D38B0.roa
File: 562C53224D5911F19C09A2B0CE1D38B0.roa (raw, json)
Hash identifier: NkVBTmt5b6wadT+B9sPR8V4pWvAsqzHXSa2L4xqEarc=
Subject key identifier: 62:48:F8:35:53:AD:B3:14:51:38:6C:F5:1C:C8:DF:F1:EC:F0:03:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562C53224D5911F19C09A2B0CE1D38B0.roa
Signing time: Mon 11 May 2026 16:49:13 +0000
ROA not before: Mon 11 May 2026 16:49:07 +0000
ROA not after: Thu 11 Jun 2026 16:49:07 +0000
asID: 271355
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111554 (0x1b3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 16:49:07 2026 GMT
Not After : Jun 11 16:49:07 2026 GMT
Subject: CN=6a020889-9fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:54:43:f1:d7:79:47:a2:3c:4b:02:41:39:
d2:1d:e9:45:a8:bc:17:9e:ff:b8:ff:dc:b6:d6:d7:
40:4a:f8:0f:c0:5a:47:4d:bd:02:41:52:3a:68:a6:
5e:ab:d9:8f:cc:be:3d:6a:09:8c:ed:70:97:f9:dc:
dc:3b:d0:d4:a9:35:66:7b:79:d9:b2:05:c9:96:1c:
cc:17:b2:d8:69:27:7d:9b:29:f8:e8:a3:b8:93:e0:
c7:cd:aa:05:85:14:73:4f:b1:ec:7e:84:33:fc:aa:
15:06:9d:26:9f:7e:2c:12:1b:cd:61:5d:85:88:96:
b7:c3:ed:81:d5:fc:26:d5:ff:81:6b:a5:19:f0:d4:
32:c6:c3:cd:2c:ac:99:60:71:b3:0d:2c:15:b9:e1:
a5:96:76:53:88:b7:de:1a:b1:f5:c8:80:df:af:05:
76:c6:c4:ce:cd:b6:cd:99:0b:90:e3:ff:4e:c2:32:
69:09:b0:db:17:3b:c5:fb:e0:54:b2:fc:07:1b:3a:
72:49:77:78:22:ec:09:cc:68:a8:88:a8:32:7b:f8:
e2:d8:f5:87:a3:5a:e9:a7:c5:f6:ae:46:8b:54:32:
f8:1a:ba:b5:20:46:c2:bb:bd:b4:c9:d6:0b:97:04:
8c:7f:02:08:7f:4c:7e:d7:ae:64:de:46:a5:3b:68:
19:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:F8:35:53:AD:B3:14:51:38:6C:F5:1C:C8:DF:F1:EC:F0:03:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562C53224D5911F19C09A2B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
38:8c:03:bb:bc:38:56:19:c8:4f:00:66:2d:f5:6a:5d:26:bb:
40:c8:3d:df:d3:91:70:c0:0e:ce:3d:9e:99:da:c8:9b:65:25:
f1:d7:93:a8:7b:62:24:3f:b5:1f:ae:28:20:b6:0e:9c:38:3d:
cd:33:0c:5c:ca:1c:9e:10:f9:70:dd:aa:e9:6a:bc:e1:47:4b:
85:cd:fd:18:1b:8d:67:35:f6:63:c6:f0:a9:8e:3c:1c:f1:19:
18:29:e1:4f:2a:95:63:3c:ec:ef:51:22:c6:b4:98:ca:e5:82:
4c:af:c1:00:62:f0:87:58:79:77:1d:5c:dd:d7:95:10:da:30:
f3:94:10:26:36:8c:40:5e:37:9b:25:0c:d7:35:fc:fd:28:da:
ae:6d:04:75:42:fe:c2:72:d4:51:c8:76:91:32:87:5e:0f:de:
30:95:95:2e:c3:59:bb:76:d5:56:1b:b7:b0:52:f8:1d:1a:ac:
0e:f8:8c:03:83:3a:e5:3a:da:cb:0f:22:5b:a9:98:f5:2e:01:
99:a7:e9:df:22:46:f7:3d:30:80:eb:58:f2:71:99:66:d1:db:
bc:4a:53:e7:cd:f8:6a:95:31:de:2f:68:06:e9:5c:b9:ca:6d:
a0:dd:52:97:ef:29:58:8d:3e:f4:e9:6b:19:b8:f7:48:a3:06:
e5:aa:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:03:55 2026 by rpki-client