Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/607C009645E511F1AB92CEEACE1D38B0.roa
File: 607C009645E511F1AB92CEEACE1D38B0.roa (raw, json)
Hash identifier: q+0uODcRYbWWTJNQfTnHmEubBAvLI+dyBdWsJ8jbNwM=
Subject key identifier: 87:15:3C:B5:C2:C2:6F:5D:F7:1B:09:B3:A2:33:16:DD:35:E8:70:92
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B117
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/607C009645E511F1AB92CEEACE1D38B0.roa
Signing time: Sat 02 May 2026 05:11:30 +0000
ROA not before: Sat 02 May 2026 05:11:25 +0000
ROA not after: Sat 28 Apr 2029 05:11:25 +0000
asID: 17561
IP address blocks: 156.233.205.0/24 maxlen: 24
156.233.206.0/24 maxlen: 24
156.233.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110871 (0x1b117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 05:11:25 2026 GMT
Not After : Apr 28 05:11:25 2029 GMT
Subject: CN=69f58782-770a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:c2:f9:0a:c0:9e:dc:a3:97:b2:a1:47:6f:
d2:19:64:62:d2:82:0f:8d:95:df:23:a1:4f:31:77:
83:83:5a:41:9c:28:f5:80:8a:99:58:1d:c4:e2:81:
be:c9:de:56:bb:5e:dd:ce:4e:20:31:06:13:21:aa:
e9:aa:80:c6:7e:f9:bb:37:9b:5d:4d:23:34:17:64:
a9:db:1e:8f:54:d6:d9:43:ab:22:2d:d7:4f:45:3e:
1a:24:36:71:68:d3:09:bb:67:a4:89:bf:2e:22:b6:
51:a8:7a:18:0f:f7:00:b5:d6:57:07:f1:d0:d4:2d:
29:00:88:2b:77:eb:f2:52:c9:20:3f:89:f1:82:ac:
9d:38:a6:32:15:b8:41:43:c8:b5:06:3d:c3:fa:6a:
8a:c8:0d:77:12:f1:b0:05:c7:30:81:d0:2b:fc:15:
d7:c8:01:75:c5:d3:b3:d8:0b:16:29:d0:ca:aa:11:
47:04:01:71:09:91:05:3d:d1:eb:a2:61:a0:67:06:
22:61:60:ad:a7:2d:a5:4b:55:b1:2e:e5:a9:f8:19:
9b:d3:99:81:10:42:5d:e1:b4:02:b1:e5:21:69:f9:
f2:92:c2:f1:28:b1:31:45:4e:b5:ab:f8:b3:5b:47:
ee:38:77:94:a8:fa:0c:33:54:98:14:60:a1:97:07:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:3C:B5:C2:C2:6F:5D:F7:1B:09:B3:A2:33:16:DD:35:E8:70:92
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/607C009645E511F1AB92CEEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.205.0-156.233.207.255
Signature Algorithm: sha256WithRSAEncryption
47:0a:35:e1:79:71:45:f0:62:b4:64:41:16:e2:b4:f9:dd:37:
c2:2d:d1:ae:fd:54:c7:19:eb:78:95:a1:17:3f:6a:63:15:f0:
8b:62:f9:dc:03:df:41:9a:52:6c:e3:ee:4b:89:4d:10:e6:ec:
18:70:69:4a:36:5b:e2:22:87:b4:17:d4:ce:66:86:2e:0d:d4:
6a:e4:6e:3a:32:ca:9e:30:6c:ff:f3:0f:3b:12:8f:ad:16:26:
04:b3:e7:e2:83:0a:f4:39:0b:97:b2:6f:d7:92:05:f2:f2:4f:
06:ef:27:b4:13:33:ac:2b:dc:70:5b:da:24:28:fe:3b:3a:f8:
2b:23:e6:1f:a0:e8:9f:be:c3:11:82:0a:e8:a7:6a:f6:d5:0e:
c3:88:10:20:12:9c:2b:27:e5:0b:ce:bb:bd:c4:28:ed:c4:65:
41:22:77:7b:27:07:04:24:19:8a:0d:ef:76:6e:d9:22:dc:95:
17:35:3f:73:48:67:a7:9a:5d:08:83:d3:b2:d1:69:e1:19:8e:
72:cc:9f:19:7d:70:e4:0d:81:7d:44:94:f4:c3:ab:4f:5a:c8:
ab:f3:9c:a5:d9:22:fd:3a:70:7c:53:22:2b:50:0d:ea:db:cf:
02:2a:a0:58:76:f9:f0:db:b2:e9:24:96:2e:de:82:36:43:5b:
d0:6e:a8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:03:47 2026 by rpki-client