Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65ED78F01DEC11F1854169C4DAE4EC9C.roa
File: 65ED78F01DEC11F1854169C4DAE4EC9C.roa (raw, json)
Hash identifier: NIg/DxIKfOJU/dPdAJyxMcp1ChqNDqvM779e9L5x+mI=
Subject key identifier: 11:E5:12:6B:3F:26:04:5C:4D:7D:13:BC:DD:DB:E6:B1:3F:A9:91:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A45A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65ED78F01DEC11F1854169C4DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 08:20:58 +0000
ROA not before: Thu 12 Mar 2026 08:20:54 +0000
ROA not after: Thu 16 Apr 2026 08:20:54 +0000
asID: 22773
IP address blocks: 156.238.189.0/24 maxlen: 24
156.239.56.0/24 maxlen: 24
156.242.0.0/24 maxlen: 24
156.242.1.0/24 maxlen: 24
156.242.23.0/24 maxlen: 24
156.242.28.0/24 maxlen: 24
156.242.29.0/24 maxlen: 24
156.242.30.0/24 maxlen: 24
156.242.31.0/24 maxlen: 24
156.242.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107610 (0x1a45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 08:20:54 2026 GMT
Not After : Apr 16 08:20:54 2026 GMT
Subject: CN=69b2776a-58f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:9c:31:6f:55:d6:1f:93:a0:41:3d:6a:f0:
88:16:80:72:f5:38:39:bf:3f:e5:84:2e:e6:60:0f:
52:db:2b:f6:cf:1f:21:15:74:21:3c:31:31:c9:a3:
ed:2b:8e:f8:fa:1a:7b:b8:41:28:62:19:34:fc:f9:
73:70:85:7a:29:50:a1:ef:cc:66:67:e5:98:57:de:
75:f1:a9:ea:a4:9a:b4:4b:bc:2d:20:35:4d:09:ff:
13:2a:18:c7:81:46:4e:d2:3a:b1:31:c2:8e:2c:77:
6c:b8:4e:e9:1f:b9:08:05:ab:e6:59:d9:6e:65:e7:
42:9f:56:10:bf:e6:db:e2:64:9f:ae:69:c0:38:a6:
b0:7c:e5:21:4e:af:cd:20:15:35:de:ac:10:de:b4:
ee:4d:a0:8e:b4:12:d3:84:8c:92:19:31:f9:28:26:
e4:66:4e:62:26:69:16:35:a2:d7:17:b1:c9:dd:48:
f4:f7:f9:89:2a:47:34:77:34:f3:23:75:2f:36:ed:
4d:1b:6a:2e:8d:fa:a2:5c:50:83:01:35:f4:fc:9d:
cc:8f:a1:28:d7:b6:cf:37:13:a4:e1:f8:34:9b:36:
9d:ab:2b:29:45:01:0c:eb:e4:73:09:70:5d:be:ab:
ee:d6:07:f2:c9:97:19:ff:89:13:2e:0d:0e:57:6f:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E5:12:6B:3F:26:04:5C:4D:7D:13:BC:DD:DB:E6:B1:3F:A9:91:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/65ED78F01DEC11F1854169C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.189.0/24
156.239.56.0/24
156.242.0.0/23
156.242.23.0/24
156.242.28.0/22
156.242.48.0/24
Signature Algorithm: sha256WithRSAEncryption
76:43:76:09:b8:59:98:77:1c:e2:c2:26:a6:be:71:fc:8f:3e:
62:82:ed:d1:6e:c2:3b:d6:c7:d0:97:84:85:57:8d:87:46:9f:
9a:5e:9d:86:55:5a:9a:ac:34:89:b3:ba:e7:da:1a:bb:ec:bf:
33:bf:5f:ee:30:f8:f8:7b:89:0b:72:60:5f:e1:10:78:33:d6:
5d:bc:1c:f1:d4:3d:c6:44:c0:cb:82:24:d6:d1:ec:95:bf:f3:
bb:57:60:71:b7:cf:16:74:8f:e0:9d:3d:a6:60:c0:9e:b1:67:
b0:b7:f9:07:1b:49:58:c4:c0:50:11:4c:df:3b:7d:ed:3d:45:
f5:0e:3e:d7:00:02:e0:8a:41:4a:32:4b:62:82:96:cd:1b:cd:
4f:05:2c:47:54:30:fc:cd:b0:ef:f1:d0:ca:2a:03:ac:bc:12:
51:3d:7e:38:9d:45:18:2a:31:cd:0c:40:52:0b:56:bd:bd:3d:
fe:fe:02:b8:c9:a2:94:cf:d1:de:47:32:1c:33:2f:c7:52:66:
5c:eb:4e:2f:1d:0a:5f:74:b9:34:c3:75:8f:f3:bb:b2:34:05:
ad:0a:ef:0b:65:47:2c:a7:8f:04:ef:bf:e3:4f:5e:23:d1:a8:
da:d9:49:b5:6d:3c:7e:f8:da:b0:91:55:ec:dc:90:24:aa:ad:
5a:ce:cc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:13 2026 by rpki-client