Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80C7334449F411F19FBE6415CF1D38B0.roa
File: 80C7334449F411F19FBE6415CF1D38B0.roa (raw, json)
Hash identifier: NNRi/60tOe6brnPEl2Um8kp455n+5V9V4Hj/gXb0bGE=
Subject key identifier: AE:94:F1:94:D2:D7:F7:7B:F8:F6:BD:1E:2E:E7:D8:80:4B:C6:75:47
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B21E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80C7334449F411F19FBE6415CF1D38B0.roa
Signing time: Thu 07 May 2026 09:09:51 +0000
ROA not before: Thu 07 May 2026 09:09:46 +0000
ROA not after: Mon 07 May 2029 09:09:46 +0000
asID: 17561
IP address blocks: 156.232.159.0/24 maxlen: 24
156.232.160.0/24 maxlen: 24
156.232.161.0/24 maxlen: 24
156.232.162.0/24 maxlen: 24
156.232.163.0/24 maxlen: 24
156.232.164.0/24 maxlen: 24
156.232.165.0/24 maxlen: 24
156.232.166.0/24 maxlen: 24
156.232.167.0/24 maxlen: 24
156.232.168.0/24 maxlen: 24
156.232.169.0/24 maxlen: 24
156.232.170.0/24 maxlen: 24
156.232.171.0/24 maxlen: 24
156.232.172.0/24 maxlen: 24
156.232.173.0/24 maxlen: 24
156.232.174.0/24 maxlen: 24
156.232.175.0/24 maxlen: 24
156.232.176.0/24 maxlen: 24
156.232.177.0/24 maxlen: 24
156.232.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111134 (0x1b21e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:09:46 2026 GMT
Not After : May 7 09:09:46 2029 GMT
Subject: CN=69fc56df-2e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:79:4d:b4:37:d8:2a:76:73:75:40:d6:19:
b6:4d:72:d0:c3:38:cb:05:45:7e:83:e7:01:4f:51:
af:00:32:79:5c:69:3f:07:0b:28:e6:24:47:c6:ab:
f7:64:94:9e:3f:96:48:a5:2b:d8:01:29:10:c3:23:
4a:9d:cf:0b:ed:36:97:4a:f7:54:ca:0d:0e:92:d1:
e0:dd:7f:0c:1d:a6:9a:36:05:3b:f4:fe:21:9b:7b:
5b:66:e6:86:d7:ed:e9:28:1d:0c:70:63:8d:01:00:
75:fe:9d:fd:fc:4c:15:3a:38:62:61:ea:56:df:1e:
4b:39:f4:66:c4:7f:89:36:15:24:72:a1:68:04:e6:
cc:9e:55:e4:44:01:13:62:25:e0:9a:81:94:c6:de:
04:93:66:f8:73:7a:8f:b2:d4:ea:4d:13:6a:3a:8a:
17:d1:6d:32:0e:66:2c:8b:e6:68:88:e9:d9:ea:13:
5f:2e:7d:d4:6c:85:9b:6f:3f:01:43:d3:a1:b1:01:
f4:c4:69:d2:ec:f1:cd:3e:3e:08:dd:72:46:7b:29:
f3:e8:cb:59:99:b2:e4:f6:14:bf:1b:d8:2b:31:6f:
ca:62:41:f5:8d:a8:6f:3a:8c:2c:fe:4c:8f:50:ef:
29:9c:ef:c1:e8:d3:8d:ac:01:5b:b9:43:51:c5:d5:
a0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:94:F1:94:D2:D7:F7:7B:F8:F6:BD:1E:2E:E7:D8:80:4B:C6:75:47
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80C7334449F411F19FBE6415CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.159.0-156.232.178.255
Signature Algorithm: sha256WithRSAEncryption
10:2e:62:f5:58:80:97:15:55:d1:b1:64:31:2e:40:7f:ae:24:
25:0d:7c:0f:4e:26:88:0c:ec:53:f9:04:81:27:c4:43:d9:9a:
7a:8a:9c:fc:9d:14:51:c5:72:f2:ee:bf:8f:8f:4b:14:af:40:
bb:eb:95:f8:c5:eb:5b:b7:fa:d0:df:4f:7e:ad:ab:46:45:6d:
93:85:81:fd:dc:6b:64:f7:84:26:b3:05:a1:70:9b:83:4c:94:
f7:a5:bd:d5:0e:67:8d:e1:af:de:b7:89:31:00:ec:bc:a7:09:
85:44:5d:ab:51:2d:17:ad:2b:e7:7e:4f:06:32:63:98:4c:18:
d0:50:38:50:b5:9f:dc:51:d7:91:c9:8f:fa:98:2b:ec:05:6c:
1e:44:c2:42:61:47:10:9d:f2:8c:e9:0e:cd:3b:37:ac:2d:98:
09:ff:a8:2e:3a:a1:65:3f:00:e8:f4:dc:57:d1:9a:7b:62:be:
b3:65:44:97:9f:4f:7c:67:45:4d:e7:2f:82:76:59:57:6d:5c:
64:d8:96:a1:09:ca:df:f7:80:77:72:39:75:9c:98:14:c5:c9:
ce:b4:cb:0e:5e:3e:a4:9b:b3:43:62:a6:6e:ab:b4:5e:73:1e:
ee:ff:a9:b0:ad:93:09:58:4e:a2:09:83:46:b6:7d:e8:b2:37:
00:76:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:50:30 2026 by rpki-client