Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929248F0448311F1917074F9CE1D38B0.roa
File: 929248F0448311F1917074F9CE1D38B0.roa (raw, json)
Hash identifier: lCpX57IWbHY2Ia6tO+hqXzY/JDCsIRtagihrw6UB9IY=
Subject key identifier: 72:46:8C:5D:73:95:48:A3:57:26:BE:F3:B1:67:7C:FE:F4:BF:09:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B02C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929248F0448311F1917074F9CE1D38B0.roa
Signing time: Thu 30 Apr 2026 10:58:52 +0000
ROA not before: Thu 30 Apr 2026 10:58:47 +0000
ROA not after: Thu 04 Jun 2026 10:58:47 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110636 (0x1b02c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 10:58:47 2026 GMT
Not After : Jun 4 10:58:47 2026 GMT
Subject: CN=69f335ec-8523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:7e:bc:40:ca:5a:85:7f:17:73:9e:71:f6:
d0:32:65:72:02:31:6f:0d:9f:13:26:04:93:cf:a2:
89:02:2f:d0:77:a6:6e:c5:1a:88:2e:09:d2:87:5b:
fb:e1:dd:e1:d8:cd:14:a6:7d:0e:66:c9:95:3a:b3:
a0:5b:06:54:3c:43:cf:f9:ff:80:a9:41:4d:62:a1:
09:0f:a8:53:6d:23:18:29:0f:ce:b0:b0:0b:dd:15:
b4:b7:18:56:39:4d:f2:fa:eb:67:25:26:12:09:2b:
7d:d5:dc:ff:26:36:c0:75:48:83:b9:c8:33:02:f1:
67:0a:20:48:b7:c8:1e:19:ba:0a:57:a1:63:e5:96:
af:a5:09:a5:be:91:c9:ed:0a:c0:b8:c4:a7:da:66:
7b:fe:d9:d9:a6:e0:6e:b9:d7:fa:7f:57:ce:ab:b6:
af:10:c4:b4:4d:a2:6a:9a:ce:79:d7:84:45:27:1e:
14:c3:68:3f:c2:31:b9:c1:b9:6a:e0:b4:1f:66:9f:
2c:68:64:03:d9:6f:01:f8:25:14:0b:e6:44:e3:09:
11:cf:63:c4:bb:b8:24:4a:2a:88:1a:93:06:41:d0:
d3:d3:57:66:41:83:0a:99:37:97:e6:57:d6:08:c9:
04:8b:c9:b3:48:30:97:87:28:72:bf:d6:bc:0e:21:
27:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:46:8C:5D:73:95:48:A3:57:26:BE:F3:B1:67:7C:FE:F4:BF:09:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/929248F0448311F1917074F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:bc:7b:cd:50:12:a6:05:96:20:a9:a0:a9:f9:45:ee:29:b1:
9e:72:96:79:62:f9:6c:21:d7:08:5e:4d:e6:26:24:d9:cc:b4:
61:c2:1c:cf:5d:ec:57:8c:29:9d:16:aa:0d:37:62:bc:ff:17:
86:d8:6a:43:2f:07:a6:8c:04:98:dc:a0:a1:c7:34:b4:4a:4f:
bd:10:9c:8f:fc:46:7a:8a:2d:24:9b:e3:42:4f:95:de:bc:7c:
c5:9d:17:83:79:06:31:87:76:6c:fc:ea:8f:9e:39:63:b1:2e:
72:9f:6d:0d:ce:61:b4:d8:71:03:d5:c6:a0:22:23:f8:6e:6c:
29:9a:65:3b:4a:7c:94:36:02:6e:73:92:4e:30:ad:9c:28:65:
ea:f3:97:7d:b1:61:4e:db:b1:25:a6:a3:6d:17:46:5a:4e:76:
ba:81:1a:86:c7:65:fb:83:3c:56:e8:b8:0a:e3:1f:2b:96:d7:
a2:23:72:4c:4f:20:14:fe:ab:07:5e:a3:21:0b:01:32:5c:12:
74:bb:c6:f5:79:de:43:7e:ed:32:27:88:63:43:ee:b3:12:62:
5c:93:1a:d5:27:48:e6:2d:60:e1:0b:b6:4b:00:0e:90:29:13:
23:32:5d:41:6e:e7:da:5e:f6:39:3c:21:ed:48:1b:2c:66:01:
32:c0:cd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:35:56 2026 by rpki-client