Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996B496649D711F1BC1CC1E8CE1D38B0.roa
File: 996B496649D711F1BC1CC1E8CE1D38B0.roa (raw, json)
Hash identifier: rW5shwda7Gp3WLyru/PtSb5Gx3Eg7aD9kcXSJYtRT/0=
Subject key identifier: 8D:5C:C0:78:43:E9:1A:10:8A:50:D4:DB:57:FC:95:39:8B:33:1F:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B20D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996B496649D711F1BC1CC1E8CE1D38B0.roa
Signing time: Thu 07 May 2026 05:42:57 +0000
ROA not before: Thu 07 May 2026 05:42:52 +0000
ROA not after: Fri 15 May 2026 05:42:52 +0000
asID: 150706
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111117 (0x1b20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 05:42:52 2026 GMT
Not After : May 15 05:42:52 2026 GMT
Subject: CN=69fc2661-3bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:5e:37:d4:39:5f:24:1a:58:16:b4:5d:61:
78:4d:03:6a:4e:3c:ba:95:f6:94:ab:f2:5e:bb:0f:
10:ad:99:d4:48:2f:d8:d1:ea:a0:62:c9:64:74:7d:
9b:cf:a5:a9:54:1b:b1:37:b0:d0:60:03:cb:03:4d:
44:11:df:46:a0:5d:72:23:59:f4:6c:79:21:60:85:
09:90:f5:da:08:f8:9f:df:82:3e:e9:c1:de:b6:a8:
5b:05:58:40:24:9d:c7:cf:b1:98:91:d1:04:1b:a0:
df:88:19:fd:20:9e:84:b1:01:60:ea:f9:80:88:bd:
5b:3f:d8:8d:3c:60:ba:0d:97:a4:1d:08:a1:3a:b3:
53:cd:97:66:ce:45:be:43:92:2c:fd:a2:7b:6a:f4:
04:c7:ae:bb:15:59:0c:1e:38:b2:e5:1e:7a:c1:b2:
06:22:60:f9:a2:36:31:4f:ef:f8:c4:36:c4:49:58:
2f:85:93:a4:bc:37:d3:a8:27:60:fe:73:6b:63:c1:
61:af:d3:30:2e:85:d0:60:21:15:68:16:7b:ca:46:
9a:79:44:5d:f0:96:b5:e3:a4:19:15:c0:fd:8c:68:
62:35:26:87:cf:39:fd:30:15:f1:f1:68:06:31:58:
ad:23:17:c9:8f:fd:f3:94:ea:55:b0:9e:0a:24:13:
67:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5C:C0:78:43:E9:1A:10:8A:50:D4:DB:57:FC:95:39:8B:33:1F:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/996B496649D711F1BC1CC1E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
92:93:81:05:d8:df:7b:f2:a3:78:64:0a:71:9c:dc:c6:1c:15:
1a:ad:f9:6a:da:8b:f5:2e:6b:b4:9a:f0:10:03:f4:e3:00:34:
3d:c3:47:6d:e9:de:e5:7b:69:9f:5e:e0:c7:c4:bb:f3:80:2f:
b8:cc:82:db:0b:ea:1b:d3:5a:93:4d:d5:69:b7:73:55:c8:ed:
1a:59:78:94:24:27:0b:9e:ce:77:d7:40:ea:76:ca:c9:9f:e7:
78:38:31:8c:87:8e:06:87:26:00:8f:b8:41:33:66:a1:4b:2f:
08:ba:88:34:86:ab:d1:28:a3:5e:6e:0e:85:d8:00:71:fd:77:
f0:87:4b:86:09:ef:c4:17:a2:b4:b3:b2:29:d5:82:83:4b:60:
f1:85:89:1f:5d:b5:57:44:0e:b7:27:e9:7e:fe:31:06:42:59:
a8:5c:7f:f3:b8:27:7c:fa:6c:1f:c2:f6:04:12:1d:14:00:c9:
d0:68:15:c2:94:37:95:6b:9d:a2:78:fd:11:a6:c2:31:c6:7b:
c0:d8:5b:cf:64:b0:3c:f8:c7:6e:f1:e7:2c:72:89:66:df:22:
44:ec:05:f4:e4:66:c7:cd:1a:08:93:cb:2a:bd:eb:3d:eb:3f:
92:4f:ac:28:fc:ec:0c:92:7c:2d:d0:f2:3b:45:82:9e:cb:0a:
36:48:e7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:36 2026 by rpki-client