Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5AF3103FCE11F19AD453CDCE1D38B0.roa
File: 9B5AF3103FCE11F19AD453CDCE1D38B0.roa (raw, json)
Hash identifier: k2lvFOMQxuPLS/5aQah18LiGTyvgcwiCXYX+094J8L0=
Subject key identifier: 22:16:6D:97:E9:21:CB:F8:CC:6C:EA:17:51:61:4C:A1:33:27:98:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5AF3103FCE11F19AD453CDCE1D38B0.roa
Signing time: Fri 24 Apr 2026 11:13:23 +0000
ROA not before: Fri 24 Apr 2026 11:13:18 +0000
ROA not after: Sun 31 May 2026 11:13:18 +0000
asID: 44559
IP address blocks: 156.233.67.0/24 maxlen: 24
156.233.81.0/24 maxlen: 24
156.233.82.0/24 maxlen: 24
156.248.21.0/24 maxlen: 24
156.248.23.0/24 maxlen: 24
156.249.19.0/24 maxlen: 24
156.249.80.0/24 maxlen: 24
156.249.81.0/24 maxlen: 24
156.249.83.0/24 maxlen: 24
156.249.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110306 (0x1aee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 11:13:18 2026 GMT
Not After : May 31 11:13:18 2026 GMT
Subject: CN=69eb5053-99ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:76:f2:61:0d:f0:1f:d5:e1:59:98:82:65:
48:05:9a:e6:cb:44:dd:4a:9e:75:e5:3a:4a:cd:b4:
cc:53:e2:96:a5:c6:c3:a1:6c:e4:15:9e:6d:ae:58:
42:48:83:b5:04:ae:38:cf:89:0d:c3:86:b8:07:9b:
05:6e:75:f1:fc:89:2b:fa:a1:35:bd:ca:19:48:14:
d8:53:10:38:ba:45:4f:55:94:58:5b:a2:84:d6:09:
89:b1:98:b8:be:73:88:a5:11:fc:59:56:1d:19:3b:
36:bd:42:15:3c:ec:e0:90:ac:fb:f3:f9:85:82:71:
ab:5e:91:64:f8:8a:bd:ef:98:f5:74:98:5b:ba:d2:
bf:60:06:04:f9:d9:93:fa:d4:8e:e1:04:6b:a5:63:
68:e5:6f:a1:03:75:30:4c:2b:e1:51:21:85:bd:ee:
79:fb:27:b7:cb:c1:b7:18:46:b9:5e:4d:67:6d:f9:
a5:87:c7:ac:87:0e:ee:0c:3c:36:ac:ef:f5:99:3e:
7e:e9:92:28:1c:6d:e0:6a:9a:4f:d9:d4:a1:a9:ee:
1e:45:84:f8:0c:f0:89:5a:45:22:15:b4:a0:d7:65:
30:41:ba:70:51:ef:1c:5d:24:85:5e:20:be:fd:26:
02:8a:90:b1:11:18:49:00:f7:c6:59:7d:dd:16:20:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:16:6D:97:E9:21:CB:F8:CC:6C:EA:17:51:61:4C:A1:33:27:98:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9B5AF3103FCE11F19AD453CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.67.0/24
156.233.81.0-156.233.82.255
156.248.21.0/24
156.248.23.0/24
156.249.19.0/24
156.249.80.0/23
156.249.83.0/24
156.249.97.0/24
Signature Algorithm: sha256WithRSAEncryption
29:cb:3b:40:8f:3b:88:bd:80:4b:19:ef:4f:cd:00:97:cb:96:
9e:f9:bf:cc:fb:07:24:f6:d1:ff:6c:22:92:a2:2e:c2:37:83:
f6:5c:e9:f5:97:5e:44:3b:0c:bf:f7:e1:6e:34:db:3e:4d:5f:
04:80:8e:b1:d8:48:56:86:fb:df:7d:e6:10:62:e8:83:d1:02:
b5:db:e6:d6:72:1f:ef:84:dd:64:6a:6c:22:3f:d4:a5:11:90:
44:03:da:1c:d7:46:98:5e:e1:de:13:c7:c8:45:e4:9a:cc:56:
3a:ad:d7:1f:ad:03:c6:89:82:8a:0b:48:77:fc:1d:a4:3e:71:
af:d7:83:22:e1:ba:cc:71:3c:75:08:60:23:ba:c6:13:aa:6f:
7f:fd:44:55:5c:26:33:d6:bd:43:a8:82:4f:df:72:6e:ea:f1:
37:28:44:92:cb:c1:f9:1a:fd:6d:1c:04:a1:28:29:12:53:41:
ac:fd:0b:a6:5f:e5:20:57:6e:7e:63:37:61:ca:4b:69:3d:a4:
64:26:1a:61:28:05:f7:f2:84:6b:10:86:fc:e7:04:3e:85:9e:
4d:37:c1:24:09:1d:d0:89:cb:05:0b:67:ed:44:ed:24:eb:69:
82:3a:43:7b:b5:46:55:50:c7:5b:63:30:4f:2b:1a:e8:ea:8a:
53:22:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:53:37 2026 by rpki-client