Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C104F227BA11F19EBFC0E5DAE4EC9C.roa
File: B8C104F227BA11F19EBFC0E5DAE4EC9C.roa (raw, json)
Hash identifier: HxYdF+7Exs2v7oCMhtbBGANLTVPkK+ZIsQGUtgynXy4=
Subject key identifier: 56:1B:43:08:9D:73:5B:DE:F8:75:18:B0:D3:11:CB:C3:56:93:31:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A72C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C104F227BA11F19EBFC0E5DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 19:50:35 +0000
ROA not before: Tue 24 Mar 2026 19:50:29 +0000
ROA not after: Fri 01 May 2026 19:50:29 +0000
asID: 44559
IP address blocks: 156.233.83.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.249.98.0/24 maxlen: 24
156.249.99.0/24 maxlen: 24
156.249.100.0/24 maxlen: 24
156.249.103.0/24 maxlen: 24
156.249.112.0/24 maxlen: 24
156.249.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108332 (0x1a72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 19:50:29 2026 GMT
Not After : May 1 19:50:29 2026 GMT
Subject: CN=69c2eb0b-70c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:ae:5e:1b:43:be:57:4b:14:9d:65:e5:cd:
f0:00:29:5c:b3:18:17:84:5f:19:13:fe:fe:46:03:
31:60:f4:55:89:68:7a:c9:37:bb:60:bc:3a:2b:ac:
6f:1e:e1:1a:d9:4c:7d:8d:f1:55:b1:94:4b:bf:00:
7a:10:11:55:75:de:5d:5e:83:33:cc:9b:27:ce:cb:
1f:56:97:9f:5e:26:62:98:d7:9d:57:59:d9:a0:17:
6a:56:73:e6:83:46:5c:00:90:ce:0c:7d:ea:81:f9:
64:c6:fc:23:50:df:a1:4c:38:05:bf:f6:98:03:39:
13:2c:85:81:74:9d:3c:bb:16:b3:55:b3:81:44:f1:
ec:ae:a2:db:69:cd:f5:ff:db:03:c1:db:ed:13:4e:
55:17:eb:7b:31:84:64:bc:c5:c8:27:30:b6:38:96:
d3:3c:ca:12:a9:bd:d2:4c:76:34:44:7b:8e:a3:fc:
e3:cb:d2:88:88:c0:2b:16:56:25:28:ef:d9:44:e9:
62:30:09:bf:b0:8a:4f:a7:b8:8d:95:2a:5b:c9:e0:
fe:74:f1:05:9f:ab:dc:82:a1:89:11:55:cd:ae:f8:
f3:d2:ae:db:ce:d1:83:eb:58:fd:e6:36:2b:f1:36:
b4:64:36:64:3e:6d:d0:c0:04:6d:0b:c6:20:32:5d:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:43:08:9D:73:5B:DE:F8:75:18:B0:D3:11:CB:C3:56:93:31:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8C104F227BA11F19EBFC0E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.83.0/24
156.233.96.0/23
156.233.106.0/24
156.249.98.0-156.249.100.255
156.249.103.0/24
156.249.112.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:fe:d5:ed:ab:02:dc:53:bb:de:ab:19:78:be:08:cf:fc:86:
57:8d:09:67:c0:b1:be:43:b2:38:09:fa:e4:5d:60:56:c6:d7:
d4:5e:99:15:cf:27:66:a7:87:92:d2:7f:4d:81:51:e5:28:6d:
84:da:6e:a0:d7:77:35:41:f3:80:33:9d:4c:01:fa:55:64:0a:
79:2e:d6:32:a3:61:c9:6a:f4:1e:03:15:98:c6:94:77:df:6a:
9a:1e:81:c4:00:11:5f:3d:f6:c7:c3:ef:b5:50:cb:4e:62:5d:
b0:4f:8f:0a:be:1e:ff:c9:f7:84:64:c3:a7:ab:ff:ed:da:f8:
f6:16:96:3e:20:8a:5d:4e:3f:98:87:7d:34:99:59:00:95:01:
f0:f0:18:36:16:3e:d6:ee:36:0b:c5:30:39:c7:8a:99:a9:8d:
21:b0:14:ce:b2:3d:c4:2e:9c:8b:70:d8:97:56:d4:65:c4:d1:
a2:2d:a3:b6:c7:b1:f8:f0:d8:e4:87:b0:a5:c3:53:0e:aa:0b:
ba:08:96:51:e7:e5:2e:4f:1a:40:8d:1e:9e:23:1a:2b:7f:d3:
bd:53:6f:3d:5a:52:2f:ab:8f:7c:66:8f:ac:30:d0:1c:fc:fa:
3f:54:d7:51:90:f0:05:4c:8b:10:36:46:4b:d6:a7:9e:99:e2:
2a:27:3e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:09 2026 by rpki-client