Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87B8642210B11F1A1033F7FDAE4EC9C.roa
File: D87B8642210B11F1A1033F7FDAE4EC9C.roa (raw, json)
Hash identifier: X/a/I/bq99O/E0VNPCFas9afWvv7BTbOWQraqBkUnfo=
Subject key identifier: 4C:73:2C:6D:3F:67:C6:DE:76:F2:7F:E5:57:D9:F9:3C:1F:80:67:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A570
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87B8642210B11F1A1033F7FDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:43:39 +0000
ROA not before: Mon 16 Mar 2026 07:43:34 +0000
ROA not after: Fri 16 Mar 2029 07:43:34 +0000
asID: 17561
IP address blocks: 156.255.218.0/24 maxlen: 24
156.255.219.0/24 maxlen: 24
156.255.220.0/24 maxlen: 24
156.255.221.0/24 maxlen: 24
156.255.222.0/24 maxlen: 24
156.255.223.0/24 maxlen: 24
156.255.224.0/24 maxlen: 24
156.255.225.0/24 maxlen: 24
156.255.226.0/24 maxlen: 24
156.255.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107888 (0x1a570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:43:34 2026 GMT
Not After : Mar 16 07:43:34 2029 GMT
Subject: CN=69b7b4aa-7da6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:15:29:23:cd:cc:ba:1f:03:ff:43:e8:af:
41:ef:2b:50:f7:9f:9c:c1:09:c1:89:9f:81:23:df:
03:e7:01:f2:fb:0f:49:28:b1:1e:04:7d:d0:eb:af:
1b:49:76:2f:c4:e9:7d:d3:01:e3:d2:46:a0:22:94:
47:84:cc:ed:ac:f7:3b:e8:c0:4e:0d:16:c1:ac:34:
53:97:9b:37:f9:70:04:6d:ef:fb:34:79:d6:48:8a:
29:42:6f:b9:75:7e:76:1b:25:5e:8d:c7:7e:13:b7:
e2:f4:a1:a0:fa:4d:ce:f2:55:41:99:05:0b:ca:6a:
34:b9:76:51:a7:bb:c9:5b:f1:fa:ce:3d:c4:f3:0d:
47:0a:e2:4e:bb:c6:f1:27:28:cb:3a:29:2d:bb:23:
48:43:ef:85:e8:6c:8b:f8:90:75:21:54:34:6f:b2:
8c:cb:27:c6:02:bb:ad:5a:4a:76:c9:e7:35:5b:e2:
0b:4c:4c:27:8c:5d:a6:2e:c0:a3:9a:6f:bb:17:88:
23:08:ac:92:e2:f9:ba:51:57:d8:de:b8:ef:56:e9:
af:e0:5b:05:6f:20:13:44:9a:2f:b0:c0:de:36:aa:
7b:a5:cd:9d:20:50:ca:58:1c:64:19:38:44:d1:1f:
b0:f6:4a:bb:70:cd:44:d9:8e:1e:bc:ac:f3:1d:aa:
a1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:2C:6D:3F:67:C6:DE:76:F2:7F:E5:57:D9:F9:3C:1F:80:67:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D87B8642210B11F1A1033F7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.218.0-156.255.227.255
Signature Algorithm: sha256WithRSAEncryption
5b:e0:d6:57:84:c8:7a:c3:98:ba:f0:1a:14:06:75:4f:1a:c9:
f2:c2:0f:8c:b0:dc:72:9f:84:f7:b9:26:76:40:a6:80:4f:d3:
90:15:c6:70:3a:46:97:72:94:5d:5e:8a:05:b1:4c:29:08:8d:
f1:43:9f:26:54:96:01:d7:5a:c9:e8:71:92:68:9b:1e:dc:8e:
c5:65:bb:45:57:0d:b6:d7:69:a5:7b:8c:39:b4:d9:c1:84:12:
9f:04:5c:33:45:c9:32:bf:8d:aa:ea:4f:64:6b:cc:a5:e6:79:
dd:c4:c6:e8:60:59:c2:78:8a:5b:a8:a4:45:e2:14:e1:10:47:
cc:ec:a6:c8:55:f4:9c:93:c8:a6:4f:ce:cb:f6:88:86:01:a3:
30:ca:ad:c3:de:c7:06:16:a9:59:6c:4a:be:62:1c:06:25:d9:
2c:94:5d:bf:3c:ad:d0:08:ab:e7:e0:bc:6b:7b:88:0b:88:e7:
07:6a:5c:c7:56:fb:49:b7:00:03:69:e5:cd:6f:f1:c4:be:55:
01:1d:cf:9b:b6:9f:51:06:e3:01:87:24:c5:83:1b:9f:ea:13:
73:e7:e4:74:3b:3f:52:b2:96:73:ea:f0:f6:57:41:b9:a6:6e:
09:60:a8:b7:3a:6a:4f:00:21:49:2f:c6:70:cb:66:75:38:c9:
b3:5e:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:23 2026 by rpki-client