Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63EEC9E4A0811F19B766C0ECF1D38B0.roa
File: E63EEC9E4A0811F19B766C0ECF1D38B0.roa (raw, json)
Hash identifier: jfo3TjOeroMyZ5sXN2xIYZH5snWpEDJiPjbtxTP5Fdo=
Subject key identifier: BF:64:8D:56:85:9F:89:6A:46:61:5C:A0:6B:4F:F5:3F:5A:7C:BA:D5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B248
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63EEC9E4A0811F19B766C0ECF1D38B0.roa
Signing time: Thu 07 May 2026 11:35:51 +0000
ROA not before: Thu 07 May 2026 11:35:46 +0000
ROA not after: Fri 15 May 2026 11:35:46 +0000
asID: 137443
IP address blocks: 156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111176 (0x1b248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:35:46 2026 GMT
Not After : May 15 11:35:46 2026 GMT
Subject: CN=69fc7917-10f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:3f:a9:ec:6d:12:05:34:f4:62:59:89:04:
65:cc:01:2c:3b:18:9e:45:a8:65:cd:fb:c9:20:31:
f3:30:77:47:6d:43:3a:fb:75:64:3d:bc:a3:14:08:
ec:ba:7b:e0:d3:0e:f5:38:9e:18:a2:28:24:91:27:
3f:73:8d:35:df:09:b4:7d:4f:66:00:ca:ab:24:a5:
dd:38:ac:83:fc:64:d3:3a:df:2e:f1:97:5c:8d:f6:
50:be:f0:87:66:b1:af:12:e7:b2:ba:ba:13:dd:bf:
6d:48:81:df:da:f7:1e:12:67:21:a3:66:85:a3:51:
30:61:79:cd:8e:0f:66:e7:f8:a9:b9:da:f2:11:80:
ce:c7:84:4a:ac:e0:86:87:2a:eb:75:04:be:a9:ab:
37:ee:7f:1f:ae:f0:9b:b3:e9:21:9c:83:28:65:5b:
b4:fd:b8:d7:a8:fd:76:eb:4a:a6:b1:8f:b3:07:26:
34:d6:7a:df:a2:db:38:84:ee:8b:17:0b:ca:57:c4:
af:89:cc:4e:6e:ed:56:1b:8e:a3:41:13:b5:e8:5f:
c4:ab:ab:a4:31:7c:04:b6:ca:73:d1:ec:fb:eb:d9:
4b:61:aa:6f:1e:c8:9c:db:c6:4c:19:4c:21:cc:3f:
7f:10:a4:95:19:ba:58:da:d4:63:9d:32:c3:5a:cb:
3f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:8D:56:85:9F:89:6A:46:61:5C:A0:6B:4F:F5:3F:5A:7C:BA:D5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E63EEC9E4A0811F19B766C0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.112.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:7b:be:ee:a2:47:15:87:5c:35:68:fd:03:51:2d:b4:53:73:
cf:cb:b3:39:b9:da:69:6c:ca:c1:44:53:07:c1:f5:bd:df:e7:
2f:4a:de:0e:16:aa:f7:e5:39:33:51:97:25:d0:ce:4f:51:1b:
d7:29:fa:c3:8b:b3:3d:97:68:d3:a2:91:46:11:5a:e4:be:ed:
37:de:de:b5:d8:30:bf:19:50:c6:95:40:f6:60:db:d3:1e:d7:
bf:e0:b1:46:cf:3f:cf:1b:92:30:75:5e:6f:69:14:f3:6b:6c:
c6:de:9f:1e:91:79:30:04:18:b5:d7:7e:66:0c:35:70:b9:04:
21:19:96:16:82:08:ed:7c:85:59:02:3f:40:82:dd:7d:69:25:
1e:13:fd:52:f5:cc:5a:dc:c7:c9:c1:6a:0f:4b:f3:1c:a7:14:
c9:c7:6d:59:d0:08:ee:87:69:9f:8a:ec:04:20:bf:a4:43:05:
d5:c7:4f:55:b3:15:99:88:a6:93:1c:bb:84:41:8c:4f:80:51:
fd:4a:05:2f:fc:6c:ad:da:03:47:ee:51:b9:93:ca:58:5d:79:
12:ed:50:14:0f:53:59:f2:e7:db:6e:5e:93:ce:26:66:2f:da:
16:60:bf:d7:4a:14:b1:0f:94:38:34:9b:fd:b5:20:c2:94:b9:
cf:1d:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:12 2026 by rpki-client