Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96680383FE211F1AE54B3C6CE1D38B0.roa
File: E96680383FE211F1AE54B3C6CE1D38B0.roa (raw, json)
Hash identifier: 6aoX6D/jjRjSj2ulA++mhsVTWiRiu+CGbWfbTp4/tjA=
Subject key identifier: 55:D7:51:53:E5:22:22:2E:F1:10:CF:7D:45:84:FA:F0:C2:D9:F4:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF04
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96680383FE211F1AE54B3C6CE1D38B0.roa
Signing time: Fri 24 Apr 2026 13:38:44 +0000
ROA not before: Fri 24 Apr 2026 13:38:39 +0000
ROA not after: Mon 01 Jun 2026 13:38:39 +0000
asID: 11427
IP address blocks: 156.233.12.0/22 maxlen: 24
156.233.24.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110340 (0x1af04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 24 13:38:39 2026 GMT
Not After : Jun 1 13:38:39 2026 GMT
Subject: CN=69eb7264-4934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:7d:2c:1d:f8:e0:ba:20:ad:a2:f3:25:82:
25:d1:b6:f1:40:64:06:48:8b:3d:e4:a3:db:11:3d:
71:59:70:0f:38:a6:c0:fe:6f:c5:ba:51:4a:83:6c:
55:3d:63:f1:c3:11:ea:79:e4:ee:38:7f:df:a5:88:
65:f8:10:58:cb:7c:89:3f:91:4f:cf:5e:1c:4f:3a:
8d:e6:93:ac:27:99:28:7c:e0:ad:aa:7a:f1:e9:4a:
44:56:85:c2:ff:0c:3e:c0:1b:0b:24:02:fa:09:c9:
a3:e4:47:45:85:73:fb:4d:8b:48:b2:82:4a:aa:9c:
c5:fa:70:c6:4d:10:4a:bc:31:f8:7b:bc:85:71:e7:
d5:8f:1e:f4:87:c5:b4:6d:5f:a3:79:88:5c:8d:d1:
50:8e:e0:b9:db:d8:9f:32:aa:2e:25:2f:76:5f:20:
97:4f:85:6f:a8:b7:46:b7:d9:fc:cc:85:eb:36:77:
d8:cd:5e:f4:1e:65:6c:92:91:3f:5c:28:29:4b:1d:
9b:3f:cb:38:5e:24:b4:50:21:be:d0:2a:33:1c:44:
79:32:94:13:57:3b:da:f2:2b:6d:c3:4a:63:0c:46:
15:56:7f:73:31:50:7f:34:70:1e:32:d4:6c:28:fc:
ed:62:ac:15:69:28:01:88:de:84:d0:be:63:b0:c9:
33:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D7:51:53:E5:22:22:2E:F1:10:CF:7D:45:84:FA:F0:C2:D9:F4:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96680383FE211F1AE54B3C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.12.0/22
156.233.24.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
44:8f:b9:18:4f:27:13:10:a3:f9:21:f7:94:74:87:87:9e:c6:
b2:b3:35:bb:1a:c0:c1:a5:5c:c9:12:13:80:25:e1:72:c2:01:
db:9f:c7:23:76:84:a2:02:d2:6d:53:02:75:e4:a6:b8:14:11:
03:84:cd:67:10:86:b4:59:6a:df:e1:12:68:96:f9:b1:54:2a:
5d:76:48:6e:2c:b1:7d:f3:35:de:78:8a:b2:ea:b9:ac:a5:20:
e6:09:f5:7f:78:48:bb:ac:01:1b:0c:8a:0d:f8:f3:50:f3:c1:
58:75:0f:d6:77:2b:b9:7e:80:5a:ee:69:92:df:f3:3b:e5:fe:
d6:53:53:5d:14:9e:b8:3f:13:43:7f:b4:d4:7b:95:28:ef:7c:
84:25:49:cf:e5:af:15:10:14:66:58:52:2e:fd:60:10:41:80:
c4:78:9a:43:28:4d:78:28:bc:3e:98:6d:ab:d6:7e:73:69:83:
87:8f:7b:b0:46:47:06:ef:87:b0:a3:b4:76:3d:b9:d0:35:0d:
32:bf:e4:9e:94:68:ff:f3:d9:b5:b2:a7:65:dd:25:d5:ad:86:
75:a5:2b:fe:d6:9d:20:e6:09:06:b7:c5:69:ad:50:9a:a1:17:
7e:15:15:81:34:c1:08:b3:3c:55:45:9e:fe:92:37:cf:cf:cc:
c4:d1:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:44:45 2026 by rpki-client