Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B4292C210A11F1AA635279DAE4EC9C.roa
File: F0B4292C210A11F1AA635279DAE4EC9C.roa (raw, json)
Hash identifier: FaWq2veFIwNCx3OcqHCI+guQ9Yniwxgn3puZHIA+3RQ=
Subject key identifier: E3:C6:F0:16:07:6E:39:7B:9F:57:46:FF:85:7E:69:91:73:2A:C0:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A56C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B4292C210A11F1AA635279DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:37:10 +0000
ROA not before: Mon 16 Mar 2026 07:37:05 +0000
ROA not after: Fri 16 Mar 2029 07:37:05 +0000
asID: 17561
IP address blocks: 156.255.208.0/24 maxlen: 24
156.255.209.0/24 maxlen: 24
156.255.210.0/24 maxlen: 24
156.255.211.0/24 maxlen: 24
156.255.212.0/24 maxlen: 24
156.255.213.0/24 maxlen: 24
156.255.214.0/24 maxlen: 24
156.255.215.0/24 maxlen: 24
156.255.216.0/24 maxlen: 24
156.255.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107884 (0x1a56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:37:05 2026 GMT
Not After : Mar 16 07:37:05 2029 GMT
Subject: CN=69b7b326-3272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:ce:b1:e4:f6:8e:a7:b3:2c:1c:88:6f:bf:
82:66:84:3e:bf:fe:f4:3c:51:75:96:b5:e7:bb:ca:
c8:21:30:ca:42:f5:57:d2:e4:05:0b:f7:7c:d7:82:
45:4c:9b:0f:92:63:09:fb:46:69:ed:1a:2f:05:4b:
2b:49:99:96:ea:3c:b7:82:fc:4e:14:d8:8a:bf:85:
fd:d7:a4:c1:c2:4a:81:11:2d:6d:51:62:a9:81:fe:
b6:50:81:43:e4:4c:4b:ab:c3:d9:26:43:58:ca:96:
51:3f:1e:32:00:fb:ab:cc:9e:6c:40:92:0a:9a:62:
d1:c1:e9:90:53:73:81:55:15:44:1b:0f:d1:5a:89:
cd:70:1f:11:50:0c:59:49:97:eb:0d:45:e1:25:f8:
26:10:69:b0:f9:e6:33:6f:9f:15:41:b1:46:29:cf:
35:b5:0d:a1:31:7b:f2:0d:cf:86:b4:6a:5c:fd:22:
56:50:1f:fb:af:2c:e9:90:07:e0:b6:29:c0:7c:a2:
f3:07:03:86:3c:e7:af:58:e1:c5:a2:bf:41:58:47:
b2:eb:b9:66:5a:52:11:a9:0a:5b:5d:e2:93:62:f3:
12:79:48:3d:5d:10:de:fd:cc:f1:f7:2c:54:12:3e:
4c:d4:29:c7:85:75:58:fe:25:6d:c1:bd:0a:b1:cf:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C6:F0:16:07:6E:39:7B:9F:57:46:FF:85:7E:69:91:73:2A:C0:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0B4292C210A11F1AA635279DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.208.0-156.255.217.255
Signature Algorithm: sha256WithRSAEncryption
7d:f8:fe:ae:b6:70:57:f5:cf:64:ef:de:80:1b:9c:21:e4:94:
2c:c8:2d:49:97:03:1f:d3:f8:0a:ec:f8:2a:5a:d2:3e:ae:bc:
3c:46:ce:bb:b9:79:a5:de:4c:fb:61:70:5f:9f:61:31:ff:2f:
11:62:c5:65:85:ad:e0:6b:17:a6:e6:ce:4c:af:4b:96:10:33:
b4:cb:25:1a:ec:78:da:e8:e4:a4:2a:3b:85:e5:37:da:27:57:
9e:a9:b3:e3:50:be:42:54:8b:60:94:b3:d3:1c:bd:cb:e1:da:
90:7d:01:a4:5c:fb:29:d7:c6:f7:48:1a:87:4c:8b:ec:3b:f0:
77:19:cb:7f:9e:e1:56:a5:01:aa:da:26:18:85:6c:18:eb:06:
d4:62:24:06:ff:ec:13:a5:d7:c4:ea:0e:76:ea:bb:b1:74:10:
b1:9b:2f:cb:2f:10:d3:dd:21:8d:58:84:a3:3d:f9:a3:46:4f:
8a:7b:6e:57:9a:eb:15:d2:5f:09:fe:3f:36:b2:cb:41:69:4d:
74:5a:29:f7:e9:39:8e:c7:74:e3:dd:46:49:8c:87:d5:8c:bb:
57:92:f6:19:b9:1d:14:9a:54:6f:8f:38:31:f6:4f:db:36:11:
c9:c9:b3:e7:18:13:d2:5a:2c:66:8c:d8:be:1d:02:81:c3:e0:
1c:f3:dc:cc
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaVsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE2MDczNzA1WhcNMjkwMzE2MDczNzA1WjAYMRYw
FAYDVQQDEw02OWI3YjMyNi0zMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApGfOseT2jqezLByIb7+CZoQ+v/70PFF1lrXnu8rIITDKQvVX0uQFC/d8
14JFTJsPkmMJ+0Zp7RovBUsrSZmW6jy3gvxOFNiKv4X916TBwkqBES1tUWKpgf62
UIFD5ExLq8PZJkNYypZRPx4yAPurzJ5sQJIKmmLRwemQU3OBVRVEGw/RWonNcB8R
UAxZSZfrDUXhJfgmEGmw+eYzb58VQbFGKc81tQ2hMXvyDc+GtGpc/SJWUB/7ryzp
kAfgtinAfKLzBwOGPOevWOHFor9BWEey67lmWlIRqQpbXeKTYvMSeUg9XRDe/czx
9yxUEj5M1CnHhXVY/iVtwb0Ksc/3SwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOPG
8BYHbjl7n1dG/4V+aZFzKsDBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMEI0MjkyQzIxMEExMUYxQUE2MzUyNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASc/9ADBAGc/9gwDQYJKoZI
hvcNAQELBQADggEBAH34/q62cFf1z2Tv3oAbnCHklCzILUmXAx/T+Ars+Cpa0j6u
vDxGzru5eaXeTPthcF+fYTH/LxFixWWFreBrF6bmzkyvS5YQM7TLJRrseNro5KQq
O4XlN9onV56ps+NQvkJUi2CUs9Mcvcvh2pB9AaRc+ynXxvdIGodMi+w78HcZy3+e
4ValAaraJhiFbBjrBtRiJAb/7BOl18TqDnbqu7F0ELGbL8svENPdIY1YhKM9+aNG
T4p7blea6xXSXwn+Pzayy0FpTXRaKffpOY7HdOPdRkmMh9WMu1eS9hm5HRSaVG+P
ODH2T9s2EcnJs+cYE9JaLGaM2L4dAoHD4Bzz3Mw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:24 2026 by rpki-client