Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4DE23C8282011F1A270B6CBDAE4EC9C.roa
File: F4DE23C8282011F1A270B6CBDAE4EC9C.roa (raw, json)
Hash identifier: KMXzU5WBiS3fODmCuF1uj9++o+aS7hfIKSW1Fwvtb84=
Subject key identifier: 65:59:F4:28:E5:60:AF:02:A8:0F:1E:B6:FC:DF:73:6A:32:88:85:17
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A74D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4DE23C8282011F1A270B6CBDAE4EC9C.roa
Signing time: Wed 25 Mar 2026 08:02:24 +0000
ROA not before: Wed 25 Mar 2026 08:02:19 +0000
ROA not after: Sat 02 May 2026 08:02:19 +0000
asID: 984
IP address blocks: 156.227.133.0/24 maxlen: 24
156.227.143.0/24 maxlen: 24
156.227.145.0/24 maxlen: 24
156.231.98.0/24 maxlen: 24
156.231.101.0/24 maxlen: 24
156.232.32.0/24 maxlen: 24
156.232.33.0/24 maxlen: 24
156.233.109.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108365 (0x1a74d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 08:02:19 2026 GMT
Not After : May 2 08:02:19 2026 GMT
Subject: CN=69c39690-7a52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:31:70:ce:8c:07:aa:ce:19:08:25:30:b3:
9f:5c:06:62:6d:d1:e3:2f:32:44:da:e5:0d:2c:0c:
34:b8:55:a5:15:dc:f2:b0:09:78:70:13:a1:89:9b:
ca:1d:62:ff:e8:5f:d9:83:9d:ac:bf:d0:ff:13:e2:
80:1e:79:53:76:57:b8:8b:a4:b6:7e:e9:d0:b0:36:
c1:66:a9:a1:53:4d:54:ea:2e:68:68:f5:e3:44:b9:
94:4a:53:aa:b6:92:8f:eb:e9:84:23:a0:a8:77:38:
ea:b0:3e:a6:03:5a:70:86:9d:71:fa:18:70:47:ec:
d3:5b:a7:fe:d0:b1:bd:72:7c:2b:6a:04:cb:fe:d2:
9d:9f:be:8b:48:da:34:25:6c:7f:34:93:a1:7d:86:
f6:65:eb:c5:d4:95:b8:5b:4c:c4:55:9d:f6:de:47:
f7:23:d6:be:2d:17:e5:86:96:44:26:4b:a5:c4:f9:
5a:7a:36:af:d6:43:a8:20:1e:0e:ab:63:f3:9d:48:
ff:09:13:94:21:07:e9:35:ec:a6:e3:69:32:20:37:
89:e5:b4:df:c3:23:6e:cf:5d:14:55:95:67:17:7f:
df:55:02:1a:5b:97:16:3e:a5:c7:8d:2a:61:fd:a0:
aa:8c:3e:82:e3:4b:5c:41:52:1f:ee:6a:aa:2e:83:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:59:F4:28:E5:60:AF:02:A8:0F:1E:B6:FC:DF:73:6A:32:88:85:17
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4DE23C8282011F1A270B6CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.133.0/24
156.227.143.0/24
156.227.145.0/24
156.231.98.0/24
156.231.101.0/24
156.232.32.0/23
156.233.109.0/24
156.249.172.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:e0:28:59:61:39:f0:71:17:f4:84:c8:df:b3:e8:6a:a4:29:
6c:47:53:7a:c2:f6:a3:d1:6d:46:75:77:a4:ad:40:be:c3:38:
9f:0a:b4:f5:b8:c2:1d:51:69:be:2b:2d:0c:ff:5d:11:c9:03:
6a:ae:3a:cc:e1:99:23:49:57:a0:ed:f7:e7:cc:93:c1:c4:93:
23:a6:a1:cf:92:c7:48:18:b2:03:69:11:78:03:27:17:a4:ac:
fe:d7:b7:44:35:f5:83:3b:25:5c:44:fa:ed:d8:24:3d:fd:60:
3f:27:01:4f:dd:d3:81:13:dd:d3:5e:20:ad:1f:74:8c:c7:d4:
4a:f7:8f:be:b1:d3:28:5c:20:47:95:c5:74:6d:4f:77:17:da:
d0:0c:eb:a7:5c:dd:5b:69:c9:cc:71:79:12:e3:41:31:ec:3c:
b9:ef:66:58:74:92:98:91:65:4e:af:ad:65:d5:eb:77:33:36:
1a:63:bf:af:82:8b:ee:ca:3e:72:fb:a8:a8:7e:c2:0f:a0:f2:
d4:26:73:6d:d9:c4:71:ca:d4:db:0b:d6:ba:b9:64:98:89:72:
2c:37:78:9c:ce:8f:10:61:78:ad:ba:80:c3:8a:fe:56:93:c0:
9c:12:d4:5f:24:f5:dc:94:5e:d2:61:94:dc:2f:2f:d7:9d:ef:
fe:d5:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:41 2026 by rpki-client