Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A070186911F19BECA09ADAE4EC9C.roa
File: F566A070186911F19BECA09ADAE4EC9C.roa (raw, json)
Hash identifier: bG+KKj6LNiU8LqoaW7zfZ0NG3kBIEXwZYjh5SwMDy8Q=
Subject key identifier: C8:0E:02:0C:77:30:60:BA:47:FB:AB:87:0F:62:20:B4:AB:1D:83:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A289
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A070186911F19BECA09ADAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:04:39 +0000
ROA not before: Thu 05 Mar 2026 08:04:35 +0000
ROA not after: Thu 09 Apr 2026 08:04:35 +0000
asID: 54801
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107145 (0x1a289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 08:04:35 2026 GMT
Not After : Apr 9 08:04:35 2026 GMT
Subject: CN=69a93917-9cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:c0:99:a5:ca:c9:33:7b:a3:8d:a5:18:d4:
0a:c9:02:72:55:ad:36:a4:3f:c9:34:ed:b3:df:8f:
f2:0b:da:04:e3:c8:0a:96:12:6d:f0:3e:ef:12:8d:
1a:7e:cb:5d:fc:41:44:ce:a2:23:a2:46:2e:70:e6:
eb:b9:e9:1c:38:a5:bb:50:82:8f:33:54:1d:ca:79:
6a:65:aa:04:41:57:1b:1e:39:70:45:e2:12:26:95:
cc:0c:fe:12:21:ed:5a:59:77:a4:7b:9d:09:41:36:
7f:43:62:ed:d5:51:13:56:c6:35:3e:64:e0:4d:69:
a9:70:d9:7f:6d:73:58:07:18:7f:a2:f9:e2:c2:24:
52:15:55:c0:f6:8e:24:38:84:36:3b:53:86:e4:6f:
12:5a:cd:2b:be:de:a5:fa:c4:87:b6:f0:3a:88:67:
4f:51:93:2f:a1:0e:59:3d:2d:bc:72:63:5b:fe:92:
69:2b:1d:52:22:43:c5:e6:3f:70:a9:81:6f:22:0c:
12:99:62:49:5f:ed:4c:95:c4:5d:ed:8b:a2:ce:29:
53:35:bb:0e:58:79:be:7f:98:bc:b5:69:4f:ae:b0:
d1:4b:2a:33:d3:db:55:ce:05:d1:23:a3:16:73:ff:
2a:0f:f2:60:af:63:bd:83:c9:fc:53:b5:ec:8f:5b:
b7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0E:02:0C:77:30:60:BA:47:FB:AB:87:0F:62:20:B4:AB:1D:83:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F566A070186911F19BECA09ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.245.232.0/21
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
71:cd:08:b2:8d:2f:e8:fd:b1:d3:30:39:80:5d:6c:ea:0a:ff:
4a:18:ff:65:d7:43:19:b9:e3:45:ef:1d:a4:03:7c:fe:17:bc:
cd:8f:86:cf:f3:87:d6:03:f4:de:7a:89:40:85:46:3e:72:7f:
82:fb:02:60:53:5d:9e:4f:bf:98:3e:19:2c:a1:f3:c2:cd:88:
99:ef:82:26:4c:01:a1:2a:1c:08:00:38:88:d6:14:2f:60:66:
02:56:bc:10:19:e4:b1:10:3d:f1:5f:c8:60:aa:18:82:92:b7:
c8:30:a9:91:9e:f0:eb:e4:15:0e:9d:91:18:e3:de:47:f3:5f:
12:e7:d5:2c:61:a9:01:76:fa:bc:72:01:eb:95:a4:a1:00:5e:
b7:11:b4:c2:56:37:67:a9:29:61:90:34:0b:0c:d7:36:b7:df:
f5:ba:ec:5f:7e:b6:f9:80:e6:fb:17:37:7d:7c:e3:9d:07:c2:
db:cc:c5:f5:e3:9b:27:95:d4:c1:7b:6c:96:c7:17:44:5a:a2:
f6:24:71:ba:ab:fe:9a:b6:e1:d0:94:1a:c3:bb:71:1c:ec:73:
52:70:c7:44:ac:ce:66:a8:b4:47:6e:67:93:ac:a9:87:6f:7d:
5f:58:bb:f0:06:b6:f6:b9:1e:2b:fd:ba:e4:6e:32:ca:b8:0d:
0d:18:10:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:37 2026 by rpki-client