Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78E353042E811F1B48828BACE1D38B0.roa
File: F78E353042E811F1B48828BACE1D38B0.roa (raw, json)
Hash identifier: R7SQzEv2y8Icz3T7KVtKn5+wnqmrJz12Pjj3RJHWD2Y=
Subject key identifier: 56:BA:AB:20:6D:3A:8E:70:7D:D9:06:6B:88:E6:AB:DC:F8:37:2F:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78E353042E811F1B48828BACE1D38B0.roa
Signing time: Tue 28 Apr 2026 09:59:38 +0000
ROA not before: Tue 28 Apr 2026 09:59:33 +0000
ROA not after: Thu 04 Jun 2026 09:59:33 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110490 (0x1af9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 09:59:33 2026 GMT
Not After : Jun 4 09:59:33 2026 GMT
Subject: CN=69f0850a-8fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:27:c5:a1:c0:e4:e8:92:06:22:c6:25:63:
d5:75:22:82:18:27:cb:7f:41:a7:bd:f1:92:0d:df:
58:11:15:23:df:59:d1:9b:36:e6:92:15:c1:3c:a3:
8b:7a:67:82:10:86:22:fc:b3:62:d7:17:0c:92:74:
62:48:cc:44:45:35:58:66:38:b0:67:c9:65:da:ae:
cc:c5:0c:7b:6e:0c:09:cc:54:e3:82:b5:64:cf:ca:
4c:27:aa:67:19:fc:2d:e6:01:38:3e:4b:28:87:1b:
46:a7:ee:a5:a6:19:5b:7d:d9:17:df:fc:86:34:77:
7d:6b:6b:e8:84:98:8d:55:a9:56:29:b8:a7:10:64:
19:88:24:95:f9:e3:17:f6:11:d9:33:ef:51:00:27:
35:aa:88:ac:36:84:24:3c:26:12:08:f8:18:2f:46:
b6:31:dc:c0:a0:09:58:6e:8b:e6:8f:53:60:80:ce:
af:75:11:35:2d:64:06:e1:ad:99:a9:13:28:bb:f8:
7f:4b:40:8a:79:aa:6c:ac:01:8d:87:52:f3:c8:e0:
6e:ab:13:f6:b3:35:b6:78:4e:e7:0b:04:68:4d:27:
57:d0:f2:57:76:37:c0:4c:a3:ef:80:16:1a:0c:5f:
f5:9e:ac:f6:a7:2d:31:2c:ad:bb:07:b4:2e:1b:ee:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:AB:20:6D:3A:8E:70:7D:D9:06:6B:88:E6:AB:DC:F8:37:2F:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F78E353042E811F1B48828BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:b5:ca:44:2b:86:77:ca:dd:9b:58:16:c1:ac:6d:d6:23:e8:
e4:6f:73:e6:52:98:7a:63:e6:a9:1f:e1:cc:36:5a:1d:87:34:
68:f8:3f:18:e7:d2:3e:5e:4a:3a:de:be:90:26:79:c1:a2:fb:
7f:d3:1e:40:cd:07:1c:f0:df:d5:95:5f:48:df:f4:e3:e8:f5:
72:bb:89:46:3d:53:10:19:b8:e3:58:2e:b4:79:d0:77:d8:d2:
a3:8d:75:0e:aa:32:7d:ff:3c:e3:e7:51:d8:ff:f1:71:17:4a:
06:ec:6f:a4:08:c4:21:03:fa:a5:11:79:b2:88:d6:ce:b0:3c:
86:b1:2e:e9:66:6a:6b:7d:ec:42:97:5e:b2:c7:16:3c:2f:f5:
ee:e5:8f:1a:9a:2a:7d:3a:61:47:32:48:ad:24:d5:bf:4f:5f:
8a:76:9d:07:5b:0d:0f:8e:49:62:dc:0f:ae:1c:25:4f:7e:ee:
05:bc:d8:2b:94:aa:a0:fb:49:1c:7a:72:a8:a7:b1:f0:8f:1b:
f8:1b:c9:c9:15:e0:0a:a1:24:88:0f:af:c3:eb:8c:06:40:35:
5f:a2:86:38:d6:55:da:8c:29:2f:6c:80:6a:d9:04:d8:59:14:
26:e5:56:c3:9f:46:0d:53:54:35:1c:96:6b:3d:f9:02:91:ce:
85:98:2b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:34:20 2026 by rpki-client