Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC600BC448411F1B778C301CF1D38B0.roa
File: FCC600BC448411F1B778C301CF1D38B0.roa (raw, json)
Hash identifier: tqilIRkT8TH7ACj9pTOh6eEtMY0z9svwMx9ahf7JDfI=
Subject key identifier: 4F:BE:D8:82:3B:BB:15:5E:C7:D2:5F:B5:E8:B4:F8:0C:72:2B:C2:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B030
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC600BC448411F1B778C301CF1D38B0.roa
Signing time: Thu 30 Apr 2026 11:09:00 +0000
ROA not before: Thu 30 Apr 2026 11:08:55 +0000
ROA not after: Thu 04 Jun 2026 11:08:55 +0000
asID: 138195
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110640 (0x1b030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 30 11:08:55 2026 GMT
Not After : Jun 4 11:08:55 2026 GMT
Subject: CN=69f3384b-a1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:75:b7:e1:45:c4:75:a9:11:04:dc:33:c5:99:
df:fa:0e:a7:16:9a:5b:07:04:b5:88:bb:6e:5d:8a:
f0:72:a7:3d:4a:3a:99:50:22:7c:9c:b5:73:1d:18:
2d:6a:e9:bc:6c:70:58:da:fd:e1:41:6c:16:5c:d1:
50:34:c5:b2:00:72:22:ce:bd:38:cd:d2:cf:c1:f5:
d9:77:c6:b1:8e:fd:35:ef:86:f3:a9:b2:fd:5d:b4:
d8:bb:49:b8:90:06:97:c5:27:40:d0:49:9c:20:50:
40:58:49:b3:b2:ff:db:71:a1:61:b7:4c:70:50:be:
6c:46:fe:ec:fa:9d:23:81:57:ea:41:5a:10:3c:ba:
27:3c:13:a9:9b:23:25:66:08:7a:54:7c:6c:4e:ac:
ba:9d:5e:e3:67:18:92:ba:ff:d3:fa:09:a9:ee:62:
f1:46:8e:c5:09:54:50:bd:a3:7e:63:6d:2e:95:12:
22:e1:ac:6e:3d:2a:75:cf:ee:23:5b:51:3f:11:d1:
75:80:05:49:8c:7e:ab:93:bd:97:6f:89:f7:62:bb:
66:80:ce:51:80:af:ef:e6:3f:0c:4b:3a:64:e3:49:
24:6e:ca:ae:4a:6e:c5:dc:d1:f1:d9:2a:f9:14:35:
5f:b7:f4:e7:4f:1d:1c:50:8d:18:2f:e6:bc:a8:d1:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BE:D8:82:3B:BB:15:5E:C7:D2:5F:B5:E8:B4:F8:0C:72:2B:C2:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCC600BC448411F1B778C301CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:b5:60:dd:dc:88:57:2e:16:2a:5b:05:f7:d0:3a:da:ad:2c:
c8:fc:2a:1a:b3:c4:40:b4:bf:8c:d3:cb:12:1b:0f:ba:30:32:
32:f0:4e:fe:24:ba:21:19:a6:72:bc:ac:84:1b:53:ca:b5:a5:
be:3f:15:c6:93:e3:51:5d:95:93:5d:64:34:68:a0:22:61:7b:
a2:00:3c:5e:9c:ad:51:cc:6b:03:e2:0f:4a:2f:de:c2:18:08:
dc:2c:39:e4:b5:1a:fb:a3:1b:65:8a:dc:f6:3c:ec:b9:08:8e:
ab:b7:8f:a3:b5:ba:9d:3c:c8:13:2c:de:6e:bf:ca:12:42:14:
ad:78:a6:d4:0c:9c:b2:95:f8:b0:cb:b2:94:81:87:0e:0a:67:
95:c3:65:61:0b:75:7f:97:b8:9f:cd:5d:ba:68:e5:8e:b8:ca:
aa:b3:15:a9:0c:f6:6e:49:40:dc:8b:fc:f0:d1:70:a3:f1:81:
33:cc:40:2c:20:2a:d0:56:7c:de:2e:9a:81:31:10:2d:26:7d:
b7:9e:9c:9d:41:ef:ef:8a:70:7b:65:44:46:ac:cb:d9:5c:e1:
c8:b6:cb:ab:1b:46:84:2e:e3:b9:fc:2c:67:2f:97:0d:b7:e0:
38:96:b7:1b:6a:30:6a:54:63:da:c9:02:16:d6:5f:ef:2c:82:
a2:80:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:28 2026 by rpki-client