Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/014250FC39BB11F1A1FA9001CF1D38B0.roa
File: 014250FC39BB11F1A1FA9001CF1D38B0.roa (raw, json)
Hash identifier: qfUbI0qJ3FBomeU56M9KPsQ082bDPpPtUKmfp+VnQ60=
Subject key identifier: 7F:84:1E:26:42:A9:4F:D1:01:ED:50:71:01:08:C4:E6:47:63:78:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/014250FC39BB11F1A1FA9001CF1D38B0.roa
Signing time: Thu 16 Apr 2026 17:37:57 +0000
ROA not before: Thu 16 Apr 2026 17:36:43 +0000
ROA not after: Sat 02 May 2026 17:36:43 +0000
asID: 395793
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109905 (0x1ad51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 17:36:43 2026 GMT
Not After : May 2 17:36:43 2026 GMT
Subject: CN=69e11e75-c4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:77:82:da:99:81:7f:e6:cb:18:1f:3e:13:
6f:3d:99:47:48:5a:0a:6b:50:30:27:c8:8f:f3:af:
89:ef:5e:d7:a2:98:25:39:aa:f0:c3:3e:ba:e4:98:
9a:42:4b:4a:de:3c:81:3e:e5:66:ab:c3:9b:64:b1:
6d:1c:fc:de:63:92:c0:b5:2d:9d:0f:4e:04:8e:d8:
ea:02:d5:3e:b1:d9:20:60:7d:ca:7f:a5:7f:fb:9b:
36:f9:6a:16:35:d6:fa:70:2b:a5:2e:ba:ad:11:dd:
85:86:02:b2:d2:8c:2f:b1:51:fc:e9:5b:f0:52:7d:
cf:a5:72:d5:a7:a0:b9:26:f5:d3:93:6f:e2:41:97:
55:e3:d7:03:19:86:b9:a8:3d:7f:da:cd:5f:26:41:
cc:be:43:88:b5:f4:d3:c6:2b:ca:69:24:57:3e:d7:
bf:e8:33:cf:48:5e:fd:6f:4d:2d:9a:ee:7d:9c:c7:
33:ec:25:e2:7e:5d:c1:11:41:0c:0c:9b:09:31:fd:
7a:fc:1d:a7:e7:9f:15:fb:af:32:b4:26:7b:58:2c:
45:83:d5:d4:b9:e7:09:47:bc:dc:e4:79:aa:10:11:
8c:ec:af:9a:19:6e:65:ef:54:18:5c:8e:5d:4d:2b:
0e:7d:9b:9e:6d:42:e4:d0:ae:d9:bd:f5:13:e6:a0:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:1E:26:42:A9:4F:D1:01:ED:50:71:01:08:C4:E6:47:63:78:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/014250FC39BB11F1A1FA9001CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
af:9d:fc:7a:83:d6:a5:b9:4d:1e:ff:76:00:d2:8f:8c:28:7f:
70:33:64:18:68:25:b1:2e:21:da:9c:cc:6a:b2:1c:4b:cc:35:
14:0a:a8:c1:85:66:f9:26:9d:2d:ac:bd:9a:1b:bc:25:68:ab:
97:bf:00:fe:89:2e:20:10:ea:fb:41:d3:7d:4e:3d:34:01:28:
19:1d:07:46:0f:40:f5:7a:f5:fb:d8:ca:bc:02:6d:84:7d:06:
59:15:89:2d:85:29:91:51:cc:e9:40:6d:3b:fc:45:b9:9c:80:
75:7c:b7:6b:cd:9f:4e:15:c7:1b:33:4f:ad:73:2d:3a:d5:3e:
71:4f:73:be:35:b9:da:82:17:d1:ec:df:57:39:a0:fa:79:d2:
e3:30:2f:5a:30:61:ac:5a:91:4a:28:4c:03:46:66:6b:b7:19:
ab:62:42:cf:54:a7:be:d9:6e:8e:4c:b7:b9:54:ba:70:d8:25:
da:8d:70:87:db:20:f4:66:dc:b1:76:14:42:34:56:73:4d:c8:
a1:00:cb:32:5f:95:a9:89:9d:27:06:ea:00:db:b0:80:38:03:
75:25:bd:0b:79:f2:93:bc:64:88:f2:cd:c2:39:e5:b7:c1:47:
2c:cc:84:4c:c5:14:ab:36:07:42:a5:f0:1f:8e:34:94:3d:35:
b2:a5:0e:fc
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAa1RMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE2MTczNjQzWhcNMjYwNTAyMTczNjQzWjAYMRYw
FAYDVQQDEw02OWUxMWU3NS1jNGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5bJ3gtqZgX/myxgfPhNvPZlHSFoKa1AwJ8iP86+J717XopglOarwwz66
5JiaQktK3jyBPuVmq8ObZLFtHPzeY5LAtS2dD04EjtjqAtU+sdkgYH3Kf6V/+5s2
+WoWNdb6cCulLrqtEd2FhgKy0owvsVH86VvwUn3PpXLVp6C5JvXTk2/iQZdV49cD
GYa5qD1/2s1fJkHMvkOItfTTxivKaSRXPte/6DPPSF79b00tmu59nMcz7CXifl3B
EUEMDJsJMf16/B2n558V+68ytCZ7WCxFg9XUuecJR7zc5HmqEBGM7K+aGW5l71QY
XI5dTSsOfZuebULk0K7ZvfUT5qAjKwIDAQABo4ICujCCArYwHQYDVR0OBBYEFH+E
HiZCqU/RAe1QcQEIxOZHY3iRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTQyNTBGQzM5QkIxMUYxQTFGQTkwMDFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCnOYQAwQCnOY0AwQBnOaGAwQB
nOgCAwQDnOgwMA0GCSqGSIb3DQEBCwUAA4IBAQCvnfx6g9aluU0e/3YA0o+MKH9w
M2QYaCWxLiHanMxqshxLzDUUCqjBhWb5Jp0trL2aG7wlaKuXvwD+iS4gEOr7QdN9
Tj00ASgZHQdGD0D1evX72Mq8Am2EfQZZFYkthSmRUczpQG07/EW5nIB1fLdrzZ9O
FccbM0+tcy061T5xT3O+NbnaghfR7N9XOaD6edLjMC9aMGGsWpFKKEwDRmZrtxmr
YkLPVKe+2W6OTLe5VLpw2CXajXCH2yD0ZtyxdhRCNFZzTcihAMsyX5WpiZ0nBuoA
27CAOAN1Jb0LefKTvGSI8s3COeW3wUcszIRMxRSrNgdCpfAfjjSUPTWypQ78
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:28 2026 by rpki-client