Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C30AE664CA11F19DAB5ECBCE1D38B0.roa
File: 06C30AE664CA11F19DAB5ECBCE1D38B0.roa (raw, json)
Hash identifier: n3nHnsg5mBtSH6MR3uXw4jpZ6G29HD6Ygdz+pyXiq+A=
Subject key identifier: BE:F6:10:57:FD:6D:2C:2E:1B:F3:7A:A9:5A:53:46:56:4A:31:3D:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C30AE664CA11F19DAB5ECBCE1D38B0.roa
Signing time: Wed 10 Jun 2026 12:43:49 +0000
ROA not before: Wed 10 Jun 2026 12:43:43 +0000
ROA not after: Fri 17 Jul 2026 12:43:43 +0000
asID: 22773
IP address blocks: 156.241.41.0/24 maxlen: 24
156.242.2.0/23 maxlen: 24
156.242.20.0/23 maxlen: 24
156.242.22.0/24 maxlen: 24
156.242.24.0/23 maxlen: 24
156.243.35.0/24 maxlen: 24
156.243.36.0/23 maxlen: 24
156.243.82.0/24 maxlen: 24
156.243.84.0/24 maxlen: 24
156.243.96.0/22 maxlen: 24
156.243.130.0/24 maxlen: 24
156.244.144.0/20 maxlen: 24
156.248.104.0/21 maxlen: 24
156.249.0.0/24 maxlen: 24
156.249.4.0/22 maxlen: 24
156.249.16.0/24 maxlen: 24
156.249.20.0/22 maxlen: 24
156.249.48.0/21 maxlen: 24
156.249.121.0/24 maxlen: 24
156.249.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113868 (0x1bccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 12:43:43 2026 GMT
Not After : Jul 17 12:43:43 2026 GMT
Subject: CN=6a295c05-3329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:63:db:c8:4e:af:f1:24:4b:0f:f5:69:f6:
29:83:2d:d8:5b:c8:29:08:2a:20:fa:84:52:bf:40:
97:db:e4:54:ee:8b:74:80:34:4e:00:69:0f:65:f7:
f6:08:ef:7c:b9:df:6b:61:e3:c2:13:b7:6e:02:7e:
09:3b:34:3a:63:c7:98:bd:64:43:d7:ee:7c:d6:d7:
5a:4a:76:9d:e6:03:bf:3a:81:26:d9:7f:65:a5:ca:
b9:8e:e3:c3:87:f2:48:b4:cb:97:49:1b:d1:07:22:
45:ea:91:e1:69:5f:d4:82:0c:54:70:70:34:1d:6f:
72:f0:3d:12:3b:b9:b5:b4:08:b1:fa:65:a9:14:2f:
fa:ce:d3:39:2e:a5:6f:7d:f3:f1:3b:29:29:e7:3d:
9e:ae:9b:08:56:f2:b9:56:c6:07:16:73:f1:5c:97:
5c:2f:6a:dd:60:88:24:38:fd:40:86:be:e9:2f:59:
1e:ea:69:5a:0d:ba:8d:d7:16:4c:ee:0a:60:39:f2:
24:ce:6d:49:a7:66:1c:2e:e2:63:38:7a:cb:6f:47:
a6:9f:1f:16:f5:29:b7:81:35:ce:7e:f3:b2:95:51:
26:ec:8a:95:ed:ea:d0:8b:74:9c:66:2d:77:18:70:
d6:a5:a2:71:d6:45:9f:2e:e3:e8:c1:80:bf:54:de:
5a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F6:10:57:FD:6D:2C:2E:1B:F3:7A:A9:5A:53:46:56:4A:31:3D:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06C30AE664CA11F19DAB5ECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.41.0/24
156.242.2.0/23
156.242.20.0-156.242.22.255
156.242.24.0/23
156.243.35.0-156.243.37.255
156.243.82.0/24
156.243.84.0/24
156.243.96.0/22
156.243.130.0/24
156.244.144.0/20
156.248.104.0/21
156.249.0.0/24
156.249.4.0/22
156.249.16.0/24
156.249.20.0/22
156.249.48.0/21
156.249.121.0-156.249.123.255
Signature Algorithm: sha256WithRSAEncryption
a0:ee:b8:71:45:6a:2c:b7:68:e9:a0:8b:f3:15:b4:76:09:f1:
de:10:ac:7f:ce:ad:76:ff:61:2a:05:5b:e3:9f:2e:fb:d3:87:
74:c2:dc:71:21:ea:f2:9c:9b:07:d5:0b:15:0a:7f:50:fd:f9:
fb:e5:30:00:5e:e3:e5:51:e6:e6:fe:23:56:99:5f:0a:d7:ed:
53:eb:02:6e:f7:ae:5c:d1:bc:77:05:a9:21:2d:88:3d:52:2c:
c3:ff:39:02:d2:02:5d:8e:0b:38:07:01:74:a2:ec:56:ab:59:
6d:9d:4f:38:ae:bb:85:c1:49:0d:55:30:98:d4:9a:a4:e6:dc:
9a:f9:ef:00:10:2c:45:aa:de:ec:88:dd:8b:b8:cd:9c:59:af:
6d:98:3d:dc:11:ae:26:0a:fe:ec:f0:97:bd:5d:ba:88:fe:2c:
e4:d1:30:6e:62:45:ce:ce:a9:08:16:31:e3:c9:a4:f3:62:e5:
1f:47:21:eb:ec:fb:41:59:a9:d6:63:78:61:13:10:51:8a:a0:
d1:01:b2:d2:5f:7c:11:80:fc:dc:6f:da:ce:68:4c:90:d8:11:
35:5b:6b:0b:81:60:f9:8a:6b:7c:8b:77:0d:66:d9:6f:6c:39:
d6:01:d4:52:cd:5a:06:b5:53:31:03:95:14:5c:d5:ae:6b:fe:
e5:9c:46:d6
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgIDAbzMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMTI0MzQzWhcNMjYwNzE3MTI0MzQzWjAYMRYw
FAYDVQQDEw02YTI5NWMwNS0zMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq+Fj28hOr/EkSw/1afYpgy3YW8gpCCog+oRSv0CX2+RU7ot0gDROAGkP
Zff2CO98ud9rYePCE7duAn4JOzQ6Y8eYvWRD1+581tdaSnad5gO/OoEm2X9lpcq5
juPDh/JItMuXSRvRByJF6pHhaV/UggxUcHA0HW9y8D0SO7m1tAix+mWpFC/6ztM5
LqVvffPxOykp5z2erpsIVvK5VsYHFnPxXJdcL2rdYIgkOP1Ahr7pL1ke6mlaDbqN
1xZM7gpgOfIkzm1Jp2YcLuJjOHrLb0emnx8W9Sm3gTXOfvOylVEm7IqV7erQi3Sc
Zi13GHDWpaJx1kWfLuPowYC/VN5alwIDAQABo4IDHjCCAxowHQYDVR0OBBYEFL72
EFf9bSwuG/N6qVpTRlZKMT0jMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNkMzMEFFNjY0Q0ExMUYxOURBQjVFQ0JDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGaBggrBgEFBQcBBwEB/wSBijCBhzCBhAQCAAEwfgMEAJzxKQMEAZzyAjAMAwQC
nPIUAwQAnPIWAwQBnPIYMAwDBACc8yMDBAGc8yQDBACc81IDBACc81QDBAKc82AD
BACc84IDBASc9JADBAOc+GgDBACc+QADBAKc+QQDBACc+RADBAKc+RQDBAOc+TAw
DAMEAJz5eQMEApz5eDANBgkqhkiG9w0BAQsFAAOCAQEAoO64cUVqLLdo6aCL8xW0
dgnx3hCsf86tdv9hKgVb458u+9OHdMLccSHq8pybB9ULFQp/UP35++UwAF7j5VHm
5v4jVplfCtftU+sCbveuXNG8dwWpIS2IPVIsw/85AtICXY4LOAcBdKLsVqtZbZ1P
OK67hcFJDVUwmNSapObcmvnvABAsRare7Ijdi7jNnFmvbZg93BGuJgr+7PCXvV26
iP4s5NEwbmJFzs6pCBYx48mk82LlH0ch6+z7QVmp1mN4YRMQUYqg0QGy0l98EYD8
3G/azmhMkNgRNVtrC4Fg+YprfIt3DWbZb2w51gHUUs1aBrVTMQOVFFzVrmv+5ZxG
1g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:12 2026 by rpki-client