Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30BA0231A211F181F5EBDFDAE4EC9C.roa
File: 0B30BA0231A211F181F5EBDFDAE4EC9C.roa (raw, json)
Hash identifier: EfJ+kg3Eecfy1v32sEi29FxC+abB7EJZlAyDiVk+80Q=
Subject key identifier: 4C:2C:CA:3B:23:92:84:79:39:20:D3:4A:3C:D4:F5:B7:32:69:C4:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30BA0231A211F181F5EBDFDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 10:19:07 +0000
ROA not before: Mon 06 Apr 2026 10:19:02 +0000
ROA not after: Fri 17 Jul 2026 10:19:02 +0000
asID: 398478
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109192 (0x1aa88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 10:19:02 2026 GMT
Not After : Jul 17 10:19:02 2026 GMT
Subject: CN=69d3889b-bfde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:c8:9c:97:94:1f:4a:dc:7f:08:07:45:cd:
3a:ca:51:a0:b3:2a:ce:57:ec:31:fe:36:01:f6:ca:
0c:6d:91:30:01:7c:5a:b3:3c:27:ad:1f:91:a4:17:
1d:9f:75:95:7a:06:3f:61:c7:09:ce:0b:c2:ca:e1:
23:cc:3a:df:48:cd:73:0b:c6:4e:78:1d:53:d8:e9:
19:02:e6:2c:e5:3a:0b:35:30:e8:1e:d4:1a:00:ff:
22:cc:2b:9c:d0:e6:f4:86:59:21:58:88:7a:04:72:
a6:80:7e:f2:7b:b1:66:55:c2:fd:d6:0e:d6:d7:4b:
4e:a5:27:25:d7:48:a0:9c:05:6c:4a:46:e8:41:95:
5b:df:77:44:e1:6e:4e:95:68:51:5f:97:45:9d:b8:
1a:62:f8:5b:7b:7d:ce:68:5e:29:eb:b0:04:83:6a:
a4:d8:d9:a6:d1:aa:e6:fd:c1:80:0d:af:c3:eb:8a:
17:eb:e1:4c:18:66:39:9b:ab:03:57:6a:fe:79:d2:
20:39:0d:4e:a6:cd:24:29:c5:86:b4:74:87:e0:b4:
fb:2a:42:79:4c:e8:b8:4c:43:df:9b:f0:05:79:8e:
3a:3f:9d:81:30:33:d4:bc:df:b8:5e:41:43:af:57:
36:4b:b6:3b:90:83:ce:76:38:8c:36:e3:54:34:6d:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2C:CA:3B:23:92:84:79:39:20:D3:4A:3C:D4:F5:B7:32:69:C4:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B30BA0231A211F181F5EBDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0/20
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
26:47:cb:f1:58:17:cb:9e:60:95:c3:9a:9c:2d:83:90:01:a3:
fd:64:9e:c8:62:45:87:b2:3c:95:48:6a:7e:57:de:c0:7d:78:
cb:e7:01:06:2b:0d:ec:c1:bd:6d:ac:08:ec:a2:f2:e6:14:ef:
78:10:08:9c:30:a9:a6:9b:28:94:10:6c:17:3b:0d:d7:13:ec:
f6:a7:15:16:0f:03:e8:be:99:93:f8:4a:f7:cf:14:e3:10:e8:
db:c7:99:d7:ce:36:a6:75:e5:3b:f4:39:94:9f:2b:22:f0:a5:
df:6b:e6:5c:c5:31:fa:68:c0:7d:4a:f9:c2:ba:b8:73:e6:d8:
39:a0:fe:17:2e:2c:75:bb:cb:72:38:ad:de:88:f3:3e:f8:0a:
82:84:1a:95:f7:56:cf:d2:f0:d4:5e:6c:58:46:7d:01:b3:77:
fc:99:7c:0b:d5:d4:64:73:54:6e:1a:55:4b:da:22:bb:95:6a:
ba:da:1f:9e:e1:38:23:c6:3e:85:48:dd:e2:d3:5a:6e:0f:f3:
4e:df:00:9e:81:2d:d7:ff:cd:8c:02:d3:03:94:f7:11:b9:3e:
2e:15:e5:bb:0e:ef:1a:51:27:d2:80:45:19:1f:df:33:17:70:
40:8a:a7:46:9b:d3:53:ce:a7:fa:ad:69:a5:d4:91:cc:2b:5c:
30:ed:15:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:06 2026 by rpki-client