Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF56F04118011F1A30CAF9EDAE4EC9C.roa
File: 0DF56F04118011F1A30CAF9EDAE4EC9C.roa (raw, json)
Hash identifier: mPb+u/YqIrwvXNtirh0Q8/dBdkDIV6XDYtj7uQQH0Hk=
Subject key identifier: E7:F5:2B:20:E1:6C:C1:E1:2E:E8:FD:09:2B:FC:AB:E0:24:86:FA:21
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A015
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF56F04118011F1A30CAF9EDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 12:55:11 +0000
ROA not before: Tue 24 Feb 2026 12:55:07 +0000
ROA not after: Tue 31 Mar 2026 12:55:07 +0000
asID: 44559
IP address blocks: 156.239.19.0/24 maxlen: 24
156.239.20.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.239.133.0/24 maxlen: 24
156.239.135.0/24 maxlen: 24
156.243.228.0/24 maxlen: 24
156.243.242.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.249.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106517 (0x1a015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 12:55:07 2026 GMT
Not After : Mar 31 12:55:07 2026 GMT
Subject: CN=699d9faf-a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:dc:c5:93:19:1f:75:4b:92:61:f8:fe:0b:
28:24:0d:28:a2:6f:dc:11:62:e3:df:24:b1:5a:14:
f9:fd:fb:24:b7:4b:3b:0c:ae:12:b9:04:9c:16:14:
31:03:57:63:01:07:cd:54:91:a6:10:9d:69:c3:3e:
af:26:7b:3b:22:cd:4d:5a:12:01:6c:db:93:08:8e:
b7:9d:20:2f:e2:2a:3b:11:22:69:03:5c:8a:96:01:
a7:5f:70:1a:bb:38:60:98:af:29:1a:13:15:2b:07:
43:ab:00:11:69:4c:25:b0:83:6e:02:df:36:54:9f:
3c:2c:73:89:90:ae:7d:97:ef:29:17:72:a5:c6:b5:
e2:ca:42:06:51:b4:87:4b:6a:93:59:9f:80:11:ea:
fc:43:f8:41:f7:75:c5:28:6b:90:7e:93:0e:54:fc:
a6:a8:66:09:8d:3e:41:86:32:d1:5c:f4:a9:41:a8:
12:14:bd:87:8a:0d:0d:a5:81:fa:00:a5:92:a3:fa:
fb:01:20:25:6d:f6:bb:80:aa:c5:dd:41:e3:ac:57:
a1:37:6a:b2:cf:c6:0f:60:f5:57:4b:e2:4b:68:f1:
e9:a2:d2:61:b7:a8:0e:7d:d1:74:4f:32:e1:51:d6:
b7:74:27:3d:2e:18:e9:45:e9:6a:2c:06:a1:84:10:
e8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F5:2B:20:E1:6C:C1:E1:2E:E8:FD:09:2B:FC:AB:E0:24:86:FA:21
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF56F04118011F1A30CAF9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0-156.239.20.255
156.239.132.0/23
156.239.135.0/24
156.243.228.0/24
156.243.242.0/23
156.243.248.0/24
156.249.102.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ea:ba:98:90:d8:92:7e:65:7b:af:b4:84:dc:1c:8a:50:26:
24:c6:ce:ee:68:ee:80:43:17:2d:e6:69:9b:bc:a2:fa:24:17:
29:15:eb:07:e4:e1:bf:ef:34:f9:e4:51:b4:67:99:b6:94:82:
76:58:0d:6e:53:7d:d7:f4:17:6e:9b:85:af:95:6d:a7:04:14:
1f:f6:86:55:23:26:f8:a2:66:f8:9f:d1:e2:57:6b:42:7e:8a:
0a:f7:99:11:57:e6:ce:40:60:c9:c2:b3:2e:27:36:38:c5:d9:
bc:8b:57:ef:e7:8f:d0:4e:d8:50:9d:b0:3b:b1:74:f1:4c:0e:
83:a4:ab:92:b8:da:74:f1:be:5e:d9:47:45:d0:74:82:a7:48:
40:c2:c2:b3:3f:a4:e4:b3:84:3e:3f:20:ff:2a:0a:70:42:6a:
6f:d4:db:e2:68:96:d8:ee:ec:70:a2:59:77:bb:35:a3:cd:51:
8b:dd:51:67:1e:ad:0b:ee:83:76:ac:6b:29:e2:36:4b:56:42:
ed:e7:cd:64:54:69:f3:7e:02:e2:05:9f:89:14:70:0a:10:33:
b5:61:9f:85:b0:ba:22:1a:6c:c8:32:c1:56:89:a8:99:4a:bb:
6e:fb:a6:47:dc:d5:20:35:24:1b:c2:fa:0b:4b:4b:6d:d8:88:
b3:e2:f0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:36 2026 by rpki-client