Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C93DED8123911F1A3E86794DAE4EC9C.roa
File: 1C93DED8123911F1A3E86794DAE4EC9C.roa (raw, json)
Hash identifier: qxpM2be06/d6hIsJVfLx10K/SCs/sNtAqCjJTjozGac=
Subject key identifier: 71:EB:6D:CD:BD:EE:1A:F6:AE:2B:12:34:D2:E0:9F:A6:36:AD:CF:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A07C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C93DED8123911F1A3E86794DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:59:53 +0000
ROA not before: Wed 25 Feb 2026 10:59:49 +0000
ROA not after: Wed 04 Mar 2026 10:59:49 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106620 (0x1a07c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 10:59:49 2026 GMT
Not After : Mar 4 10:59:49 2026 GMT
Subject: CN=699ed629-bf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:08:e0:9f:69:7d:0e:1e:72:ca:0b:ca:f5:
85:0f:4a:46:2b:5f:7f:16:cd:e3:0c:b2:15:5e:71:
c0:fc:70:82:08:4e:d9:03:b3:e5:9d:56:f1:8f:13:
80:4a:bc:be:97:36:0a:f7:51:ad:84:7d:86:37:b7:
b1:86:91:b0:01:a2:5d:d5:47:7f:01:b6:84:19:37:
00:15:d1:36:ce:98:f9:6c:fb:7e:4c:57:50:7f:ac:
2c:f4:6b:48:fb:19:89:e5:42:88:ce:40:1a:fc:b4:
d1:e6:ca:de:a1:39:c0:e4:be:d8:55:e8:e6:86:2a:
5a:55:e2:6e:c3:46:64:cd:84:e4:16:df:88:d2:96:
79:7f:4c:d7:f8:68:e7:0d:87:f7:00:99:10:85:d9:
62:cc:bf:95:5b:ee:c1:c2:ab:4d:10:b4:3e:e1:1a:
57:25:f7:b1:ac:c9:4f:f9:e8:d0:9f:27:39:76:80:
2e:e3:e4:bd:76:cc:b8:ef:7f:14:95:67:c3:67:1a:
2e:6b:32:c2:7c:30:de:38:50:da:03:c9:4d:fd:68:
83:4d:08:82:22:b6:80:2a:51:9f:66:88:ed:d5:3e:
f9:dd:36:c7:23:33:11:3c:44:73:00:4a:36:de:b4:
b6:ef:38:b8:05:c9:39:f3:48:cb:ca:01:f9:d9:6a:
d4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:6D:CD:BD:EE:1A:F6:AE:2B:12:34:D2:E0:9F:A6:36:AD:CF:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C93DED8123911F1A3E86794DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
18:c1:79:0b:95:e6:5f:9b:c6:76:fc:7f:f6:a5:a6:47:ea:39:
d1:38:15:d1:27:2f:db:8c:a6:89:5d:ca:8f:95:38:d3:53:1e:
a3:ce:38:6b:10:d4:e2:bc:e8:18:49:29:27:25:44:ca:48:84:
ab:e8:fb:7a:60:07:0a:6f:cc:4d:50:f7:87:13:d8:db:1f:9c:
67:50:ea:2e:ad:2b:0b:4e:cb:df:4c:ea:10:30:2e:f5:0d:77:
64:ae:92:6c:8f:c3:56:5a:6f:54:0b:b5:ab:91:7c:19:64:97:
d5:1e:c7:c8:db:a5:34:d3:6d:c0:95:69:e9:ee:c2:7c:61:e2:
2e:4a:4e:90:d8:21:5c:5d:1b:01:73:8b:ff:61:f2:cd:12:6d:
2c:c1:f4:25:1a:52:2c:07:8a:b5:10:bf:de:70:69:82:90:07:
90:66:61:4b:56:76:11:11:48:0c:62:41:74:04:91:02:db:27:
09:82:ff:6f:59:56:7c:67:33:2f:55:4d:d0:c2:20:76:f9:71:
50:36:b9:8b:00:93:34:76:94:a8:f5:bd:90:69:41:cb:ae:30:
e9:e2:f1:11:36:e1:e8:35:b5:f2:65:3e:32:cd:4d:bd:19:1b:
28:c5:89:38:1e:85:76:ea:8e:14:37:76:32:dc:d8:e8:9e:16:
71:a1:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:29 2026 by rpki-client