Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266D0E90370D11F1922186ADCE1D38B0.roa
File: 266D0E90370D11F1922186ADCE1D38B0.roa (raw, json)
Hash identifier: +6c+jE+USug80YYb0Ya1lByXAJU+CIIpMugz7BQksZc=
Subject key identifier: B8:95:91:83:AB:94:9F:23:C4:DD:C3:1E:CD:F0:2B:8A:30:1F:BB:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266D0E90370D11F1922186ADCE1D38B0.roa
Signing time: Mon 13 Apr 2026 07:48:25 +0000
ROA not before: Mon 13 Apr 2026 07:48:20 +0000
ROA not after: Sat 16 May 2026 07:48:20 +0000
asID: 22773
IP address blocks: 156.233.253.0/24 maxlen: 24
156.233.254.0/24 maxlen: 24
156.233.255.0/24 maxlen: 24
156.238.136.0/24 maxlen: 24
156.238.137.0/24 maxlen: 24
156.238.138.0/24 maxlen: 24
156.238.139.0/24 maxlen: 24
156.238.140.0/24 maxlen: 24
156.238.141.0/24 maxlen: 24
156.238.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109636 (0x1ac44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 07:48:20 2026 GMT
Not After : May 16 07:48:20 2026 GMT
Subject: CN=69dc9fc9-c0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b9:bd:55:31:ec:b1:48:19:71:b3:05:17:30:
85:a3:66:bb:44:16:2f:d0:5c:37:79:1a:68:6c:67:
60:72:c4:40:cc:f3:3b:bc:33:0b:d8:fc:f4:08:68:
0e:10:3f:c4:2a:3e:15:66:10:78:2a:b1:c1:da:f4:
7b:44:33:7d:19:bd:b0:67:ee:ff:e9:21:dd:d3:7f:
27:2e:e3:62:2e:2b:dd:49:0f:ab:14:fe:15:c7:f2:
42:df:5e:4e:bc:f4:11:10:0b:5e:fc:e3:c8:da:35:
49:7b:34:c9:cc:d5:cb:c7:43:09:cd:53:90:84:c6:
cb:5c:33:1a:ac:72:e2:3e:59:f7:36:c9:8e:09:18:
b7:d9:b7:36:ac:2d:11:77:39:6a:9c:38:87:54:76:
19:32:39:ad:75:b1:a3:a1:31:aa:4b:19:d8:82:4b:
46:b6:6c:95:5b:13:ec:d9:11:e9:56:e4:8d:05:b4:
70:19:9b:44:dd:e9:25:a2:01:fe:13:62:ea:70:8d:
cb:95:02:00:20:44:c4:02:32:0f:fb:c6:4b:e7:b1:
9a:dc:de:43:d7:ac:ec:5c:18:c6:3d:23:70:a1:1e:
67:40:da:de:cb:22:00:fa:3f:82:fd:6b:fa:7b:5a:
d3:b4:f8:4f:ff:d3:78:27:0f:e1:90:b7:7a:e3:cc:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:91:83:AB:94:9F:23:C4:DD:C3:1E:CD:F0:2B:8A:30:1F:BB:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/266D0E90370D11F1922186ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.253.0-156.233.255.255
156.238.136.0-156.238.141.255
156.238.144.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:92:1e:07:d4:0d:60:49:34:17:98:3f:00:4d:51:45:b4:c4:
68:a9:32:2b:5e:2d:a9:56:52:5b:d8:36:bd:65:20:c7:3b:5f:
d7:36:37:2b:bd:47:22:25:fa:52:a7:8a:69:fa:57:df:dd:a9:
8e:f2:c4:88:4f:58:0d:86:33:b0:da:05:30:6f:7c:d4:83:79:
ab:4d:fa:38:42:a5:50:39:84:ef:43:0b:31:c3:37:32:b1:59:
08:4a:80:17:94:10:7c:74:09:3c:ed:bf:f3:37:a5:10:b6:a9:
7e:a7:86:3a:83:f0:6a:58:59:49:d4:64:2a:46:27:3a:de:91:
31:62:6c:b2:64:17:23:21:ef:65:1e:3b:01:6d:3c:9b:3e:52:
b6:72:f9:cf:35:51:9b:ed:b8:b4:f2:de:a0:19:4f:70:35:c2:
f4:0d:9b:91:13:d9:e9:79:e0:56:19:ac:d5:9c:41:b1:82:e4:
54:c4:54:b2:2c:e4:9b:ba:22:88:7e:a2:b7:bf:fa:96:0d:6d:
cd:32:c7:94:20:ee:11:92:22:72:41:10:ab:05:a9:83:78:a8:
87:14:ed:5a:c4:9c:c6:47:56:c2:0a:45:48:2d:c9:7f:03:95:
ef:2b:77:c6:d1:17:89:18:49:3d:5b:34:6a:4f:9b:5d:66:71:
11:03:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:43:16 2026 by rpki-client