Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2990CDFA899211F19E7FFFD4CE1D38B0.roa
File: 2990CDFA899211F19E7FFFD4CE1D38B0.roa (raw, json)
Hash identifier: idmCqE/Meg9UMEv2qtwQYbThZ7Gb/z5HvHGrdCZwQro=
Subject key identifier: 83:48:0A:34:7B:F6:44:4C:74:44:BE:22:39:42:45:BD:5A:AB:4E:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C825
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2990CDFA899211F19E7FFFD4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:07:08 +0000
ROA not before: Mon 27 Jul 2026 08:07:04 +0000
ROA not after: Tue 25 Aug 2026 08:07:04 +0000
asID: 271355
IP address blocks: 156.236.214.0/24 maxlen: 24
156.236.215.0/24 maxlen: 24
156.236.216.0/24 maxlen: 24
156.236.217.0/24 maxlen: 24
156.236.218.0/24 maxlen: 24
156.236.219.0/24 maxlen: 24
156.236.220.0/24 maxlen: 24
156.236.221.0/24 maxlen: 24
156.236.222.0/24 maxlen: 24
156.236.223.0/24 maxlen: 24
156.236.239.0/24 maxlen: 24
156.236.240.0/24 maxlen: 24
156.236.241.0/24 maxlen: 24
156.236.242.0/24 maxlen: 24
156.236.243.0/24 maxlen: 24
156.236.244.0/24 maxlen: 24
156.236.245.0/24 maxlen: 24
156.236.246.0/24 maxlen: 24
156.236.247.0/24 maxlen: 24
156.236.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116773 (0x1c825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 27 08:07:04 2026 GMT
Not After : Aug 25 08:07:04 2026 GMT
Subject: CN=6a6711ac-c1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f7:28:9b:d5:b2:c9:df:1f:45:3a:78:91:b3:
28:d2:c6:1d:99:0b:d9:0c:04:41:7f:20:6a:a8:ed:
af:b3:72:bc:fc:e0:d6:91:c0:ed:8f:4a:15:03:ee:
b8:76:50:ba:39:fb:a8:6d:21:f1:51:a6:b3:cb:e1:
e5:c3:08:1e:86:e4:ee:05:db:ff:2d:45:30:37:50:
3d:d1:e6:8e:c5:c1:1d:b8:e0:93:49:b6:74:04:ff:
65:08:d4:97:e9:14:41:2c:e5:c9:0b:e5:eb:bd:35:
1a:38:2e:1e:44:cb:d3:89:72:f1:cf:68:f0:f1:4a:
b9:54:cd:af:e4:20:0d:e4:dd:72:8b:20:e9:d7:1b:
9f:42:16:df:8f:f3:ac:8d:f5:4d:bf:20:10:f2:dc:
25:74:19:bd:1a:a1:ae:52:be:df:29:b2:e6:f4:e2:
0e:2c:4d:04:c1:9a:7a:c5:2a:aa:94:af:ad:e9:1f:
16:90:b2:01:ad:d4:b2:91:f9:53:ab:f2:cc:be:a2:
ae:9f:92:d4:04:a7:e5:1d:41:17:29:eb:5a:99:45:
70:7e:b1:b5:7e:cd:d9:75:6f:74:07:13:68:24:03:
c1:20:32:8b:05:8d:b2:ac:08:6e:cf:8e:0c:31:89:
e1:46:7c:c1:fb:32:ec:fd:fe:2b:13:94:2a:43:11:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:0A:34:7B:F6:44:4C:74:44:BE:22:39:42:45:BD:5A:AB:4E:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2990CDFA899211F19E7FFFD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.214.0-156.236.223.255
156.236.239.0-156.236.248.255
Signature Algorithm: sha256WithRSAEncryption
9e:36:47:2e:26:4e:33:c2:57:68:b8:9a:20:1b:2c:8f:49:c0:
f7:04:10:b7:59:a6:14:37:56:9f:66:b5:ca:79:75:6f:3e:04:
13:0d:48:f5:76:2a:0e:a5:c9:6e:1e:f2:8a:6e:5f:fe:1c:25:
55:b2:a9:5c:2e:bb:5d:a8:2c:51:0e:b0:80:89:36:20:c7:62:
ef:04:87:60:c4:81:10:9f:14:8f:0c:ed:14:e7:99:d5:23:35:
21:28:17:78:1e:3f:a1:1e:5a:32:c8:36:af:13:3a:28:40:97:
af:ef:01:49:c6:ec:48:cc:a6:ee:ea:82:d1:7c:d8:54:7e:0c:
bb:72:1f:c3:e2:db:b5:a3:2b:a8:89:99:b9:12:ce:fc:d8:01:
de:ab:03:67:ef:76:10:83:c2:a3:5d:a9:96:6e:67:8e:db:f8:
d2:df:6d:d9:1c:d5:5c:7d:b0:7d:eb:d3:0f:3e:22:82:85:f3:
d5:30:04:43:5a:39:e6:df:dd:ae:4e:68:82:84:6d:2d:3a:63:
21:03:ce:39:62:71:9c:30:8c:20:ae:a8:28:f6:b9:8f:c5:c9:
39:39:b3:95:dd:1e:b6:52:29:af:17:7e:77:9c:9a:43:85:76:
35:ae:5e:7d:4d:d0:b9:a9:ac:ee:73:fd:16:6e:25:e1:56:90:
6f:5d:b9:dd
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAcglMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI3MDgwNzA0WhcNMjYwODI1MDgwNzA0WjAYMRYw
FAYDVQQDEw02YTY3MTFhYy1jMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7vcom9Wyyd8fRTp4kbMo0sYdmQvZDARBfyBqqO2vs3K8/ODWkcDtj0oV
A+64dlC6OfuobSHxUaazy+HlwwgehuTuBdv/LUUwN1A90eaOxcEduOCTSbZ0BP9l
CNSX6RRBLOXJC+XrvTUaOC4eRMvTiXLxz2jw8Uq5VM2v5CAN5N1yiyDp1xufQhbf
j/OsjfVNvyAQ8twldBm9GqGuUr7fKbLm9OIOLE0EwZp6xSqqlK+t6R8WkLIBrdSy
kflTq/LMvqKun5LUBKflHUEXKetamUVwfrG1fs3ZdW90BxNoJAPBIDKLBY2yrAhu
z44MMYnhRnzB+zLs/f4rE5QqQxGCqwIDAQABo4ICuDCCArQwHQYDVR0OBBYEFINI
CjR79kRMdES+IjlCRb1aq07iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOTkwQ0RGQTg5OTIxMUYxOUU3RkZGRDRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGc7NYDBAWc7MAwDAMEAJzs
7wMEAJzs+DANBgkqhkiG9w0BAQsFAAOCAQEAnjZHLiZOM8JXaLiaIBssj0nA9wQQ
t1mmFDdWn2a1ynl1bz4EEw1I9XYqDqXJbh7yim5f/hwlVbKpXC67XagsUQ6wgIk2
IMdi7wSHYMSBEJ8UjwztFOeZ1SM1ISgXeB4/oR5aMsg2rxM6KECXr+8BScbsSMym
7uqC0XzYVH4Mu3Ifw+LbtaMrqImZuRLO/NgB3qsDZ+92EIPCo12plm5njtv40t9t
2RzVXH2wfevTDz4igoXz1TAEQ1o55t/drk5ogoRtLTpjIQPOOWJxnDCMIK6oKPa5
j8XJOTmzld0etlIprxd+d5yaQ4V2Na5efU3Quams7nP9Fm4l4VaQb1253Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:22 2026 by rpki-client