
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DA277E359111F193364315CF1D38B0.roa
File: 39DA277E359111F193364315CF1D38B0.roa (raw, json)
Hash identifier: eMisZxVl2smr6gZdemXWd48Hg1k/3CqyMp9kHdYsSfo=
Subject key identifier: E6:F7:C6:5E:05:30:0E:18:2D:FA:E2:74:52:DC:43:F7:AC:C0:95:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DA277E359111F193364315CF1D38B0.roa
Signing time: Sat 11 Apr 2026 10:28:48 +0000
ROA not before: Sat 11 Apr 2026 10:28:44 +0000
ROA not after: Fri 22 May 2026 10:28:44 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109576 (0x1ac08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 10:28:44 2026 GMT
Not After : May 22 10:28:44 2026 GMT
Subject: CN=69da2260-d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:f9:17:21:da:ab:68:b9:7b:eb:5b:69:37:
e8:ae:16:67:16:5c:9b:d5:6f:eb:71:8d:eb:87:29:
54:f7:e7:08:26:b2:eb:2b:0b:70:25:fe:b7:e2:d0:
9e:9b:fd:fc:5e:3e:f8:d3:b5:7a:1b:89:35:91:c5:
78:5b:05:0b:63:fa:3e:53:fe:d7:14:9d:54:f0:73:
17:1b:4d:85:bb:e0:5e:5b:d4:e0:7b:43:7f:13:3c:
55:6f:23:e1:67:a3:5d:9c:e9:06:4e:47:02:fa:a7:
87:da:89:81:5c:fa:a7:ef:61:8c:70:c4:f0:f1:00:
16:b7:45:77:0b:48:ed:65:d9:10:79:c1:95:c3:94:
b6:70:22:3b:a5:a6:ee:d3:67:4f:11:6c:15:46:4b:
c6:74:77:39:98:8b:9b:1e:04:fc:3c:54:2b:79:82:
10:6d:17:9e:3a:59:d0:01:1f:c3:27:4e:2a:fe:7e:
43:f8:f7:3b:d1:0f:36:0e:c2:dc:71:a3:bc:10:59:
71:72:7e:1f:a1:bb:0f:a7:ff:87:c0:d6:f1:22:e9:
b3:ff:c2:4c:85:f7:ec:71:90:97:57:20:4d:f3:28:
72:ec:a8:28:c1:8c:25:d6:c3:29:f0:50:c5:fd:09:
b4:da:8f:5f:63:56:0b:a1:be:91:e7:a1:a0:f1:b2:
82:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:C6:5E:05:30:0E:18:2D:FA:E2:74:52:DC:43:F7:AC:C0:95:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39DA277E359111F193364315CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:46:cb:d1:1b:e4:15:b9:05:15:2c:b2:13:c9:cf:6f:16:7e:
2b:b3:f7:2f:89:7b:44:59:72:2d:d2:3d:e7:92:4b:12:7b:f0:
f5:85:2f:0c:35:cc:e2:bd:1e:e1:1e:48:e8:78:69:f1:05:b9:
e3:e3:98:1f:25:f0:de:a1:5c:2f:7d:6a:08:5f:d9:b9:20:0c:
9d:7b:31:93:67:d7:49:61:e4:63:0e:04:4d:5e:29:98:22:5f:
3d:4d:da:e3:47:c5:72:bc:38:b1:01:12:84:92:d5:51:cf:e1:
59:ba:75:5a:9f:a3:43:40:cb:1a:04:d0:b4:66:fd:90:33:30:
88:68:57:e0:66:97:6f:55:a3:c2:7a:e1:a8:c9:3a:a3:f9:b2:
e6:9e:99:3c:d3:d5:14:de:95:4b:07:dd:8c:94:10:31:d2:09:
04:49:ae:f2:41:49:de:3a:3a:ba:cb:ac:f9:25:7f:b0:7b:3c:
fd:cd:bc:d6:60:b2:cd:9d:55:21:ad:31:3a:c1:f7:05:97:f9:
77:8f:80:20:d5:2a:5a:1d:96:6d:f0:59:a0:c4:c4:c7:5c:d8:
f9:e9:e0:7f:0b:b6:30:50:7f:0d:96:5d:e5:fa:ea:8a:e7:39:
67:94:59:83:29:99:ba:9d:da:ed:42:a2:e6:05:ff:68:a9:3b:
e2:fc:cb:fb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAawIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDExMTAyODQ0WhcNMjYwNTIyMTAyODQ0WjAYMRYw
FAYDVQQDEw02OWRhMjI2MC1kOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mj5FyHaq2i5e+tbaTforhZnFlyb1W/rcY3rhylU9+cIJrLrKwtwJf63
4tCem/38Xj7407V6G4k1kcV4WwULY/o+U/7XFJ1U8HMXG02Fu+BeW9Tge0N/EzxV
byPhZ6NdnOkGTkcC+qeH2omBXPqn72GMcMTw8QAWt0V3C0jtZdkQecGVw5S2cCI7
pabu02dPEWwVRkvGdHc5mIubHgT8PFQreYIQbReeOlnQAR/DJ04q/n5D+Pc70Q82
DsLccaO8EFlxcn4fobsPp/+HwNbxIumz/8JMhffscZCXVyBN8yhy7KgowYwl1sMp
8FDF/Qm02o9fY1YLob6R56Gg8bKCIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOb3
xl4FMA4YLfridFLcQ/eswJU4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOURBMjc3RTM1OTExMUYxOTMzNjQzMTVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFEMA0GCSqGSIb3DQEBCwUA
A4IBAQA/RsvRG+QVuQUVLLITyc9vFn4rs/cviXtEWXIt0j3nkksSe/D1hS8MNczi
vR7hHkjoeGnxBbnj45gfJfDeoVwvfWoIX9m5IAydezGTZ9dJYeRjDgRNXimYIl89
TdrjR8VyvDixARKEktVRz+FZunVan6NDQMsaBNC0Zv2QMzCIaFfgZpdvVaPCeuGo
yTqj+bLmnpk809UU3pVLB92MlBAx0gkESa7yQUneOjq6y6z5JX+wezz9zbzWYLLN
nVUhrTE6wfcFl/l3j4Ag1SpaHZZt8FmgxMTHXNj56eB/C7YwUH8Nll3l+uqK5zln
lFmDKZm6ndrtQqLmBf9oqTvi/Mv7
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:19 2026 by rpki-client