Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CF828371411F1863671D6CE1D38B0.roa
File: 409CF828371411F1863671D6CE1D38B0.roa (raw, json)
Hash identifier: Zmnd6g7qQj2jJnhDRFlqFdTjkhFwA8JDtizZBWyDlZM=
Subject key identifier: D1:17:FA:60:23:22:86:85:34:76:AD:0D:BA:1B:3F:E8:28:82:6B:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CF828371411F1863671D6CE1D38B0.roa
Signing time: Mon 13 Apr 2026 08:39:15 +0000
ROA not before: Mon 13 Apr 2026 08:39:09 +0000
ROA not after: Sat 16 May 2026 08:39:09 +0000
asID: 22773
IP address blocks: 156.238.169.0/24 maxlen: 24
156.238.170.0/24 maxlen: 24
156.238.171.0/24 maxlen: 24
156.239.149.0/24 maxlen: 24
156.239.150.0/24 maxlen: 24
156.239.151.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
156.239.153.0/24 maxlen: 24
156.243.48.0/20 maxlen: 24
156.243.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109652 (0x1ac54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 08:39:09 2026 GMT
Not After : May 16 08:39:09 2026 GMT
Subject: CN=69dcabb3-de2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:53:08:3c:11:91:c1:b6:89:3c:d8:fa:5f:
ec:3c:3d:a7:b3:f1:c8:11:51:27:5a:3e:65:bb:38:
3b:b0:df:d8:81:5f:aa:aa:de:5b:2f:f4:15:b3:9a:
c1:b8:5d:94:ed:c9:f7:3a:6a:c7:c8:4e:b9:5d:63:
03:ab:7c:08:ae:73:2f:23:67:0c:a6:1e:d7:4a:98:
61:86:ea:4d:b3:20:1e:e6:3c:3f:7c:46:55:e3:77:
63:ca:60:96:e0:6f:c5:fc:96:7f:3b:9b:2d:66:bd:
4f:3f:03:2b:8b:de:df:a0:10:4d:24:32:13:82:b3:
ba:c1:9d:42:f9:ec:d8:7a:34:b8:6b:e7:44:4b:26:
c7:0f:25:3c:04:ca:f9:df:15:e1:9e:3f:86:b4:0f:
e2:65:79:6d:23:25:c8:81:f7:3f:dc:fe:71:62:0d:
15:2b:4a:b7:96:5a:1d:51:7a:c3:5b:91:35:58:62:
89:f0:0d:ce:9f:4d:59:b5:88:3c:a9:4f:a4:7a:e1:
e5:97:43:9b:7f:22:36:be:2e:47:f2:67:b7:a2:d9:
4f:c2:ff:e6:e4:c0:94:70:11:35:be:74:21:4c:67:
a5:27:22:88:e7:74:da:59:aa:05:26:55:f3:93:18:
85:c7:c8:8c:95:54:32:bf:a4:86:d0:51:8b:67:95:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:FA:60:23:22:86:85:34:76:AD:0D:BA:1B:3F:E8:28:82:6B:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/409CF828371411F1863671D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.169.0-156.238.171.255
156.239.149.0-156.239.153.255
156.243.48.0-156.243.79.255
Signature Algorithm: sha256WithRSAEncryption
93:5d:0f:28:37:57:87:5e:9f:96:dc:17:7e:89:21:a5:22:b8:
88:49:ee:fb:0e:bd:1a:96:01:70:e4:91:f1:06:25:d9:f3:6c:
75:8d:ce:4e:b1:1f:37:bc:99:f0:0a:c8:ec:d7:b1:2f:f9:54:
f5:b0:7e:4b:4e:15:9d:57:54:5e:08:13:c2:6b:f8:ea:a5:e1:
06:3f:ac:89:2f:41:ec:88:1a:3c:77:27:e1:8b:d6:42:36:32:
a0:81:aa:e8:f6:71:77:32:2e:2f:09:89:86:14:b7:84:d1:22:
1a:40:55:e4:f6:07:7e:18:1d:05:64:7b:09:b4:81:f6:4c:75:
8c:19:32:a1:68:5f:74:9b:9f:a6:9d:e0:5d:6f:6a:e7:4e:f1:
95:a6:5e:e0:bc:e0:3b:15:84:32:b0:29:0b:85:57:6f:7d:ec:
39:6a:2a:73:9b:4d:87:d0:48:47:43:85:5e:48:c0:7c:c0:88:
68:af:d3:a8:fd:7d:d8:ad:55:53:79:75:40:01:7e:60:87:49:
af:a0:03:db:7f:8a:47:a7:16:d7:24:1f:d0:89:d9:16:0a:0c:
da:68:19:fb:45:47:24:78:ce:ae:19:cd:92:71:0b:78:09:f0:
16:f8:5a:46:ec:64:6d:6d:0f:8f:5c:f8:9b:b7:a0:ae:4b:5e:
74:fa:27:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:38 2026 by rpki-client