Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46BABF062EA911F1AE7C4D97DAE4EC9C.roa
File: 46BABF062EA911F1AE7C4D97DAE4EC9C.roa (raw, json)
Hash identifier: Iy/v9iXrYHOLD0ZKEP/SjmyLlZ0B4COtqHIj+BL/Qac=
Subject key identifier: CE:9B:06:EC:24:6E:C5:F9:10:61:89:18:5E:E3:64:AB:EF:08:90:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A967
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46BABF062EA911F1AE7C4D97DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:33:20 +0000
ROA not before: Thu 02 Apr 2026 15:33:15 +0000
ROA not after: Sun 10 May 2026 15:33:15 +0000
asID: 62610
IP address blocks: 156.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108903 (0x1a967)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 15:33:15 2026 GMT
Not After : May 10 15:33:15 2026 GMT
Subject: CN=69ce8c40-465c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:64:50:df:1d:ef:df:ff:5d:fa:98:8f:62:
34:9a:ec:c3:6c:d3:54:20:12:01:69:40:e4:56:fe:
a2:bf:74:69:b6:5e:20:90:9d:f6:cf:03:66:28:af:
e5:a4:a9:c8:e1:66:39:50:e0:a3:da:a4:6e:0c:13:
34:9f:b7:f2:6b:5f:f0:89:e3:66:bc:27:5b:d4:8a:
2a:e2:83:d4:a6:4c:28:f8:23:a2:70:1f:b4:9f:49:
5f:07:b6:10:6e:1d:be:f6:29:42:cc:5f:3a:4a:42:
5f:50:85:9a:bd:95:d4:b3:ee:42:33:c0:31:72:14:
95:3a:10:1e:6f:48:71:96:b6:22:ad:22:5b:b5:d0:
2e:cf:81:05:17:52:b7:9e:1e:a1:d1:ce:9f:01:c1:
be:a2:ed:4b:fd:86:0d:ca:4e:0e:22:e3:da:ab:8b:
d1:0f:ef:5b:74:ca:5c:9a:e1:02:b8:45:6b:84:35:
d9:20:42:31:30:ea:c9:3a:1c:88:59:4a:6b:56:b3:
d0:d6:e6:00:df:ab:ae:cc:7e:77:92:ff:3e:48:6b:
72:d4:53:65:c6:7b:37:ff:f0:dd:82:1a:4a:66:e1:
95:fe:3a:f6:74:0b:2e:9f:85:31:ce:e2:57:8b:b5:
67:c5:ef:04:12:89:f4:66:65:c7:b4:ed:05:02:17:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:06:EC:24:6E:C5:F9:10:61:89:18:5E:E3:64:AB:EF:08:90:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46BABF062EA911F1AE7C4D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:d0:16:8b:57:ea:41:ba:b7:99:ef:36:04:96:60:51:2d:c6:
48:0c:a4:25:9c:24:f3:1a:8b:1a:87:ab:eb:cd:a1:1c:63:4b:
3b:6e:9a:94:cc:67:26:c4:96:89:f2:a7:e1:63:7f:f0:5d:38:
3d:8a:71:f6:92:c9:82:39:af:08:91:7e:1d:aa:58:16:78:3e:
fb:89:45:f4:d0:aa:9d:b2:72:4e:04:f8:30:f1:ab:57:1b:cf:
7e:a0:61:c7:64:a9:65:b2:65:09:6e:7a:f7:8c:7f:09:78:9c:
dd:ca:fb:7d:d8:d7:b7:8a:d6:02:d9:58:69:3b:87:75:df:df:
17:4d:a3:45:d3:fd:fa:da:fb:16:0c:f9:7b:80:3b:7a:08:79:
a0:33:d0:b5:2f:ad:b5:cb:4c:69:61:1c:27:62:97:ac:85:41:
e2:f4:88:43:3b:1a:ad:8b:e2:59:fe:a2:ab:05:d7:fe:0b:3d:
26:71:38:2d:7a:ae:33:17:cc:92:f5:37:aa:c1:10:be:52:e8:
11:a1:82:9c:f1:4c:18:dc:36:61:e5:4d:5c:8c:c4:43:8a:65:
45:fd:6d:7a:bf:ca:f1:07:30:2b:dd:64:05:4e:ce:cc:a6:9a:
c4:bf:c6:ba:a1:d0:29:69:83:a1:ee:fe:72:1d:17:59:de:f5:
17:da:48:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAalnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAyMTUzMzE1WhcNMjYwNTEwMTUzMzE1WjAYMRYw
FAYDVQQDEw02OWNlOGM0MC00NjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2h9kUN8d79//XfqYj2I0muzDbNNUIBIBaUDkVv6iv3Rptl4gkJ32zwNm
KK/lpKnI4WY5UOCj2qRuDBM0n7fya1/wieNmvCdb1Ioq4oPUpkwo+COicB+0n0lf
B7YQbh2+9ilCzF86SkJfUIWavZXUs+5CM8AxchSVOhAeb0hxlrYirSJbtdAuz4EF
F1K3nh6h0c6fAcG+ou1L/YYNyk4OIuPaq4vRD+9bdMpcmuECuEVrhDXZIEIxMOrJ
OhyIWUprVrPQ1uYA36uuzH53kv8+SGty1FNlxns3//DdghpKZuGV/jr2dAsun4Ux
zuJXi7Vnxe8EEon0ZmXHtO0FAheb+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM6b
BuwkbsX5EGGJGF7jZKvvCJCJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NkJBQkYwNjJFQTkxMUYxQUU3QzREOTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOheMA0GCSqGSIb3DQEBCwUA
A4IBAQAs0BaLV+pBureZ7zYElmBRLcZIDKQlnCTzGosah6vrzaEcY0s7bpqUzGcm
xJaJ8qfhY3/wXTg9inH2ksmCOa8IkX4dqlgWeD77iUX00KqdsnJOBPgw8atXG89+
oGHHZKllsmUJbnr3jH8JeJzdyvt92Ne3itYC2VhpO4d1398XTaNF0/362vsWDPl7
gDt6CHmgM9C1L621y0xpYRwnYpeshUHi9IhDOxqti+JZ/qKrBdf+Cz0mcTgteq4z
F8yS9TeqwRC+UugRoYKc8UwY3DZh5U1cjMRDimVF/W16v8rxBzAr3WQFTs7MpprE
v8a6odApaYOh7v5yHRdZ3vUX2kg4
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:24 2026 by rpki-client