Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8615B82ECC11F18F6354DDDAE4EC9C.roa
File: 4A8615B82ECC11F18F6354DDDAE4EC9C.roa (raw, json)
Hash identifier: 2nUIiQpV5dZNkcnk7gjMNQ3Rh/5IGVZrGa9clA7VQGs=
Subject key identifier: A8:BA:AB:A0:8F:37:09:95:36:D8:14:C4:85:6D:8F:CF:5A:01:6D:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A977
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8615B82ECC11F18F6354DDDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 19:43:59 +0000
ROA not before: Thu 02 Apr 2026 19:43:54 +0000
ROA not after: Sun 10 May 2026 19:43:54 +0000
asID: 138915
IP address blocks: 156.244.48.0/24 maxlen: 24
156.244.49.0/24 maxlen: 24
156.244.50.0/24 maxlen: 24
156.244.51.0/24 maxlen: 24
156.244.52.0/24 maxlen: 24
156.244.53.0/24 maxlen: 24
156.244.54.0/24 maxlen: 24
156.244.56.0/23 maxlen: 24
156.244.58.0/23 maxlen: 24
156.244.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108919 (0x1a977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 19:43:54 2026 GMT
Not After : May 10 19:43:54 2026 GMT
Subject: CN=69cec6ff-8be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2e:16:fb:83:8a:ce:5b:de:01:14:45:56:f2:
ca:c6:e3:88:83:01:43:50:03:7c:9d:b7:6f:2b:d4:
4c:d3:7a:c1:dd:88:4e:27:91:13:41:cb:58:36:98:
2f:17:fd:79:e2:b3:b7:40:95:85:f2:15:ae:18:50:
f8:60:6a:3e:e1:3e:8d:0d:8e:dc:6c:03:21:3f:3c:
fc:93:8a:3e:53:de:d3:31:98:f8:84:42:c1:cb:da:
bb:10:1f:a5:1c:ac:e5:c3:04:ef:f2:4d:42:7d:f9:
10:7f:79:94:88:94:f4:b9:63:ea:3b:c5:41:ec:d0:
ac:71:91:88:b3:70:9b:b2:c5:c8:c8:96:c4:31:76:
66:ea:07:3f:58:09:20:d0:2e:8e:70:45:f1:82:7d:
d4:23:c7:d1:c8:4c:cf:c9:d0:36:03:f6:ef:05:2f:
a8:40:7c:f2:c8:de:ec:40:e3:73:b5:1c:1f:e7:c8:
3a:d6:7d:87:39:52:16:0b:17:5a:04:1a:ba:2f:24:
ff:66:cc:4b:78:b3:a8:34:ff:8b:a7:0e:7a:36:4f:
34:65:09:d1:de:35:da:75:fe:b0:09:72:68:a9:0f:
83:b5:30:06:7b:78:17:57:c9:d3:cf:98:35:41:f4:
33:58:c6:82:27:de:41:53:25:7b:07:30:99:78:7b:
a9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BA:AB:A0:8F:37:09:95:36:D8:14:C4:85:6D:8F:CF:5A:01:6D:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A8615B82ECC11F18F6354DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.48.0-156.244.54.255
156.244.56.0-156.244.60.255
Signature Algorithm: sha256WithRSAEncryption
73:60:cf:88:f3:5a:ac:70:82:d7:8c:e2:2f:12:a3:6e:b5:90:
ac:1d:fc:a0:4e:34:e0:dc:65:14:c7:29:ef:60:28:93:17:67:
a8:2a:5b:62:78:d8:c3:70:23:c8:fc:fe:62:37:f2:3c:c9:53:
64:f8:2e:74:e3:18:6f:c9:a6:8f:3d:76:a0:21:f5:c0:29:fb:
cf:60:1e:68:b3:b5:4d:1c:6a:79:d6:f1:43:22:6a:92:9d:47:
0e:b2:28:0c:3c:71:a4:04:31:66:0c:d0:00:a1:dc:43:bb:89:
a5:32:09:b1:7b:26:57:58:3e:b2:7b:c9:93:4e:8b:86:1c:e2:
37:bc:33:99:b1:dd:0d:f7:c5:71:46:f2:a3:09:ed:b5:9d:32:
36:19:d7:da:18:cf:a8:c8:42:15:e2:47:bf:2c:69:72:83:ca:
42:75:2c:17:db:2b:aa:62:1e:cf:bf:fe:4f:52:42:48:94:4e:
26:e7:96:52:8a:24:ef:12:5d:f1:31:41:3b:4f:0d:69:34:8b:
95:7d:6b:5e:88:d3:52:f2:da:40:2a:c8:ca:56:94:93:55:62:
89:a3:b2:e5:5b:f8:14:9d:df:aa:e7:af:aa:cf:82:4b:f1:28:
59:94:f8:35:a4:65:62:77:b6:22:b0:98:ad:b5:79:c5:ce:36:
77:0c:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:22 2026 by rpki-client