Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562E1FF0366511F18E6456A7CE1D38B0.roa
File: 562E1FF0366511F18E6456A7CE1D38B0.roa (raw, json)
Hash identifier: DcYejnuH0E1Fc0sCUY5O0cI969Vr8bi/qF/lXLrM5nY=
Subject key identifier: 6D:A5:AE:D8:3C:90:8A:53:D0:E3:88:F3:D3:33:0F:54:E6:DA:F7:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562E1FF0366511F18E6456A7CE1D38B0.roa
Signing time: Sun 12 Apr 2026 11:47:09 +0000
ROA not before: Sun 12 Apr 2026 11:47:05 +0000
ROA not after: Thu 12 Apr 2029 11:47:05 +0000
asID: 17561
IP address blocks: 156.232.128.0/24 maxlen: 24
156.232.129.0/24 maxlen: 24
156.232.130.0/24 maxlen: 24
156.232.131.0/24 maxlen: 24
156.232.132.0/24 maxlen: 24
156.232.133.0/24 maxlen: 24
156.232.134.0/24 maxlen: 24
156.232.135.0/24 maxlen: 24
156.232.136.0/24 maxlen: 24
156.232.137.0/24 maxlen: 24
156.232.138.0/24 maxlen: 24
156.232.139.0/24 maxlen: 24
156.232.140.0/24 maxlen: 24
156.232.141.0/24 maxlen: 24
156.232.142.0/24 maxlen: 24
156.232.143.0/24 maxlen: 24
156.232.144.0/24 maxlen: 24
156.232.145.0/24 maxlen: 24
156.232.146.0/24 maxlen: 24
156.232.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109583 (0x1ac0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 11:47:05 2026 GMT
Not After : Apr 12 11:47:05 2029 GMT
Subject: CN=69db863d-d9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f5:b7:2b:68:7e:a6:1b:04:c3:83:82:73:32:
d2:97:10:6a:5f:55:e4:a1:44:82:73:b9:4e:02:b2:
0d:da:24:4a:b4:21:62:11:4b:50:f8:3e:5e:33:87:
f3:2c:4e:9d:99:17:fb:0b:6b:73:ff:4d:3c:f5:2e:
59:02:ef:c0:13:17:d2:b6:91:32:6f:fe:d3:75:96:
e8:e3:ce:24:a9:75:6e:45:cf:5c:8f:52:62:43:19:
fb:c1:51:1d:48:8f:2d:41:6e:57:44:d5:33:6a:3c:
b0:e9:1d:88:33:11:a7:9d:e4:3c:1a:62:04:64:92:
e8:e6:82:04:4d:82:4c:33:16:72:63:8f:4f:c4:18:
a5:3d:11:e8:30:e9:30:73:26:1f:2b:b8:dc:19:e8:
13:ac:32:f6:03:33:cc:98:f3:1c:70:7a:0d:4c:85:
15:c2:c8:41:b0:90:07:62:2f:b8:4e:d1:fd:74:c2:
72:1c:8c:24:e5:d0:aa:61:a5:c7:4b:68:d5:27:d0:
d1:0f:04:cd:30:87:52:9d:f0:2e:71:c9:e1:8f:37:
52:ab:c4:a5:c3:ae:99:3a:16:2f:76:c6:b9:73:61:
5f:db:3d:f3:d7:bd:27:7b:25:63:89:38:d0:c0:02:
e2:3c:0f:4b:da:74:f6:7a:74:b7:b6:33:91:c0:5a:
7b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A5:AE:D8:3C:90:8A:53:D0:E3:88:F3:D3:33:0F:54:E6:DA:F7:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/562E1FF0366511F18E6456A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.128.0-156.232.147.255
Signature Algorithm: sha256WithRSAEncryption
6e:40:4a:e6:03:97:a7:e6:da:7f:13:35:a7:aa:a2:e8:d7:0d:
18:88:8e:1e:d8:37:90:4c:89:1a:d0:41:9e:df:0b:e1:39:e0:
7e:0e:ff:38:e6:d9:ce:49:6d:d9:ba:85:3d:38:35:05:ab:e1:
ec:54:d9:5c:44:03:32:7e:03:cf:13:ca:0c:e4:4e:d3:3a:a5:
05:25:8b:71:71:62:58:c6:06:33:9b:e6:e8:6c:31:da:87:5d:
a6:de:db:e7:65:c5:89:04:67:b5:a8:ad:5d:97:e4:88:86:c3:
21:40:b4:ac:80:87:54:34:41:09:47:e0:36:64:5f:59:90:d5:
19:fc:22:a6:dc:c2:07:17:a6:cb:d0:e0:f8:15:2c:0c:13:ac:
00:70:ba:83:a1:1e:cd:71:f0:74:db:25:e3:77:f4:df:cf:bf:
55:8e:fb:df:3c:d7:30:93:40:1a:f7:73:3d:d5:60:84:77:df:
7b:8f:8b:aa:ca:94:6b:e5:97:bf:fe:d7:d9:45:a0:67:70:ce:
0a:92:a0:81:75:5c:fa:af:4e:57:95:ba:47:0a:f2:26:d9:51:
79:9b:f8:b5:a6:55:49:04:81:64:81:dd:8a:1a:d7:e5:e9:81:
97:18:cd:d3:47:56:5c:89:95:33:3c:d7:3f:3a:23:30:27:e8:
c2:ff:c3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:55 2026 by rpki-client