Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852FCF24000011F199075C9DDAE4EC9C.roa
File: 852FCF24000011F199075C9DDAE4EC9C.roa (raw, json)
Hash identifier: RnjWT7BDhQnGsw/3292p/AANF9q/fjARK16m0n9NY9E=
Subject key identifier: 0F:16:BB:54:4C:F0:E9:37:AF:A4:34:43:83:BD:65:5E:3E:9E:2B:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852FCF24000011F199075C9DDAE4EC9C.roa
Signing time: Mon 02 Feb 2026 06:29:26 +0000
ROA not before: Mon 02 Feb 2026 06:29:22 +0000
ROA not after: Mon 09 Mar 2026 06:29:22 +0000
asID: 135377
IP address blocks: 156.232.92.0/24 maxlen: 24
156.232.93.0/24 maxlen: 24
156.232.94.0/24 maxlen: 24
156.232.95.0/24 maxlen: 24
156.232.96.0/24 maxlen: 24
156.232.97.0/24 maxlen: 24
156.232.98.0/24 maxlen: 24
156.232.99.0/24 maxlen: 24
156.232.100.0/24 maxlen: 24
156.232.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105303 (0x19b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 06:29:22 2026 GMT
Not After : Mar 9 06:29:22 2026 GMT
Subject: CN=69804446-fe4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:21:51:b1:29:f9:66:81:57:fd:f2:dd:be:
44:ce:c6:a8:f3:c1:5e:10:a4:9e:8e:74:51:55:b0:
d0:ce:a4:ae:ab:53:55:92:b5:26:4d:cc:e7:fb:36:
18:44:0d:df:6a:06:2e:51:69:b7:0e:fa:9e:c8:e4:
6e:24:67:e1:fe:0b:0e:f2:e2:5b:b2:42:6c:93:90:
06:09:3d:e1:ff:ec:42:c7:59:e1:19:95:6c:87:b2:
41:91:41:cc:cd:e2:23:60:ac:4a:a1:31:30:a4:fc:
98:c1:1c:9a:6e:33:1c:27:6c:b6:87:1c:f5:c3:b5:
0f:ce:34:d2:bc:88:04:a8:cc:ba:b0:90:ce:b8:86:
18:37:cd:54:41:77:43:06:66:5c:fe:43:24:4f:cf:
cf:de:b5:04:63:c9:3d:50:7d:95:16:70:66:21:b5:
81:fd:50:c5:8e:cb:19:29:0a:5d:62:4e:77:52:b5:
14:1a:f2:7b:9c:57:bd:f1:0e:88:05:32:fb:64:a4:
0f:be:5d:cf:27:04:d5:67:b0:ae:bd:27:37:2e:4f:
29:96:60:b9:b6:8a:a8:05:0c:a1:f2:5d:6a:49:ed:
50:45:05:10:b6:ae:40:d0:32:bb:b7:db:ea:1a:6c:
ee:49:45:7e:ee:14:fb:53:00:75:a1:1e:5c:94:34:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:BB:54:4C:F0:E9:37:AF:A4:34:43:83:BD:65:5E:3E:9E:2B:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/852FCF24000011F199075C9DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.92.0-156.232.101.255
Signature Algorithm: sha256WithRSAEncryption
ba:ed:8f:01:cd:f6:92:55:94:a3:52:19:e9:82:16:fc:60:5f:
40:b7:0a:5a:50:53:6c:eb:4d:55:04:b1:7c:67:73:76:34:4e:
9d:dd:1e:c7:fc:cc:43:8e:60:d5:f4:2a:cc:98:c0:74:d5:d8:
0a:b1:46:a7:29:b0:6c:63:b5:47:20:e8:51:e5:45:01:d4:06:
74:ad:7e:d2:78:f5:8a:11:81:6f:68:ec:aa:83:1d:73:32:a0:
03:6d:1b:e9:bb:59:78:62:6c:93:0e:67:b2:8a:d9:64:7e:20:
4e:db:e6:3f:37:c0:32:4f:a2:24:9a:d5:25:b0:22:5f:b0:90:
5a:e8:af:31:a9:44:b6:7a:f7:79:65:5d:52:c9:f5:78:aa:d6:
32:58:47:52:db:21:ab:f6:a1:8e:27:87:55:b5:ce:79:f9:c4:
4a:0e:18:cc:3b:3c:e5:11:90:d0:70:7c:3c:86:f0:1d:24:a5:
ec:01:41:f2:a2:a5:85:fb:06:3f:06:11:c2:15:c0:d7:8e:58:
e3:29:1d:24:f1:6b:8f:f0:13:05:b8:4b:c4:d9:e7:9e:d6:58:
92:36:ca:ac:04:eb:3f:b5:82:40:86:f0:f8:15:44:58:ba:b0:
7c:e2:b7:63:40:82:32:20:47:9e:4c:d7:5b:b4:93:f3:75:2a:
60:0f:11:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:23 2026 by rpki-client