Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91ED50E8123811F19E68E490DAE4EC9C.roa
File: 91ED50E8123811F19E68E490DAE4EC9C.roa (raw, json)
Hash identifier: 9PK8/Ej/Ky69w8D/Fg0u2eKLZI9nomC6g4RcsKuFmfg=
Subject key identifier: 30:67:07:C2:2B:01:E1:01:E2:A9:FE:02:AF:52:DE:BF:0D:0E:DE:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A07A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91ED50E8123811F19E68E490DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:56:00 +0000
ROA not before: Wed 25 Feb 2026 10:55:56 +0000
ROA not after: Wed 04 Mar 2026 10:55:56 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106618 (0x1a07a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 10:55:56 2026 GMT
Not After : Mar 4 10:55:56 2026 GMT
Subject: CN=699ed540-cc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a0:98:62:2f:c6:88:5d:3c:13:0c:eb:06:27:
9a:f1:4d:8e:13:da:38:df:89:4b:f4:b7:6e:a3:07:
3f:97:aa:39:cd:2f:ec:42:d8:d0:ae:3a:37:82:42:
63:66:6b:88:ee:b1:4b:ff:85:5b:d7:28:af:37:b4:
9f:01:1c:8f:9e:fe:a5:5c:6d:36:14:57:17:df:85:
f5:54:b1:8d:a1:87:c4:f1:89:1f:25:29:dc:92:b5:
12:9b:41:fc:07:3a:71:17:e0:4a:68:1d:b1:77:b0:
84:45:3d:8b:30:d1:8c:cc:62:98:9a:ed:ad:5e:fc:
fe:1d:15:5e:56:48:75:a0:4f:1b:2b:c9:0d:4a:80:
eb:e9:a9:40:2e:c3:58:c0:35:9c:45:99:6e:b1:63:
e8:8f:de:8e:96:11:60:7e:c6:f3:c9:b7:15:0d:24:
9b:26:47:31:a8:40:27:ef:83:64:8a:58:ff:74:38:
f8:6c:50:72:85:99:a3:4d:14:b8:ef:2a:53:8f:97:
07:f7:77:f8:b9:65:ad:12:2c:df:e8:1e:4f:b5:6b:
4f:46:d8:06:78:0a:ce:83:63:f5:ca:50:a4:98:4e:
6d:de:8c:e5:3d:79:40:0c:a6:ce:b7:70:8a:95:fc:
35:d6:78:57:6b:0e:85:b5:1e:0e:c9:78:9f:f4:51:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:67:07:C2:2B:01:E1:01:E2:A9:FE:02:AF:52:DE:BF:0D:0E:DE:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91ED50E8123811F19E68E490DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
84:0d:99:05:f7:ca:7c:35:ff:19:a4:b3:0f:e8:7f:93:ac:8f:
5c:e1:7f:22:9d:55:16:af:de:7e:69:8a:2e:d1:3b:ef:24:33:
40:42:47:71:4e:7a:02:a7:64:e2:4c:2e:bc:45:e1:c7:3d:a3:
93:ed:00:05:34:c2:a6:52:99:2a:05:92:af:28:91:61:ad:19:
6d:c2:7e:8d:28:94:5c:72:dc:5b:eb:6e:a1:2c:03:c1:ff:f1:
51:20:ef:93:3d:7c:60:e3:d2:68:17:55:88:7a:f7:61:b2:78:
31:ac:da:98:77:cb:30:0d:fa:b2:c8:e8:8b:f4:9f:da:c4:54:
51:78:4d:02:fe:b0:52:3a:0c:3d:69:6c:5f:63:2a:7b:6f:5e:
b0:5c:45:30:6f:cd:79:9b:1f:32:43:a4:64:93:db:94:f9:5e:
73:1c:c2:74:b0:fe:36:e1:89:d9:a1:c8:24:9b:9f:c8:54:b2:
a2:83:33:7b:9c:98:40:a8:a9:ff:96:f1:26:3a:bb:c7:82:c1:
2c:e8:26:ec:90:50:65:63:fa:ea:35:e5:91:a3:b9:19:3c:87:
a4:74:f0:52:c1:65:8f:4c:6a:4c:0e:cc:d6:b0:c1:cb:0d:da:
f3:47:6e:d7:8c:db:63:13:11:f8:07:6a:b1:48:3a:9d:73:ed:
0e:ab:a6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:34:05 2026 by rpki-client