Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A864B392370511F19592A5FECE1D38B0.roa
File: A864B392370511F19592A5FECE1D38B0.roa (raw, json)
Hash identifier: UDKKT+QG/qQWCPbJTJ3cMFqBDKzd3GF03215nRlfhO0=
Subject key identifier: 32:FF:8B:A4:01:9D:34:93:1B:CA:C5:17:31:85:60:BA:ED:25:B3:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A864B392370511F19592A5FECE1D38B0.roa
Signing time: Mon 13 Apr 2026 06:54:47 +0000
ROA not before: Mon 13 Apr 2026 06:54:42 +0000
ROA not after: Mon 20 Apr 2026 06:54:42 +0000
asID: 141159
IP address blocks: 156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109616 (0x1ac30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 06:54:42 2026 GMT
Not After : Apr 20 06:54:42 2026 GMT
Subject: CN=69dc9337-e702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:52:68:0f:2c:7d:ab:df:5f:50:1b:41:4b:
fe:e1:7d:8b:e3:3a:8c:7f:1b:74:5e:ab:e1:b3:c0:
ca:ea:65:b7:b0:78:91:3e:ab:29:50:5d:74:fe:0c:
73:31:62:ae:f9:83:ea:db:35:24:6c:a8:8d:b7:db:
84:1e:1c:a3:9b:ce:f6:8b:e8:c1:67:fe:fa:30:43:
d7:82:54:c0:9c:f9:30:31:1f:12:bf:10:4e:3e:a3:
5c:1b:7c:f2:b7:5d:74:34:fa:34:80:b7:37:11:3b:
41:4b:e9:82:a5:28:96:d4:7a:3c:c4:6c:82:0c:74:
bb:79:df:da:15:b3:29:fc:64:e2:3e:cd:21:5c:e9:
77:1c:2c:27:63:88:6b:fb:0b:27:d3:f6:94:f8:84:
ac:43:5c:c7:d3:80:9f:06:47:9a:6b:f1:84:f2:a9:
c0:e6:d7:39:8e:87:b0:a4:07:97:07:68:34:9a:f8:
fb:00:44:31:e5:1d:97:12:b2:c3:d2:c2:94:b4:b6:
b8:ef:e5:31:a6:b3:69:72:fb:dc:e8:79:60:a4:a1:
f9:41:72:8d:e3:30:a5:28:03:48:2c:7d:00:a6:46:
43:a1:e8:c3:f2:dc:4d:b8:c7:13:26:18:0f:24:6b:
d2:d7:f8:b0:fd:35:4f:65:e0:61:8c:1b:4b:9a:ce:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:8B:A4:01:9D:34:93:1B:CA:C5:17:31:85:60:BA:ED:25:B3:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A864B392370511F19592A5FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
71:5b:f3:eb:ee:78:3e:c1:08:d3:40:33:8d:e6:d0:bf:fc:de:
92:6b:51:15:b1:a8:86:e1:a2:d4:c4:4a:cb:05:06:89:fd:62:
ef:c9:c9:48:78:05:e9:5f:40:f8:ee:65:3d:84:7a:29:ec:7b:
24:46:5c:39:86:9b:ab:ce:36:e1:d9:1d:a5:15:63:c3:31:ac:
a7:b8:60:c8:3b:60:8d:b2:88:95:e8:7c:8a:8c:f3:79:9d:ef:
31:12:c6:5b:9c:89:db:77:15:6d:74:cc:92:43:41:ce:3b:60:
db:cd:fb:cf:9c:58:23:13:71:6e:fa:af:75:64:89:df:80:3d:
6b:73:61:04:8b:c2:84:8c:74:ba:83:ba:b8:a0:dc:38:54:7b:
14:6b:03:b6:f4:22:62:25:cb:b0:ed:c7:21:0f:fb:b3:fd:64:
cb:58:8a:d6:be:00:56:93:c2:e3:0f:fc:c7:6f:9d:ef:df:80:
2a:6b:89:35:bf:6f:97:b3:d8:6c:0e:2d:65:37:93:d1:a1:ba:
58:58:23:24:5e:66:0e:df:61:94:f9:5c:55:b9:18:a1:2e:b3:
67:88:c9:af:27:14:2a:b5:c6:22:9a:38:a2:32:9c:9c:ad:85:
82:5f:65:23:2b:c6:9f:b4:d1:d3:3c:50:4a:cb:b1:94:8b:35:
24:ca:64:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:32 2026 by rpki-client