Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2B55E631AC11F1A1D20A9FDAE4EC9C.roa
File: BD2B55E631AC11F1A1D20A9FDAE4EC9C.roa (raw, json)
Hash identifier: hEKwn9nxUdYkZMJbvDa8x5ViCphC3LTL/70oYtodYYo=
Subject key identifier: 90:D8:5F:DB:56:16:E1:F7:65:01:76:7A:6C:A2:70:C3:6F:B3:61:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2B55E631AC11F1A1D20A9FDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 11:35:41 +0000
ROA not before: Mon 06 Apr 2026 11:35:36 +0000
ROA not after: Fri 17 Jul 2026 11:35:36 +0000
asID: 398993
IP address blocks: 156.227.160.0/20 maxlen: 24
156.227.176.0/20 maxlen: 24
156.229.176.0/20 maxlen: 24
156.245.64.0/18 maxlen: 24
156.252.96.0/19 maxlen: 24
156.252.144.0/20 maxlen: 24
156.252.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109206 (0x1aa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 11:35:36 2026 GMT
Not After : Jul 17 11:35:36 2026 GMT
Subject: CN=69d39a8c-46c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:2a:c3:6a:68:a1:d7:f3:f8:41:32:38:a2:
2f:30:cb:94:af:85:28:7a:4e:df:60:8f:a7:d6:eb:
bf:c4:97:5b:ad:fb:d6:38:ae:8b:41:fe:34:90:7d:
2e:c6:51:b6:53:f8:5b:f4:5e:24:07:b6:24:67:d1:
4f:12:29:19:3b:79:5b:97:69:24:48:c6:81:b7:cb:
9f:1c:6e:be:53:fe:a3:5f:be:53:57:2f:07:b5:48:
fb:c3:16:17:6d:9f:e8:c1:a3:d7:7f:ac:82:aa:5c:
31:3f:ad:40:ae:8c:52:87:33:b8:0a:a0:c3:64:80:
ef:a4:4a:e4:1d:aa:11:26:5f:5b:72:17:8c:3d:3e:
72:f3:30:61:7f:4b:b2:54:28:49:95:23:8b:80:3f:
72:f8:fa:bd:ec:49:fe:73:91:c2:c9:02:d6:79:47:
5d:41:53:65:77:5e:d7:82:b7:ad:61:e0:08:84:b2:
4e:37:21:2f:51:02:85:4f:be:10:a3:be:2e:fc:9d:
a7:42:5d:31:f5:79:0b:fa:c8:0f:39:6d:f8:77:15:
3b:22:d2:1c:59:65:47:02:6e:51:ad:03:d1:7e:75:
0a:a1:21:17:41:8f:21:63:8f:90:b4:27:9f:d5:c1:
16:38:99:a7:b9:25:d8:3b:54:d2:47:c6:62:8b:c5:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:5F:DB:56:16:E1:F7:65:01:76:7A:6C:A2:70:C3:6F:B3:61:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD2B55E631AC11F1A1D20A9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.160.0/19
156.229.176.0/20
156.245.64.0/18
156.252.96.0/19
156.252.144.0-156.252.175.255
Signature Algorithm: sha256WithRSAEncryption
61:51:c2:90:70:68:f2:19:db:6c:33:da:e3:ab:e8:6d:40:bc:
8d:5e:a8:66:29:e6:47:ad:44:73:ea:74:ca:a8:6d:3d:e5:1d:
7e:91:54:31:44:b6:cb:1d:d2:01:47:45:35:4b:bb:4a:36:3f:
be:55:00:5a:cc:67:14:fa:17:9b:9f:ca:2c:a4:60:c9:b3:8d:
9c:01:3c:fc:08:1c:dc:c4:08:3d:2d:67:7c:25:b9:24:5d:c1:
31:73:a6:bc:99:ab:b7:bf:b8:4d:89:f5:1c:35:eb:22:3b:ae:
87:b9:9c:5c:04:6c:ff:51:7e:23:fd:c1:19:40:2b:88:1b:bf:
d0:87:87:7b:6e:9d:b9:0d:74:b0:d3:da:a8:eb:cc:b3:00:18:
52:3e:10:fc:a3:aa:91:26:0d:96:33:69:b7:3d:78:1b:91:38:
d6:07:fe:f1:27:8f:17:58:b3:ef:a9:66:6b:39:52:d6:c9:45:
1f:f7:b7:db:cf:ce:fc:af:30:b1:44:39:95:90:13:8d:c2:5c:
46:42:f5:70:d2:a5:97:15:19:d2:71:71:f7:bc:75:06:c9:4d:
82:d0:f1:fe:53:c7:8e:31:95:de:d7:ab:8b:e4:60:a3:97:a9:
b0:a1:38:60:29:2e:eb:bd:92:69:7d:2d:65:e5:49:14:69:bc:
60:7e:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:18:03 2026 by rpki-client