Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD560D4AFF7511F0BC70D5BFDAE4EC9C.roa
File: BD560D4AFF7511F0BC70D5BFDAE4EC9C.roa (raw, json)
Hash identifier: O5K91AQEg01+JBYJ608p7MyV+nYYYUAnkUMZUFtQmBs=
Subject key identifier: 4E:19:DF:FB:68:77:88:EE:20:4B:11:36:47:FD:AD:B2:53:91:9B:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD560D4AFF7511F0BC70D5BFDAE4EC9C.roa
Signing time: Sun 01 Feb 2026 13:56:00 +0000
ROA not before: Sun 01 Feb 2026 13:55:56 +0000
ROA not after: Sun 08 Mar 2026 13:55:56 +0000
asID: 48031
IP address blocks: 156.238.24.0/24 maxlen: 24
156.238.25.0/24 maxlen: 24
156.238.26.0/24 maxlen: 24
156.238.27.0/24 maxlen: 24
156.238.32.0/24 maxlen: 24
156.238.33.0/24 maxlen: 24
156.238.34.0/24 maxlen: 24
156.238.35.0/24 maxlen: 24
156.238.36.0/24 maxlen: 24
156.238.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105290 (0x19b4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 1 13:55:56 2026 GMT
Not After : Mar 8 13:55:56 2026 GMT
Subject: CN=697f5b70-a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:79:89:11:ce:1c:6c:84:9a:e8:6f:8c:d7:
03:9f:11:ae:8a:c4:68:ed:ef:67:8c:82:a7:0e:3c:
da:bf:01:3d:b0:36:48:31:04:c5:63:70:06:66:a7:
89:9a:83:1f:c0:c2:9f:28:91:5d:6f:ec:98:65:f6:
af:c3:77:33:29:44:10:ba:26:6a:c1:82:44:b2:ea:
2c:76:be:75:d4:16:67:7c:be:67:0a:8f:0b:e0:d5:
b1:1e:b9:f8:70:9d:df:17:d8:47:1d:4e:cc:19:61:
7c:29:6f:b3:c3:e2:c7:37:a5:0a:b9:38:46:22:94:
9b:43:dd:32:98:41:d4:c0:33:d8:7f:20:7a:3c:83:
8f:50:41:72:61:75:86:1c:fc:17:a5:de:74:9f:12:
e1:29:33:7c:3d:8e:2e:6a:28:88:18:06:f5:eb:32:
90:37:52:ad:a6:a1:39:24:f4:35:c1:36:c4:30:d2:
43:34:3a:24:90:60:c8:c9:fa:9d:26:d3:c9:01:f3:
8b:8f:c2:71:36:4d:ca:75:7c:d0:f9:75:66:e0:57:
db:05:e8:65:c0:1c:81:37:21:4d:bd:15:8f:fc:de:
59:56:ed:c8:13:14:48:11:4f:eb:90:cd:12:3b:f7:
0e:05:40:ba:54:ce:ce:0c:17:1f:7e:e3:c9:b6:2c:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:19:DF:FB:68:77:88:EE:20:4B:11:36:47:FD:AD:B2:53:91:9B:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD560D4AFF7511F0BC70D5BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.24.0/22
156.238.32.0-156.238.37.255
Signature Algorithm: sha256WithRSAEncryption
28:45:68:04:2b:5c:fc:17:db:95:94:80:7f:50:33:60:7d:1a:
d2:22:97:45:e0:a6:1c:ef:7d:8a:c6:ad:35:27:a9:1a:16:51:
b3:da:90:91:d7:8a:9d:43:eb:45:aa:70:67:13:59:65:54:16:
8b:6d:bf:d8:67:b5:f4:85:5e:cb:c6:15:d2:c7:d7:2e:e4:92:
d7:30:0c:8f:47:f4:a6:84:01:b6:7e:19:56:53:c8:01:49:a4:
70:3a:49:98:c4:f0:f6:dc:44:6c:1c:0c:01:7d:f7:af:68:a1:
8d:11:31:90:42:a2:7d:20:a4:21:52:ad:92:b6:1c:6a:08:20:
86:be:3c:32:f4:e2:54:65:8f:88:7d:86:a2:13:14:96:89:eb:
39:ee:e5:5a:4b:63:4d:b5:3c:92:58:de:fd:ff:cc:d9:f5:c7:
f2:35:79:1e:e9:2a:32:63:98:cf:84:f4:a6:ef:5d:3e:6a:f1:
a8:55:8c:09:4f:9c:ed:e3:84:f3:b0:b4:40:b7:41:49:cc:22:
bc:a0:e4:6d:9a:19:85:4c:f4:29:8a:72:69:a7:1b:20:59:55:
37:e0:dc:32:05:59:e3:85:65:84:e0:2a:d1:1e:24:cf:34:a0:
56:31:6e:f6:77:42:91:b8:12:ad:8f:6e:d8:e8:5f:3b:17:9a:
c6:59:1c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:39 2026 by rpki-client