Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9D9852373111F1870B2808CF1D38B0.roa
File: CB9D9852373111F1870B2808CF1D38B0.roa (raw, json)
Hash identifier: /I+ofhWibku8ke7yhWGD0U/2o47Qk28e4xc8dC661YQ=
Subject key identifier: 11:27:3F:71:19:07:0C:FD:67:DD:66:84:12:CB:16:77:84:20:05:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9D9852373111F1870B2808CF1D38B0.roa
Signing time: Mon 13 Apr 2026 12:10:44 +0000
ROA not before: Mon 13 Apr 2026 12:10:39 +0000
ROA not after: Tue 19 May 2026 12:10:39 +0000
asID: 202437
IP address blocks: 156.228.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109670 (0x1ac66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 12:10:39 2026 GMT
Not After : May 19 12:10:39 2026 GMT
Subject: CN=69dcdd44-621c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:13:ad:83:f5:95:03:60:25:51:5e:77:6b:
e1:f1:33:8a:37:20:95:34:f1:ab:03:18:08:61:ba:
01:c3:01:91:e0:a2:13:50:08:5f:97:c1:e7:a5:ea:
a3:92:2b:71:86:dd:4f:7f:e3:be:da:17:d1:de:1e:
69:25:23:a6:13:bb:01:69:03:29:15:4e:fc:09:16:
ad:ec:d4:e4:24:d5:12:36:76:e7:dd:40:b6:37:21:
13:9c:0b:fa:b0:71:63:37:c0:89:a3:0d:81:5b:1d:
29:c7:6d:f0:0f:f9:7b:fa:f5:bf:72:75:90:e6:dd:
22:66:65:6e:04:1c:a9:59:d0:75:3b:85:e3:ef:c4:
3a:ff:c2:54:3a:6d:05:85:9f:8e:71:8b:03:d7:74:
fa:ff:c1:9f:63:1c:1f:a0:14:0b:ad:b4:cc:85:66:
31:ff:a2:e7:c6:ee:f4:49:37:37:23:68:6e:79:d6:
16:1e:3c:b1:ca:55:5d:e8:5b:a3:c9:14:1b:3d:b5:
28:eb:9f:21:b6:cd:6f:cb:7e:86:a1:1f:db:fc:44:
3f:1a:97:f3:13:a5:78:c3:90:53:9c:55:17:61:39:
56:91:28:87:86:ba:58:75:64:65:7b:7b:87:04:eb:
13:94:47:dc:08:22:f6:48:35:e1:87:9b:44:51:21:
90:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:27:3F:71:19:07:0C:FD:67:DD:66:84:12:CB:16:77:84:20:05:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CB9D9852373111F1870B2808CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:69:5a:cd:37:3b:06:40:cb:c1:6f:92:67:88:68:4b:e9:8e:
61:23:9e:df:5d:48:13:81:c4:2d:ca:89:4c:79:ea:d7:9f:10:
ca:54:61:a3:63:52:45:7b:47:ca:95:f9:6f:9a:6b:24:bb:9d:
76:f3:bb:66:6e:92:38:41:69:b8:51:d0:56:a3:a8:51:44:5c:
8e:14:00:2e:19:21:62:f5:89:cf:a9:52:88:e0:e8:17:c3:d0:
9f:ab:34:65:63:d1:9d:e5:71:20:34:a3:4d:54:7c:1b:7a:5e:
f2:ec:34:b7:b4:c8:9e:02:6a:af:a5:e3:79:fa:90:db:2f:17:
9b:2e:ea:d5:18:31:94:3b:9e:92:4c:15:be:09:75:c5:48:c0:
cc:0d:83:02:11:61:8b:5b:fb:ad:db:a3:b3:8b:9c:d4:63:6b:
b3:70:73:3f:6c:ed:80:c3:b9:b7:5b:40:96:bb:cf:f2:44:64:
7f:b6:03:eb:ef:5f:b5:6e:05:ff:7e:fa:b2:eb:87:e8:05:e1:
e7:e6:e3:7c:39:54:1b:ec:05:e3:49:8a:2a:1d:9c:9c:c7:2d:
d0:3f:c4:c1:1f:af:9d:f0:b3:18:b4:0d:a1:cf:e5:33:b2:f4:
55:b1:d9:0b:36:4e:b1:04:b8:5f:84:96:67:db:dd:45:b5:7a:
76:59:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:54 2026 by rpki-client