Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB1862234AB11F1B80FFE1BCF1D38B0.roa
File: CDB1862234AB11F1B80FFE1BCF1D38B0.roa (raw, json)
Hash identifier: Oq92pDxpjKd918LOwcg20C9Q1vEgUKbZkJi2yH5E/9I=
Subject key identifier: 51:18:70:95:0E:E0:41:24:45:63:F9:28:91:FF:84:09:6A:F9:BB:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB1862234AB11F1B80FFE1BCF1D38B0.roa
Signing time: Fri 10 Apr 2026 07:06:32 +0000
ROA not before: Fri 10 Apr 2026 07:06:28 +0000
ROA not after: Sun 10 May 2026 07:06:28 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109460 (0x1ab94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 07:06:28 2026 GMT
Not After : May 10 07:06:28 2026 GMT
Subject: CN=69d8a178-d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fa:c6:e0:60:02:fa:aa:58:44:07:80:32:2d:
63:fb:52:55:9b:de:c7:e8:4d:2d:8f:88:65:ef:a7:
13:cd:16:52:81:93:21:83:18:8d:7b:57:03:02:bc:
f3:93:bb:3a:71:b2:fa:6c:11:d9:8d:41:5f:51:3c:
19:61:ce:14:00:55:e0:cc:f0:88:ec:61:2f:31:6b:
ab:ea:9b:8d:dc:33:e8:e1:e1:69:8d:da:56:59:cc:
8c:a3:24:1b:11:43:48:70:2c:e1:ca:7e:a8:ae:d3:
b9:79:df:70:5b:33:83:6f:72:c7:44:02:5c:4c:b0:
73:44:80:77:df:e1:ad:11:65:17:d7:a0:dd:48:8a:
20:e6:d8:2b:4a:35:94:9b:47:8b:11:19:fe:52:6f:
19:76:38:62:de:17:70:cd:61:f4:c7:75:15:fd:22:
e5:55:af:0a:3c:7c:e4:14:d2:b3:fd:c9:c2:13:27:
8a:1b:d5:35:fd:61:8d:32:b1:bc:46:b0:fd:f8:38:
89:be:44:e6:ff:f5:50:54:d3:c3:9d:db:24:16:08:
4b:71:3a:ea:22:15:cc:1d:0f:a5:78:7c:fb:69:cf:
50:c7:07:ac:9e:cb:28:4d:b1:48:54:ad:75:83:a7:
91:0c:e1:db:50:4a:77:59:cb:ad:a4:97:e9:07:2c:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:70:95:0E:E0:41:24:45:63:F9:28:91:FF:84:09:6A:F9:BB:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB1862234AB11F1B80FFE1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:eb:3d:ff:8b:1a:d1:73:b3:a4:18:ce:23:ba:01:26:45:e2:
f0:d3:09:f4:12:1c:d5:d0:68:dd:b5:20:7e:37:ad:e8:ec:5b:
31:bb:56:5f:06:9c:e5:40:a0:87:f0:ef:b7:8b:eb:86:aa:0f:
4f:cd:2c:cc:fb:de:bb:7a:c4:23:c7:22:89:3e:e5:c9:6b:8a:
ec:d8:bb:1b:f1:8e:86:e7:9a:5a:39:ec:67:c0:8a:62:3b:c5:
b2:71:95:a3:dc:02:fb:a2:94:97:4d:21:64:74:9f:2b:3a:06:
11:93:a5:02:97:15:16:7d:1a:2a:42:dc:7a:9c:18:0a:40:08:
e8:29:4f:d4:62:6d:57:7c:7d:49:e0:51:2e:70:9b:f2:cf:70:
f5:cf:e6:a7:d1:3b:c2:30:92:45:d8:98:fa:b8:b6:94:44:4d:
bc:f2:0c:e0:2d:c2:67:da:7e:02:cb:1d:30:ed:f6:9b:60:4f:
bc:5d:b9:5e:e7:fc:12:9e:0e:40:07:b7:9c:b2:3b:30:0d:45:
00:aa:e8:27:ca:1c:16:81:5a:fd:a9:5e:ed:df:1a:e7:18:de:
18:c3:61:11:5d:51:42:e8:ff:f9:ba:dd:fc:62:19:90:9a:19:
5b:d5:14:5b:9f:e5:76:06:8a:b8:3a:59:4f:0c:a7:01:82:0f:
3f:02:cf:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:08 2026 by rpki-client