Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07BF948019111F1947FF2BFDAE4EC9C.roa
File: D07BF948019111F1947FF2BFDAE4EC9C.roa (raw, json)
Hash identifier: TYwAzLV4NbRNi7pTYB6RmzxiiYCAvCOuxbWV2Kiaigc=
Subject key identifier: 1B:9B:C3:E5:E0:42:CC:38:3E:AA:79:21:94:07:1E:81:76:FB:EA:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07BF948019111F1947FF2BFDAE4EC9C.roa
Signing time: Wed 04 Feb 2026 06:22:01 +0000
ROA not before: Wed 04 Feb 2026 06:21:55 +0000
ROA not after: Thu 11 Feb 2027 06:21:55 +0000
asID: 400463
IP address blocks: 156.230.192.0/18 maxlen: 24
156.241.192.0/18 maxlen: 24
156.241.200.0/22 maxlen: 24
156.241.204.0/22 maxlen: 24
156.241.208.0/22 maxlen: 24
156.241.212.0/22 maxlen: 24
156.241.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105393 (0x19bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 4 06:21:55 2026 GMT
Not After : Feb 11 06:21:55 2027 GMT
Subject: CN=6982e589-8654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:67:49:5f:02:cc:15:77:8b:98:c1:7b:50:
51:68:9f:ae:a2:32:60:5b:44:75:06:3f:75:b7:99:
5c:d8:5a:33:cf:ef:04:7a:bc:dd:dd:00:80:8c:b6:
d0:6f:94:33:fe:07:47:79:b0:16:f7:d3:69:92:38:
34:da:f5:a8:46:d8:30:78:a9:df:f7:80:4e:2a:2a:
85:7a:c1:b5:6b:5d:0a:a1:a5:5c:c6:97:2b:71:a5:
74:63:25:b6:5a:90:2e:d9:40:b2:ab:da:92:37:1f:
46:13:65:7a:f5:86:88:c9:47:15:25:1f:fd:d5:b4:
05:85:21:4a:85:3c:ca:6d:d7:8d:96:9d:66:c8:04:
f5:5e:dc:7a:31:dc:32:e6:8b:d0:df:38:9e:05:a2:
41:c4:20:34:b2:01:a8:35:f2:92:d8:f9:28:14:3f:
23:a8:e4:93:c7:19:bf:6c:58:d4:22:f8:2d:ac:53:
e9:13:87:cc:28:35:e1:94:55:ad:2b:85:ff:98:6b:
f0:05:08:06:33:44:c6:dd:7d:78:19:77:b7:fa:ac:
55:14:4a:23:6d:68:87:93:d2:cd:34:cc:87:a4:18:
22:51:1f:79:59:ee:86:e8:86:4b:5d:f9:3e:39:f4:
9d:2b:b3:2b:66:16:46:67:6b:a1:35:e7:1b:96:52:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:C3:E5:E0:42:CC:38:3E:AA:79:21:94:07:1E:81:76:FB:EA:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07BF948019111F1947FF2BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.192.0/18
156.241.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:23:9a:04:1a:1d:fe:be:62:45:66:ca:51:ab:dd:a2:82:b0:
99:97:b7:93:1f:5b:97:78:59:b6:c9:9c:e9:18:87:c7:44:32:
46:ff:39:af:14:78:eb:15:40:e0:08:60:15:71:5d:63:8e:51:
61:8e:8d:d2:cd:b8:58:a3:88:1e:92:57:e2:b8:86:7e:d9:74:
30:d2:5e:ef:7e:a2:02:24:52:28:48:bd:72:5c:2f:ea:06:cb:
9f:a3:95:76:3e:92:34:bd:cb:95:27:70:3b:7b:89:92:0e:9b:
25:a2:dc:a4:b3:ab:d2:93:0c:73:6f:17:91:97:d9:96:b0:aa:
2f:49:d8:a8:60:a5:b5:3f:4f:38:dc:5f:09:ba:d8:53:8d:b7:
ae:9c:99:50:a1:69:1b:fb:a8:71:9c:6f:4e:1d:6c:b0:70:0f:
b9:fb:e4:8b:a1:36:30:13:a2:d6:a4:ac:54:2b:90:04:31:0c:
20:38:8f:b5:47:5d:02:66:1d:7f:2a:15:e0:76:94:7b:aa:1a:
c0:b1:ed:4d:63:22:2e:23:70:19:c7:a9:bf:e8:7d:b9:ad:9b:
81:78:2b:e9:2a:f8:0b:96:22:19:80:77:4a:91:6e:ae:87:18:
c4:a0:d9:94:3d:3c:08:0a:d1:82:80:10:8a:7b:d6:9b:66:03:
ac:f6:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:40 2026 by rpki-client