Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4EA03E13B511F19CAFDCB5DAE4EC9C.roa
File: DA4EA03E13B511F19CAFDCB5DAE4EC9C.roa (raw, json)
Hash identifier: GqY0HZfegr1p/oba1LxE5ySnL0JeDu36QyevImz3Z3k=
Subject key identifier: C1:5E:BB:63:3A:6F:41:04:EE:31:DC:F8:77:6F:96:3E:1B:7F:DD:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A106
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4EA03E13B511F19CAFDCB5DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 08:25:20 +0000
ROA not before: Fri 27 Feb 2026 08:25:16 +0000
ROA not after: Wed 01 Apr 2026 08:25:16 +0000
asID: 11427
IP address blocks: 156.238.176.0/22 maxlen: 24
156.238.184.0/22 maxlen: 24
156.239.136.0/22 maxlen: 24
156.241.44.0/22 maxlen: 24
156.242.84.0/22 maxlen: 24
156.242.96.0/22 maxlen: 24
156.242.108.0/22 maxlen: 24
156.243.116.0/22 maxlen: 24
156.243.140.0/22 maxlen: 24
156.243.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106758 (0x1a106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 08:25:16 2026 GMT
Not After : Apr 1 08:25:16 2026 GMT
Subject: CN=69a154f0-8967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:1a:cd:43:c2:f3:a9:88:3e:7d:14:ea:5a:
9e:46:62:35:c3:04:5c:73:a5:b0:cf:9f:11:81:68:
52:b3:95:ed:05:32:f2:4d:c5:5b:6b:19:7c:24:5f:
db:5c:1b:4e:4a:78:ab:67:3b:78:37:2e:e9:36:0e:
54:d9:2a:5e:54:47:cd:09:93:7f:c2:b8:d7:e3:b0:
b1:9f:5c:d4:c6:28:32:d3:92:3f:02:97:53:67:62:
f7:10:2e:63:e4:73:26:46:43:b6:aa:bc:bf:d1:20:
37:38:92:7b:75:42:20:8c:ca:e6:e9:e6:34:ca:6f:
5b:cb:53:a4:45:f7:6e:a1:d2:4a:47:96:50:07:b1:
38:34:e8:15:7e:ae:ec:7d:a2:53:83:78:51:d5:70:
77:1e:8c:66:29:fb:e5:86:9b:89:db:44:d3:5b:ad:
8f:e9:d8:31:cb:d4:6d:31:2e:51:ab:0b:1c:26:3c:
99:86:f6:73:47:f4:8c:47:58:b9:f6:14:87:a4:9a:
63:33:18:83:cc:4d:41:9e:14:9c:db:86:1b:c3:fd:
73:59:7f:e0:0d:d3:8d:d7:23:4e:af:00:86:51:18:
d4:36:d3:a6:ca:e8:96:47:e9:ac:7f:32:38:7a:60:
d3:3f:9d:75:12:d4:76:ad:a0:e0:03:f5:14:20:6c:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:BB:63:3A:6F:41:04:EE:31:DC:F8:77:6F:96:3E:1B:7F:DD:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA4EA03E13B511F19CAFDCB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.176.0/22
156.238.184.0/22
156.239.136.0/22
156.241.44.0/22
156.242.84.0/22
156.242.96.0/22
156.242.108.0/22
156.243.116.0/22
156.243.140.0/22
156.243.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:1d:94:fc:98:ea:6b:76:3b:e2:92:26:fe:11:72:c3:d4:2e:
c2:0f:f9:db:cd:01:0c:e6:a3:8d:c0:1b:fa:42:25:01:e7:36:
9e:53:b4:eb:44:7c:b5:b0:e8:b7:ff:8e:fb:d3:ad:91:f5:23:
4f:38:1b:62:f6:c1:30:c9:95:59:02:22:ad:c8:1b:f4:c1:4c:
18:df:33:89:ea:0d:32:88:66:7c:b0:e7:d4:c5:82:44:9c:1a:
a7:43:3c:53:87:94:23:61:56:01:15:63:d6:3b:c5:9f:1c:b8:
89:18:22:3d:27:81:95:5e:76:2f:3d:79:36:21:b1:d9:4a:2e:
31:f2:0f:b7:7f:20:90:87:a8:71:65:cd:5b:d0:1c:0a:c8:46:
5b:15:69:50:5c:3f:35:3e:e1:cf:51:ce:ac:98:6f:36:ad:d4:
75:ae:60:dc:48:5c:33:7c:7e:6d:bf:9f:86:30:46:e8:00:fd:
24:7d:a0:41:a7:c3:18:ba:fd:ea:a2:61:e3:37:36:7b:3f:72:
d0:87:4a:b0:62:58:15:91:d2:92:cc:02:98:e2:0d:08:76:03:
62:94:84:dc:b2:24:18:b3:01:f0:8c:18:51:dd:cf:80:98:ba:
45:30:dd:75:e4:09:f0:8a:d7:a5:a4:f5:eb:10:98:3a:79:a0:
a1:65:81:b7
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAaEGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI3MDgyNTE2WhcNMjYwNDAxMDgyNTE2WjAYMRYw
FAYDVQQDEw02OWExNTRmMC04OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmYazUPC86mIPn0U6lqeRmI1wwRcc6Wwz58RgWhSs5XtBTLyTcVbaxl8
JF/bXBtOSnirZzt4Ny7pNg5U2SpeVEfNCZN/wrjX47Cxn1zUxigy05I/ApdTZ2L3
EC5j5HMmRkO2qry/0SA3OJJ7dUIgjMrm6eY0ym9by1OkRfduodJKR5ZQB7E4NOgV
fq7sfaJTg3hR1XB3HoxmKfvlhpuJ20TTW62P6dgxy9RtMS5RqwscJjyZhvZzR/SM
R1i59hSHpJpjMxiDzE1BnhSc24Ybw/1zWX/gDdON1yNOrwCGURjUNtOmyuiWR+ms
fzI4emDTP511EtR2raDgA/UUIGytHwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFMFe
u2M6b0EE7jHc+Hdvlj4bf90wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQTRFQTAzRTEzQjUxMUYxOUNBRkRDQjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCnO6wAwQCnO64AwQCnO+IAwQC
nPEsAwQCnPJUAwQCnPJgAwQCnPJsAwQCnPN0AwQCnPOMAwQCnPOYMA0GCSqGSIb3
DQEBCwUAA4IBAQAeHZT8mOprdjvikib+EXLD1C7CD/nbzQEM5qONwBv6QiUB5zae
U7TrRHy1sOi3/477062R9SNPOBti9sEwyZVZAiKtyBv0wUwY3zOJ6g0yiGZ8sOfU
xYJEnBqnQzxTh5QjYVYBFWPWO8WfHLiJGCI9J4GVXnYvPXk2IbHZSi4x8g+3fyCQ
h6hxZc1b0BwKyEZbFWlQXD81PuHPUc6smG82rdR1rmDcSFwzfH5tv5+GMEboAP0k
faBBp8MYuv3qomHjNzZ7P3LQh0qwYlgVkdKSzAKY4g0IdgNilITcsiQYswHwjBhR
3c+AmLpFMN115AnwitelpPXrEJg6eaChZYG3
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:08 2026 by rpki-client