Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC58E93E370E11F1A156D6B7CE1D38B0.roa
File: EC58E93E370E11F1A156D6B7CE1D38B0.roa (raw, json)
Hash identifier: eIxT34kJw204b3S6ZKwk4xdMPfpqpRq4ZLwlNVrbunc=
Subject key identifier: E1:3E:AC:BD:B3:50:EA:8E:38:12:85:84:F0:A1:E3:D4:CC:19:FB:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC58E93E370E11F1A156D6B7CE1D38B0.roa
Signing time: Mon 13 Apr 2026 08:01:06 +0000
ROA not before: Mon 13 Apr 2026 08:01:01 +0000
ROA not after: Sat 16 May 2026 08:01:01 +0000
asID: 22773
IP address blocks: 156.233.252.0/24 maxlen: 24
156.242.231.0/24 maxlen: 24
156.242.232.0/24 maxlen: 24
156.242.233.0/24 maxlen: 24
156.243.102.0/24 maxlen: 24
156.243.103.0/24 maxlen: 24
156.243.104.0/24 maxlen: 24
156.243.105.0/24 maxlen: 24
156.243.106.0/24 maxlen: 24
156.243.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109640 (0x1ac48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 08:01:01 2026 GMT
Not After : May 16 08:01:01 2026 GMT
Subject: CN=69dca2c2-28e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:f0:86:28:26:31:16:fc:a0:2b:57:39:0b:
fd:4c:eb:7a:56:3e:af:fa:a6:6c:ed:70:0e:1b:65:
19:bd:14:78:97:26:c1:5c:02:95:e4:84:73:9c:a2:
fd:18:1a:84:52:ed:57:14:af:aa:47:e3:a6:0f:dc:
3c:1e:8f:c2:9a:0c:9b:9e:66:fe:c5:35:a2:7c:df:
b0:31:68:1d:89:5c:f5:22:0d:d7:78:89:8a:8c:03:
ad:76:4e:24:ab:7b:ed:a8:3f:15:a9:22:07:b9:8b:
b5:c9:19:32:f3:cb:fe:16:ac:12:e1:0f:00:36:35:
7f:ce:10:bb:5a:72:bf:2e:54:7a:47:89:6c:c9:76:
70:bb:c3:82:4e:d8:fb:3b:9e:d7:24:47:29:ca:27:
9b:bc:49:4b:93:ad:d7:84:43:a0:11:aa:1e:b7:f3:
20:66:b1:c3:85:9e:63:6f:fc:c3:7d:a1:ba:31:e4:
3f:be:5b:46:58:8d:85:4b:75:b3:cd:34:ca:48:dc:
d3:44:9e:0f:8b:9a:a0:e4:0e:64:8c:b0:20:66:2b:
bc:a3:39:cd:77:b5:67:34:0b:e6:4c:e6:01:f0:03:
70:9f:f7:d9:3d:45:b1:a5:60:9b:3b:b2:7d:16:4f:
dc:ff:8a:e8:da:4f:3a:c5:53:f4:0e:85:0a:f0:9e:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3E:AC:BD:B3:50:EA:8E:38:12:85:84:F0:A1:E3:D4:CC:19:FB:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC58E93E370E11F1A156D6B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.252.0/24
156.242.231.0-156.242.233.255
156.243.102.0-156.243.107.255
Signature Algorithm: sha256WithRSAEncryption
89:27:7b:39:45:b7:a5:13:a7:01:d8:69:f6:b2:f9:51:9b:80:
32:a4:14:b6:5b:fe:c1:48:e2:b8:fe:8b:da:b0:cf:9b:9f:68:
0a:b8:23:48:98:59:38:58:b0:de:95:97:b3:37:5e:83:4f:c0:
df:d6:ad:89:2d:31:0e:b3:90:85:eb:33:ae:d6:4e:a8:8d:e5:
c9:4b:75:2f:53:cb:8f:74:7f:f1:3b:66:00:b6:32:b8:c0:73:
84:75:09:30:08:10:b9:46:26:06:11:a4:63:7f:ef:db:d5:f8:
84:52:4f:49:46:a2:cd:b8:25:0d:07:a2:8e:ae:bd:2e:5d:42:
8c:85:8d:0d:40:ba:8c:07:f7:a0:1d:de:ac:67:ca:73:fb:c1:
75:45:d6:65:2a:1c:4d:a4:4d:5c:32:42:bb:83:cb:38:92:59:
f2:c0:3a:ea:9d:26:64:dc:d2:58:0a:46:f3:d2:c0:44:67:99:
4e:0d:25:ef:be:fb:5c:e3:48:ca:f8:c5:9e:14:44:a6:31:ad:
0a:b6:df:da:b5:bd:55:58:f5:77:c9:1e:95:6a:0b:05:26:5a:
c9:80:93:4f:39:53:be:4a:ef:f8:39:5f:29:10:7b:16:c8:e5:
e7:7d:53:23:06:d1:5f:09:a8:ff:15:97:12:4c:8e:df:38:91:
95:25:72:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:14 2026 by rpki-client