Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A8C67AE84F211F1A2F9211CCF1D38B0.roa
File: 2A8C67AE84F211F1A2F9211CCF1D38B0.roa (raw, json)
Hash identifier: V8+G00Vbd5WQXtUOJULRlR1vgPh1sZ/05q+v6rmuHfA=
Subject key identifier: CE:7F:7C:81:13:9D:90:E8:EE:D2:53:09:6B:26:D0:F8:9C:E8:16:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A8C67AE84F211F1A2F9211CCF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:51:46 +0000
ROA not before: Tue 21 Jul 2026 10:51:42 +0000
ROA not after: Sat 29 Aug 2026 10:51:42 +0000
asID: 44559
IP address blocks: 156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.196.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116458 (0x1c6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:51:42 2026 GMT
Not After : Aug 29 10:51:42 2026 GMT
Subject: CN=6a5f4f42-5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b1:2c:25:c4:ae:54:1a:25:8b:fc:a5:42:fe:
07:50:ac:c5:ea:df:9b:ce:16:4f:62:56:a8:76:1e:
83:cc:9f:38:12:67:ff:00:52:60:24:52:3f:0c:e5:
f4:7c:9b:5c:f6:bb:2c:3d:d0:bc:2a:f0:3c:01:12:
1e:4b:4d:2f:f8:41:e6:ee:c6:f7:69:c0:93:f1:6f:
d6:53:f4:65:e9:c9:fb:da:50:be:7d:58:cd:d1:52:
cb:a0:65:d3:a5:e3:4d:78:b8:5b:d2:61:2a:af:7a:
cc:9e:95:d5:bc:9b:73:33:83:5f:5c:bf:d6:7e:c9:
eb:27:66:67:4b:78:2c:7e:a2:73:f3:ed:bf:4f:79:
0c:95:11:a2:80:45:fe:ee:88:1c:a8:3b:d2:54:b7:
0b:10:00:f8:79:93:e8:8e:ae:48:b6:7c:14:e6:7a:
41:3a:7b:b5:75:94:f1:04:8b:29:59:90:9a:2d:0f:
a1:b4:ab:34:09:69:ec:77:a8:45:6b:f0:77:c5:2e:
29:62:be:2b:64:d2:3c:67:c9:49:81:5f:ed:d3:bf:
3a:1a:01:e9:d6:03:6f:a0:ef:0f:fc:1a:2d:81:99:
70:0c:a6:03:48:b3:1c:64:3d:89:2f:d3:87:2b:73:
a5:02:bf:20:49:f6:59:af:70:ae:8a:e5:11:09:4a:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:7C:81:13:9D:90:E8:EE:D2:53:09:6B:26:D0:F8:9C:E8:16:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A8C67AE84F211F1A2F9211CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.177.0-156.246.178.255
156.246.190.0-156.246.197.255
Signature Algorithm: sha256WithRSAEncryption
88:c5:f8:b8:20:37:e6:9a:a0:a9:c6:4d:bb:2d:97:2c:99:c9:
cb:c5:e3:ec:17:6e:5c:f1:26:51:0e:42:a3:ca:20:54:05:25:
bc:8d:9f:80:34:93:ed:0a:46:e2:d2:8a:d9:8d:f7:ca:34:c5:
4c:1c:ee:15:c9:e5:bc:d0:d0:e3:cb:5d:dc:da:d6:9d:9d:bf:
a9:c9:23:93:e9:c0:d0:da:24:bb:b3:1f:19:e3:2a:35:d2:dc:
ff:5c:6e:35:f8:04:02:16:61:4c:b6:6b:e4:41:3d:af:fe:52:
d7:cd:77:e2:4c:b4:57:de:ef:a2:20:6d:5b:fd:bf:7b:af:3c:
c6:20:7f:05:27:2b:32:8d:f7:12:96:1b:46:d6:36:9a:9c:3e:
06:ff:02:9c:a8:b1:bb:7c:4d:c4:41:17:5b:96:7e:00:55:75:
2c:83:9d:e7:c9:2c:60:95:0e:49:04:e3:c7:2a:a7:94:82:d6:
91:58:64:ea:30:82:8e:9e:b7:f4:e0:48:9c:3b:84:48:cd:ae:
32:3e:17:f9:8c:d9:3e:2e:4b:d9:c1:8d:5e:ef:5d:fe:cc:16:
43:9f:ed:65:c7:0d:ae:79:ee:33:be:50:d2:10:f5:a3:3a:ef:
d2:fe:e9:69:e8:1c:33:b4:0a:99:61:cb:a1:c7:8c:30:96:62:
ba:90:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:48 2026 by rpki-client