Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/028E1DF8802211F198E4F406CF1D38B0.roa
File: 028E1DF8802211F198E4F406CF1D38B0.roa (raw, json)
Hash identifier: cHdtQgoMTVcG/+wRGizczSo4gvfTzZiyj3B0XQyn+LM=
Subject key identifier: 29:51:D6:D9:1C:EF:60:58:DE:49:1B:22:CC:8D:C8:A6:0B:C0:57:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C53A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/028E1DF8802211F198E4F406CF1D38B0.roa
Signing time: Wed 15 Jul 2026 07:51:39 +0000
ROA not before: Wed 15 Jul 2026 07:51:35 +0000
ROA not after: Mon 24 Aug 2026 07:51:35 +0000
asID: 214413
IP address blocks: 156.229.56.0/22 maxlen: 24
156.233.216.0/22 maxlen: 24
156.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116026 (0x1c53a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 15 07:51:35 2026 GMT
Not After : Aug 24 07:51:35 2026 GMT
Subject: CN=6a573c0b-69d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:35:96:df:d5:29:ce:af:a1:92:15:f8:b6:
4c:7d:19:41:bf:78:c4:81:7a:76:53:38:10:4d:e0:
d8:73:10:6d:79:90:ee:e0:e2:9f:b5:5e:45:44:8f:
5c:54:9f:c7:a6:6d:26:bd:73:8f:df:ab:4a:b8:8e:
87:5e:28:d1:b5:6a:64:ef:e1:75:50:6b:64:95:e2:
53:c4:c2:bb:0f:d1:1b:7a:37:28:08:e2:72:82:32:
2b:c1:1e:8b:49:b3:b0:40:df:43:f8:24:2c:02:6a:
65:a3:3a:1a:00:fe:d5:e2:43:23:5a:f4:36:0b:fb:
a4:58:dd:af:40:c2:f4:78:60:6e:cf:98:48:af:81:
52:40:44:16:f3:26:d9:67:1c:c5:94:22:89:34:7e:
35:a7:03:45:f7:c5:85:15:ce:6e:9d:ce:5f:7a:4d:
10:a1:28:4d:c1:bc:fd:0c:0d:a4:47:9c:a8:41:a5:
2b:3e:b3:f0:e5:b7:ee:c0:66:ea:bd:3c:07:a6:a7:
e8:0f:7c:bb:9e:d1:48:06:f1:68:5a:21:d2:93:19:
4a:52:7a:65:fc:d3:53:23:e6:6e:d4:c3:b4:36:c3:
76:8e:24:e5:a0:7f:e5:00:b2:8f:c9:64:4a:2f:09:
e9:d5:2b:4b:9b:0b:71:83:fa:a1:63:31:0b:73:7c:
f7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:51:D6:D9:1C:EF:60:58:DE:49:1B:22:CC:8D:C8:A6:0B:C0:57:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/028E1DF8802211F198E4F406CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/22
156.233.216.0/22
156.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
af:03:67:3d:65:fa:d1:6c:d2:ab:a4:73:86:68:19:5f:47:ca:
8e:2a:fc:68:09:0f:91:af:96:f4:08:83:6d:bc:2a:79:b2:5a:
d8:ed:07:cc:3c:9f:cf:fb:8e:42:c4:f2:b0:e2:d8:ef:0a:53:
d5:69:b6:ad:73:23:d9:ef:b0:5c:33:a9:ae:72:0b:2f:f2:0d:
f7:79:11:a0:97:8f:ea:48:68:58:66:3a:15:18:09:99:32:00:
54:a9:4f:f5:e0:b0:07:e8:f2:5d:ca:6c:06:1e:de:2f:8b:3c:
e9:86:1a:03:79:5d:42:95:c3:9c:3f:85:3b:d1:f1:f7:be:cd:
08:a9:8a:cb:86:11:ec:04:60:95:da:cb:90:51:01:76:8e:7a:
42:11:7b:3a:ec:5d:f7:97:9d:0c:c7:81:43:5e:ce:b1:3d:9d:
0b:43:61:79:e3:20:13:dd:c3:25:c8:ba:7c:74:92:cb:1c:1b:
3a:cd:9e:8d:7b:60:28:bd:7a:eb:64:15:a4:62:8b:be:43:8d:
d0:45:26:00:19:ea:0e:7f:4d:e3:fc:64:b2:47:76:dc:c7:69:
7f:ed:05:26:c7:2e:30:aa:bf:46:77:e0:b4:61:c5:84:5f:f6:
55:a1:fd:d8:29:9f:02:b3:31:f3:66:8a:a4:b2:2d:ae:cc:ad:
4e:c3:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:10 2026 by rpki-client