Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07F5C40C6AED11F1B2232C1CCF1D38B0.roa
File: 07F5C40C6AED11F1B2232C1CCF1D38B0.roa (raw, json)
Hash identifier: kBBFitMbnwZj5q8/+cfcMWAh7sugSW2m6UMXJQ0n0ac=
Subject key identifier: 16:19:74:F8:6B:C0:66:63:10:CC:D5:6F:A2:FD:A5:17:47:EE:DF:07
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07F5C40C6AED11F1B2232C1CCF1D38B0.roa
Signing time: Thu 18 Jun 2026 08:09:30 +0000
ROA not before: Thu 18 Jun 2026 08:09:26 +0000
ROA not after: Sat 25 Jul 2026 08:09:26 +0000
asID: 271355
IP address blocks: 156.236.194.0/24 maxlen: 24
156.236.195.0/24 maxlen: 24
156.236.196.0/24 maxlen: 24
156.236.197.0/24 maxlen: 24
156.236.198.0/24 maxlen: 24
156.236.199.0/24 maxlen: 24
156.236.200.0/24 maxlen: 24
156.236.201.0/24 maxlen: 24
156.236.202.0/24 maxlen: 24
156.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114422 (0x1bef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 08:09:26 2026 GMT
Not After : Jul 25 08:09:26 2026 GMT
Subject: CN=6a33a7ba-24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:3c:4b:85:a7:12:d1:ff:ee:f1:5d:ea:12:
8f:94:3a:ce:d7:f1:bb:d6:bf:b4:a1:4a:05:ff:18:
f0:c3:67:f4:4d:30:a6:dc:15:aa:f2:b2:9e:80:ad:
a0:0b:05:35:97:f2:b5:a8:ce:a1:97:18:fe:36:f2:
9b:ca:16:64:03:98:4e:80:bf:01:ba:85:fc:06:4b:
10:d3:0c:2c:d7:4b:ed:45:91:40:41:9b:41:e8:e5:
1d:41:3d:7e:af:5b:80:e4:3f:45:a5:91:fb:52:67:
c3:5a:05:d3:58:46:1f:ef:4b:04:82:f1:85:26:63:
61:ee:e3:8e:80:4c:5f:87:27:cb:04:95:1d:ef:8f:
91:0d:6b:1e:14:78:df:3e:6d:05:ea:f7:88:16:ea:
f9:6f:e2:d5:70:ea:cb:e9:d3:b1:4f:ae:9c:91:16:
25:91:58:5b:d3:bc:f6:de:50:76:7a:0b:6f:99:d7:
3f:33:d2:c5:d1:39:72:50:23:4c:36:d7:6b:7b:34:
62:a5:6a:35:96:ab:88:7c:ca:3a:ad:61:ef:f1:3f:
d6:22:d9:ca:66:ae:4a:ff:68:72:d4:09:1d:27:ac:
fb:86:da:a0:bd:ee:6e:1f:2a:78:fa:b0:1f:6e:bb:
18:61:00:db:9c:04:e2:b8:d5:b6:92:68:3e:12:ba:
d9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:74:F8:6B:C0:66:63:10:CC:D5:6F:A2:FD:A5:17:47:EE:DF:07
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07F5C40C6AED11F1B2232C1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.194.0-156.236.203.255
Signature Algorithm: sha256WithRSAEncryption
6f:c5:2a:0e:3d:94:91:e7:cb:1b:6b:1f:78:38:ea:c8:62:6b:
96:6a:de:5b:29:4d:33:a1:8f:c2:3b:1b:2b:5b:5a:fe:70:86:
54:52:c0:1e:fc:c3:cb:49:31:30:a8:ae:66:b1:2c:26:b7:8e:
1d:ba:ee:ca:79:e0:c4:c8:1e:3e:19:25:e1:66:d5:e0:07:ad:
21:1a:ac:07:35:fd:dd:81:03:fa:9b:d5:54:9b:bf:45:b6:f5:
06:92:0f:4b:5e:a9:49:2a:9e:27:d0:2c:10:fd:1c:19:44:43:
b5:53:59:94:89:7d:55:aa:15:90:c4:87:1a:2a:75:7c:e0:77:
32:5c:b6:b4:07:62:18:32:cb:17:0e:e0:7f:9e:55:ae:b7:c3:
a6:4e:e2:40:87:77:96:50:00:07:3a:94:89:33:36:32:e5:46:
a6:b8:46:6c:03:16:eb:a0:92:ed:b2:82:68:10:a8:19:7c:b4:
9f:68:3b:f7:27:7c:80:9b:e4:7a:25:76:d6:3c:21:f4:98:40:
18:f1:1e:f6:9f:62:55:98:33:8e:cf:a0:79:71:c2:a8:da:c5:
68:0c:94:0b:2b:35:e6:01:72:67:a1:d8:9d:1d:e2:24:f9:f3:
1a:88:d5:74:31:1c:f6:ae:92:cc:33:82:88:0a:27:47:3a:6d:
de:d1:5b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:34 2026 by rpki-client