Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083DF236716E11F1B3DC47DFCE1D38B0.roa
File: 083DF236716E11F1B3DC47DFCE1D38B0.roa (raw, json)
Hash identifier: WGhMKN4YpZ4oUUE16z4gnELGflozU6Pi+VhTDlSqwXQ=
Subject key identifier: 94:BF:D9:93:24:3B:AA:99:EF:CB:88:D3:9D:8D:00:78:29:6F:35:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083DF236716E11F1B3DC47DFCE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:48:03 +0000
ROA not before: Fri 26 Jun 2026 14:47:58 +0000
ROA not after: Tue 04 Aug 2026 14:47:58 +0000
asID: 151407
IP address blocks: 156.248.11.0/24 maxlen: 24
156.248.12.0/24 maxlen: 24
156.248.13.0/24 maxlen: 24
156.248.14.0/24 maxlen: 24
156.248.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114865 (0x1c0b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 14:47:58 2026 GMT
Not After : Aug 4 14:47:58 2026 GMT
Subject: CN=6a3e9123-2006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:f7:d9:62:17:7d:fc:eb:76:6e:12:f6:dc:
40:2d:9d:60:67:28:40:c9:21:ba:9d:85:ed:3f:9c:
b7:e0:6c:a3:e1:53:73:68:3f:d4:60:a1:d4:cb:6d:
0a:3b:22:60:5f:7b:0f:85:d2:00:27:a3:1e:57:6f:
4b:10:9b:03:93:97:ad:3d:72:7c:df:bf:22:c3:bf:
12:a0:f4:06:21:11:9b:dd:9e:fa:43:3a:2a:38:0b:
ce:bb:af:47:a7:f7:58:85:31:1a:56:68:d2:27:d5:
96:51:c0:91:dc:ca:e2:f0:92:b4:06:13:11:82:3f:
38:86:57:de:8b:82:0c:b6:35:d8:d6:92:f1:96:42:
7a:30:c3:ac:1c:52:3e:b2:70:ce:52:54:cb:31:75:
0f:ba:44:73:42:19:b7:ab:9b:3d:43:8b:6d:64:01:
76:41:49:67:04:44:a4:58:b9:9e:43:79:b4:7d:6a:
e0:ea:d1:9e:6c:f8:6c:94:99:e6:5b:61:4a:89:33:
c3:c6:62:8f:0e:d7:b5:04:63:35:a2:60:f4:83:b3:
3f:6f:0d:94:aa:a9:f9:93:ce:a9:5c:1c:9b:fd:fc:
aa:c3:34:51:fd:cc:4d:b8:12:d5:0b:79:f3:c8:d6:
43:cc:cf:8c:2a:36:fe:24:4b:3c:79:49:3c:6e:6d:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:D9:93:24:3B:AA:99:EF:CB:88:D3:9D:8D:00:78:29:6F:35:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/083DF236716E11F1B3DC47DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.11.0-156.248.15.255
Signature Algorithm: sha256WithRSAEncryption
90:31:4b:88:c4:d7:f3:12:35:7d:dc:45:f8:84:dd:67:da:68:
b4:67:c1:05:38:57:3b:22:00:20:8c:a9:5a:19:d5:56:b1:f8:
89:8e:48:15:fd:be:75:12:1c:33:4a:e5:33:66:fb:7a:0c:f5:
94:b3:99:36:c8:79:e2:ac:e6:f4:e7:76:60:31:8b:e6:58:cf:
cf:16:59:9a:25:21:15:fa:a8:c8:4a:cd:da:6f:1c:b6:8b:af:
28:53:5d:0f:b4:26:bd:ab:ae:aa:88:d6:f1:c5:18:8a:1e:be:
be:37:ee:e6:6d:21:3a:a0:4a:a4:d5:49:36:36:ef:0c:e9:06:
16:2d:2c:a6:d9:cc:0e:41:1f:53:c1:58:61:e5:57:09:c5:15:
2d:ae:86:4a:7c:3a:5f:43:8c:dc:5f:79:3a:78:52:a4:72:27:
e1:22:2a:6d:9c:c8:b8:c4:a8:4a:e9:03:cd:34:20:d6:1a:05:
db:c9:fa:fb:d6:53:e4:49:0b:2c:ef:57:25:23:5e:64:33:5a:
e5:19:0a:93:a2:15:ee:0f:c9:73:26:53:b4:aa:dd:31:76:b3:
3f:45:49:f7:db:71:90:f8:cf:aa:2f:41:d4:b8:da:61:d9:2d:
76:0c:25:ce:34:38:a0:16:d7:ff:40:e4:b2:47:42:89:69:17:
d7:f9:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:06 2026 by rpki-client