Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09092684698C11F1975221B0CE1D38B0.roa
File: 09092684698C11F1975221B0CE1D38B0.roa (raw, json)
Hash identifier: Bd9mglkpLF7zXAe2gMAMXv45U4KKRx0cz1OgyIlr7Xg=
Subject key identifier: 1D:F8:68:9E:79:A3:79:84:0A:8D:F2:C6:77:76:4B:CF:7D:F8:B0:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09092684698C11F1975221B0CE1D38B0.roa
Signing time: Tue 16 Jun 2026 14:02:40 +0000
ROA not before: Tue 16 Jun 2026 14:02:35 +0000
ROA not after: Wed 22 Jul 2026 14:02:35 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114206 (0x1be1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 14:02:35 2026 GMT
Not After : Jul 22 14:02:35 2026 GMT
Subject: CN=6a31577f-1cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:06:e8:81:28:0c:a1:5c:2b:d7:f1:9d:7c:ed:
a3:60:e0:be:b3:07:55:7a:f8:ff:4d:d6:a8:10:b5:
21:26:29:df:f2:63:c8:01:a7:c2:e6:cd:81:39:a4:
f0:f3:40:00:c2:12:2d:74:44:56:18:20:63:19:2a:
eb:93:46:04:ea:7b:b5:22:d0:eb:9e:c4:b5:2c:f9:
69:15:39:b3:eb:b3:05:fe:80:2b:ea:0f:4d:38:c7:
89:59:67:6c:64:30:26:aa:42:1c:bd:91:9e:f7:a5:
f8:5f:a0:6d:f2:cc:68:33:43:be:fa:0f:92:b5:5e:
25:2b:0c:e5:47:a6:07:7c:e7:c8:39:f1:1b:f4:08:
29:f1:04:44:ee:3c:7d:0b:1e:f6:28:93:63:07:14:
87:72:fe:6f:7a:41:eb:02:e2:f6:36:cb:0a:ff:84:
c5:ea:b0:16:20:33:f2:7d:65:fb:7a:4d:42:10:ea:
57:27:f6:c0:b9:69:84:05:4a:36:01:82:a4:69:fc:
a1:15:f7:fc:8d:3d:34:ee:92:bf:8d:cb:05:5e:ff:
32:4b:79:1f:72:1e:f1:51:15:5a:56:67:09:a5:13:
74:f3:e5:3a:a7:fa:9e:0e:4f:2e:ce:65:e3:a3:08:
e2:2f:64:55:55:e5:66:86:04:bd:b0:e3:fd:c0:07:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F8:68:9E:79:A3:79:84:0A:8D:F2:C6:77:76:4B:CF:7D:F8:B0:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09092684698C11F1975221B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
85:86:92:1a:c6:e0:f9:34:5c:6f:5e:ee:2d:2f:f1:05:1e:5f:
7c:36:71:b4:71:4c:9c:ab:1b:9b:ef:89:92:72:77:86:48:ca:
c1:64:0a:ea:21:f2:d2:52:12:82:27:b6:42:9b:44:58:04:cd:
86:93:4f:85:eb:76:ef:d8:06:91:00:f8:cc:70:c7:06:fd:19:
68:2e:f8:ac:16:d3:37:48:4f:88:b9:2e:47:e8:3c:41:1c:34:
19:14:b1:ed:ce:72:13:f4:7e:4b:8c:af:6d:73:43:bf:26:53:
47:3c:ee:f2:d5:14:32:98:71:ca:93:8e:b2:37:bf:b6:46:c4:
49:5c:9c:20:81:9d:4c:86:81:bb:5f:78:f5:4d:01:64:da:02:
fe:d5:63:78:3f:35:9a:0c:a7:e0:95:69:97:d7:e1:d6:a8:53:
f2:c8:c3:8f:46:1e:7b:65:71:52:61:8a:82:52:f9:7a:03:04:
66:76:f1:82:9e:36:1d:28:c3:08:a6:50:af:2b:5e:ca:84:f5:
3b:2c:c3:d6:ba:eb:a6:48:be:7d:6f:2a:43:d7:2a:16:ae:97:
b4:59:7b:6b:81:05:da:fe:ac:c9:af:9f:eb:58:18:f1:ef:5e:
30:4e:6c:ac:9a:af:3c:04:43:0d:4f:b9:01:ba:26:89:15:e6:
21:86:cf:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb4eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MTQwMjM1WhcNMjYwNzIyMTQwMjM1WjAYMRYw
FAYDVQQDEw02YTMxNTc3Zi0xY2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzgbogSgMoVwr1/GdfO2jYOC+swdVevj/TdaoELUhJinf8mPIAafC5s2B
OaTw80AAwhItdERWGCBjGSrrk0YE6nu1ItDrnsS1LPlpFTmz67MF/oAr6g9NOMeJ
WWdsZDAmqkIcvZGe96X4X6Bt8sxoM0O++g+StV4lKwzlR6YHfOfIOfEb9Agp8QRE
7jx9Cx72KJNjBxSHcv5vekHrAuL2NssK/4TF6rAWIDPyfWX7ek1CEOpXJ/bAuWmE
BUo2AYKkafyhFff8jT007pK/jcsFXv8yS3kfch7xURVaVmcJpRN08+U6p/qeDk8u
zmXjowjiL2RVVeVmhgS9sOP9wAf64QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB34
aJ55o3mECo3yxnd2S899+LCuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOTA5MjY4NDY5OEMxMUYxOTc1MjIxQjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQCFhpIaxuD5NFxvXu4tL/EFHl98NnG0cUycqxub74mScneGSMrBZArqIfLS
UhKCJ7ZCm0RYBM2Gk0+F63bv2AaRAPjMcMcG/RloLvisFtM3SE+IuS5H6DxBHDQZ
FLHtznIT9H5LjK9tc0O/JlNHPO7y1RQymHHKk46yN7+2RsRJXJwggZ1MhoG7X3j1
TQFk2gL+1WN4PzWaDKfglWmX1+HWqFPyyMOPRh57ZXFSYYqCUvl6AwRmdvGCnjYd
KMMIplCvK17KhPU7LMPWuuumSL59bypD1yoWrpe0WXtrgQXa/qzJr5/rWBjx714w
Tmysmq88BEMNT7kBuiaJFeYhhs8m
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:42 2026 by rpki-client