Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CE37D22779211F1BC8FBDBDCE1D38B0.roa
File: 0CE37D22779211F1BC8FBDBDCE1D38B0.roa (raw, json)
Hash identifier: nk8AmVd2HkLhKN6huTDZhZsJqHFRhT9RBXn4VTJw8yM=
Subject key identifier: 49:9D:50:6F:04:DA:BB:D1:4F:21:CC:AC:BD:EC:FC:98:76:8C:27:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CE37D22779211F1BC8FBDBDCE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:21:00 +0000
ROA not before: Sat 04 Jul 2026 10:20:54 +0000
ROA not after: Mon 10 Aug 2026 10:20:54 +0000
asID: 61112
IP address blocks: 156.224.76.0/22 maxlen: 24
156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115423 (0x1c2df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:20:54 2026 GMT
Not After : Aug 10 10:20:54 2026 GMT
Subject: CN=6a48de8c-3e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:5a:a8:14:97:0c:d9:da:b4:d7:94:4c:0b:
25:ea:e1:d2:a7:65:b6:48:48:a2:16:07:1f:24:39:
27:19:52:70:67:65:24:b6:dd:08:07:21:82:ed:93:
87:28:7a:ff:2b:6c:94:2e:ac:73:35:f1:ee:31:2b:
72:1a:85:8c:ba:aa:62:54:dd:4e:d7:70:9d:25:2a:
6f:48:75:cb:48:66:fc:fb:3a:44:87:99:9b:57:5f:
09:65:38:5c:95:71:b2:27:ea:6f:7e:17:41:0d:a2:
03:76:d6:48:72:eb:40:af:43:46:4f:e4:44:71:55:
e8:02:64:5d:8c:15:9e:c1:3c:49:75:2e:ed:0d:a7:
0f:3a:23:bd:54:ca:b9:d5:d6:e4:e7:c3:9b:f8:b7:
38:92:61:41:eb:56:a8:e3:40:7b:c9:08:86:86:17:
5f:da:01:6b:f3:45:05:12:eb:1f:24:79:e4:c8:96:
fd:54:a8:2d:f3:c8:fc:44:f8:0f:b0:ee:4d:f4:05:
b0:31:b2:95:ab:6d:08:b5:0b:ad:df:50:df:06:88:
7a:19:5c:d8:a1:a1:e1:e4:68:30:9e:f2:98:73:98:
58:73:90:fd:5d:ae:39:21:8a:4a:dd:42:93:dd:9a:
4b:97:84:eb:8f:42:0c:35:80:23:6e:bb:cc:73:3c:
60:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:50:6F:04:DA:BB:D1:4F:21:CC:AC:BD:EC:FC:98:76:8C:27:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CE37D22779211F1BC8FBDBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.76.0/22
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:da:68:8f:d1:ee:eb:14:96:a6:d4:02:b0:84:b6:19:e1:bc:
70:54:1c:6d:f5:95:b3:64:6f:56:84:53:40:21:f0:26:39:49:
19:a4:85:77:e8:bd:fe:7a:d2:0e:ef:e8:c5:b2:ea:2d:bc:c9:
0f:f1:0b:30:ec:3f:aa:a0:7f:08:02:83:b7:1b:c2:88:09:39:
0d:b9:13:38:b5:07:44:72:18:69:b1:46:9c:8e:56:0f:d4:76:
ad:80:e4:0a:df:f3:f3:5c:5e:88:b2:f4:0a:96:fa:9d:22:ee:
a1:46:c2:6e:4b:5a:1f:be:9f:96:33:75:17:09:27:d8:4a:19:
1e:b1:61:e7:89:1e:40:d7:52:40:54:e3:59:14:f9:8d:2e:28:
f7:a9:ff:50:05:9c:ce:12:27:9e:70:e0:8b:24:65:2b:4c:91:
f8:81:ef:57:12:a5:f7:91:ca:1c:fb:fe:fc:15:b5:24:b4:3c:
e1:f2:62:65:a2:58:bb:a9:0a:ea:62:d6:a7:37:ff:a1:d0:d1:
e3:f7:9d:c3:33:0b:ee:03:36:7c:d3:7c:3d:fa:7f:c8:6e:9f:
b5:92:ee:25:22:8d:65:25:18:cb:f3:b5:8a:55:e9:35:02:aa:
02:98:93:82:ee:67:4a:fc:97:b2:80:4e:55:a7:8a:ea:f2:44:
20:dd:4c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:41 2026 by rpki-client