Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/246555BC6E6211F190B973D4CE1D38B0.roa
File: 246555BC6E6211F190B973D4CE1D38B0.roa (raw, json)
Hash identifier: aIFwDo/RQOeSxJNIwiV6Mhl1xFiS8jdVBBHAadO+YIw=
Subject key identifier: 9A:DC:10:F5:93:F1:5F:C1:92:B3:96:1F:C0:39:76:57:30:8F:1F:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/246555BC6E6211F190B973D4CE1D38B0.roa
Signing time: Mon 22 Jun 2026 17:45:22 +0000
ROA not before: Mon 22 Jun 2026 17:45:18 +0000
ROA not after: Tue 28 Jul 2026 17:45:18 +0000
asID: 8254
IP address blocks: 156.246.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 30 Jun 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114608 (0x1bfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 17:45:18 2026 GMT
Not After : Jul 28 17:45:18 2026 GMT
Subject: CN=6a3974b2-427b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:1f:f0:93:68:de:04:71:e9:07:83:dc:d7:
90:a8:c3:6a:e7:bc:c3:85:21:24:9d:dd:5e:ba:41:
9b:2c:92:e6:18:e0:db:3f:94:08:b1:a2:97:e6:3c:
9f:dc:84:a5:5e:a5:84:f0:f7:68:63:5d:59:85:cc:
12:1b:af:e3:86:77:a3:25:20:1e:cb:ea:a4:93:88:
e8:b8:1f:76:45:99:ac:44:73:b3:32:0e:09:73:a3:
6c:9f:87:ba:98:54:b8:75:f9:5a:83:ba:9c:71:90:
3b:02:0c:55:f0:d0:58:2a:f7:16:5e:f1:6c:9c:2c:
5a:94:a9:f5:3b:04:18:d3:2b:a0:0b:5e:96:bf:67:
08:1c:79:3c:40:2b:27:c9:40:c6:68:46:16:10:6e:
17:fc:f3:73:e8:8d:91:07:81:2b:44:17:c5:7b:00:
de:87:ba:5c:55:66:3e:59:06:eb:fe:d9:36:89:f2:
96:4a:8e:22:ee:42:c3:45:2c:8f:ae:fc:3b:17:8d:
58:dd:27:70:ef:52:ed:a0:1b:52:20:5d:0f:db:c3:
b0:e4:c2:cb:bd:71:97:4a:52:4f:c0:ab:cd:b1:47:
44:af:5f:2f:0b:ff:14:a7:be:2a:36:79:c1:39:5f:
50:3e:da:9f:43:d1:d7:79:a1:e5:9e:44:10:17:25:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:10:F5:93:F1:5F:C1:92:B3:96:1F:C0:39:76:57:30:8F:1F:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/246555BC6E6211F190B973D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b4:10:4b:43:00:d8:d9:0b:b9:a9:d4:3e:a4:5f:c1:ed:a2:
9f:ea:d3:dd:d7:87:d0:a3:5e:11:04:7e:ae:07:53:3e:68:47:
5f:49:b9:ee:aa:19:8b:0e:14:80:7b:84:aa:26:a8:29:cb:f8:
0f:2f:bb:ef:03:00:97:3e:44:be:34:dd:71:41:91:49:16:35:
fa:0a:d5:4b:67:29:3e:1d:7b:8f:71:f7:e3:98:12:78:26:94:
1d:76:45:c2:de:81:13:73:8a:91:f9:56:67:93:60:60:3b:b9:
60:a5:16:fb:3f:df:63:29:98:ac:4d:b6:47:90:42:66:dc:ea:
c1:5c:93:16:90:48:ed:25:4b:2e:1c:75:38:e5:78:00:13:80:
f0:79:fd:fc:92:ab:ee:97:e8:2f:16:5d:af:5e:35:fc:4a:55:
dc:da:0b:42:1a:23:ad:b3:67:8b:c1:fc:c1:82:53:8e:90:a1:
6a:1d:0a:35:a1:b2:01:7b:c8:f6:0b:a0:e9:ab:fb:9f:67:bc:
f9:7e:2f:bf:d8:7e:3a:42:49:25:4e:c4:aa:f6:83:c9:56:09:
ca:27:db:89:07:42:85:5c:32:5e:cb:d5:02:6a:53:91:ce:3a:
46:f6:99:35:dd:03:cd:00:1c:59:6b:fe:05:04:64:f7:a4:6f:
d4:07:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 03:21:56 2026 by rpki-client