Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A061B27B6711F183ED91BFCE1D38B0.roa
File: 25A061B27B6711F183ED91BFCE1D38B0.roa (raw, json)
Hash identifier: z4aVKa3hbkM0Nu6keIXX0mHicrm7LMyOJaykWPL2+Io=
Subject key identifier: 36:CB:47:D1:33:38:00:3E:9E:03:9E:98:6A:FA:A3:EA:A3:24:C0:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A061B27B6711F183ED91BFCE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:23:57 +0000
ROA not before: Thu 09 Jul 2026 07:23:52 +0000
ROA not after: Fri 14 Aug 2026 07:23:52 +0000
asID: 213690
IP address blocks: 156.249.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 13 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115677 (0x1c3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:23:52 2026 GMT
Not After : Aug 14 07:23:52 2026 GMT
Subject: CN=6a4f4c8d-8453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:a9:da:80:6c:f5:b8:1e:43:61:54:4e:3c:
72:b2:11:d5:49:e0:5c:5d:72:25:a1:fa:2c:83:af:
49:02:f1:9c:9e:e5:12:bc:c6:cb:8e:a4:0a:f8:a6:
b2:92:5d:69:c2:3d:29:32:eb:dc:49:d3:11:36:90:
67:68:43:a6:16:0f:5a:49:7c:67:2a:fc:55:a4:e5:
c0:e4:68:c0:c2:a2:15:0b:3c:8f:43:c6:30:c1:e5:
c9:21:00:72:96:52:90:c4:1d:53:13:82:6f:ec:80:
bc:fc:b0:57:f2:b4:36:43:02:80:bb:76:20:7a:e0:
9f:89:68:46:cf:ec:01:38:c8:09:12:fd:bf:22:c7:
3c:e9:18:8c:60:fb:8d:e8:13:85:8c:53:81:06:56:
c9:13:ce:e0:df:a2:02:8e:b5:15:cd:58:c7:4b:b3:
62:8a:39:e4:b3:18:21:54:53:dc:38:2a:68:45:51:
55:84:4e:19:63:98:d2:41:35:e0:f1:f0:46:f2:48:
d7:90:6f:9c:cf:be:4c:f4:34:e0:75:df:14:14:4c:
cd:2a:77:9e:83:fa:91:97:eb:d0:8b:49:65:ca:13:
07:bb:a1:43:37:71:cc:19:7b:83:8c:e2:7e:df:e9:
75:46:1e:04:20:76:d5:20:e7:b9:67:dd:a4:de:13:
70:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CB:47:D1:33:38:00:3E:9E:03:9E:98:6A:FA:A3:EA:A3:24:C0:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25A061B27B6711F183ED91BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:e0:8f:12:f7:17:59:2b:7c:53:ba:17:21:70:2e:97:0c:98:
59:43:61:be:8c:ea:8a:e6:68:bd:b6:1c:64:4f:9d:48:64:f3:
4e:cc:97:5f:4d:a5:6c:27:83:54:70:82:2a:50:6b:8d:a3:2c:
08:ad:ac:72:98:af:b2:e6:5a:80:b0:80:cb:14:fc:2d:e5:d3:
2d:52:b3:6a:05:a8:0a:da:ba:96:1f:75:be:5c:ef:5e:c3:40:
01:c4:a0:f8:4b:87:5c:51:cb:d4:75:1a:69:2e:36:1c:60:ff:
1b:5a:cd:84:63:28:f6:f2:c3:bc:ce:99:de:74:3b:b2:04:2c:
13:da:92:80:8d:a1:b5:80:72:5e:a0:c7:d5:4c:2a:28:56:83:
99:25:d8:59:6d:b2:49:7d:9f:14:81:af:a9:99:a0:1f:53:d0:
9f:39:e5:e6:c2:2f:00:33:0b:6c:92:28:81:51:ed:cb:65:57:
21:3f:76:e4:73:e1:b0:18:cd:58:5f:af:85:f4:de:0d:7e:9e:
6d:ad:66:8a:c3:ab:82:2f:62:c4:bd:65:16:9b:48:43:02:ab:
e0:9e:54:88:d5:8e:53:3d:53:b8:1b:ed:a6:04:73:7a:1f:f6:
db:46:4a:6a:97:ec:87:c4:cf:46:26:09:bc:41:11:f6:e2:66:
24:df:24:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 01:33:59 2026 by rpki-client