Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BA2AB06BB711F1A551C8E1CE1D38B0.roa
File: 27BA2AB06BB711F1A551C8E1CE1D38B0.roa (raw, json)
Hash identifier: NQxZ9KcRaIlXta0NP+tjKD56M9exU9IxizQ7h9Y9YuY=
Subject key identifier: E1:F9:9E:85:B3:CC:D8:2A:FE:59:E1:C9:A8:DB:FA:6C:30:ED:D0:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BA2AB06BB711F1A551C8E1CE1D38B0.roa
Signing time: Fri 19 Jun 2026 08:16:22 +0000
ROA not before: Fri 19 Jun 2026 08:16:16 +0000
ROA not after: Thu 24 Jun 2027 08:16:16 +0000
asID: 142132
IP address blocks: 156.231.136.0/24 maxlen: 24
156.231.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114462 (0x1bf1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 08:16:16 2026 GMT
Not After : Jun 24 08:16:16 2027 GMT
Subject: CN=6a34fad6-1c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:9b:f3:1e:4d:03:6e:78:6c:41:f9:dc:41:
ba:7f:52:79:b4:b5:c0:69:77:f0:c2:79:b2:ec:8c:
49:bb:94:42:00:f1:63:93:77:ad:f1:de:7a:7a:90:
30:e2:6d:e8:b7:78:c4:bc:72:f2:11:30:9e:b0:b7:
83:8a:42:ec:e7:7d:b0:1a:ae:63:98:c5:68:e6:76:
0a:77:36:f4:11:19:04:46:a5:36:4e:6a:50:3d:d2:
a3:32:a4:b3:bd:46:1c:21:06:7c:32:13:2b:3e:fb:
1e:a6:ef:91:e9:34:6f:ff:c6:e7:5b:b4:66:b2:82:
1a:5a:54:ab:24:9c:dc:7f:88:77:63:7b:e0:ee:09:
57:6a:8a:62:1c:c4:b1:92:46:39:57:5b:37:63:6f:
f1:e3:f1:7b:cd:d2:6c:23:f4:ab:b9:79:31:8b:4c:
f5:a4:97:98:35:d6:65:ef:4b:b3:18:aa:7a:7b:78:
f3:13:ba:73:03:5d:b0:68:8d:35:26:92:f3:c0:de:
b2:76:84:84:68:3d:53:37:b8:ba:16:5e:cb:ba:32:
a9:50:16:ce:b9:e8:e2:cd:dc:8b:df:16:a1:d0:93:
ea:ec:91:54:23:de:ed:38:ee:ff:d9:0e:66:13:90:
4b:7b:e4:f6:e3:07:db:f1:fd:18:94:2c:e4:06:0e:
6f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F9:9E:85:B3:CC:D8:2A:FE:59:E1:C9:A8:DB:FA:6C:30:ED:D0:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27BA2AB06BB711F1A551C8E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:99:e6:55:71:fc:fc:79:72:fb:2b:56:a9:db:05:97:78:0f:
de:09:19:af:37:b1:9e:09:78:52:dc:e6:6b:f6:58:59:e3:19:
d7:76:1c:b7:c4:23:46:14:a3:68:7d:d3:83:b2:32:88:70:91:
1a:89:e3:c6:40:64:37:4b:03:21:01:b8:07:de:3f:77:1e:04:
47:e3:ab:97:c4:03:e3:a6:de:91:71:8c:d5:db:62:96:bb:b2:
78:bb:f0:e4:3b:56:4d:63:c9:a1:16:6d:c6:3d:41:62:6e:d4:
eb:a3:31:ed:18:d2:65:80:0b:30:18:c1:e8:b8:e6:6c:f7:1b:
f4:56:ab:69:c1:ff:fb:97:68:aa:7b:f8:cc:e8:52:0b:f2:0f:
0a:56:ce:96:fc:b5:99:9f:03:bf:ad:e0:95:79:dc:e6:64:3e:
25:b9:af:7e:cf:98:f8:ff:09:9f:67:b8:90:ca:8f:92:ef:04:
d2:64:f7:1a:32:03:c2:71:1c:fd:34:69:33:4c:a2:de:d2:92:
de:f0:8d:09:b9:e8:c5:98:a8:0d:93:54:ea:2b:0f:1f:d3:57:
aa:9a:75:20:d0:19:4d:61:94:62:43:c9:35:0b:59:c1:67:77:
43:b2:4c:e6:c0:10:99:9e:5b:47:12:f7:74:d1:e8:85:b6:75:
c9:aa:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:40 2026 by rpki-client