Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B9AE0D87D5111F19DF3FEDBCE1D38B0.roa
File: 2B9AE0D87D5111F19DF3FEDBCE1D38B0.roa (raw, json)
Hash identifier: bqILPkQgGF+0v5eFIpTazn+6V5W21Bk2xQEM5sjjycA=
Subject key identifier: 66:76:D9:B6:3F:82:D5:57:E9:AE:76:C5:B7:5B:26:59:36:57:E0:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C485
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B9AE0D87D5111F19DF3FEDBCE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:51:40 +0000
ROA not before: Sat 11 Jul 2026 17:51:36 +0000
ROA not after: Tue 18 Aug 2026 17:51:36 +0000
asID: 40065
IP address blocks: 156.241.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115845 (0x1c485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 17:51:36 2026 GMT
Not After : Aug 18 17:51:36 2026 GMT
Subject: CN=6a5282ac-755c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:e2:88:be:2f:36:ef:b7:25:ac:8a:11:24:
51:55:b5:1c:d1:2c:db:ca:b4:01:d8:b3:67:fc:d9:
66:58:6a:43:da:b6:b5:b9:5c:3a:3a:d2:3e:e2:eb:
80:8f:32:d7:b2:f0:0d:d6:85:20:a7:43:20:14:85:
47:ce:16:c7:d7:d9:19:4f:75:84:6a:9b:ae:98:47:
e5:f0:ff:1b:08:05:43:86:56:7b:6e:de:44:20:ff:
df:52:4a:e4:49:fb:a9:da:de:8c:59:e6:47:d4:c3:
f6:b7:7a:6e:d9:c2:80:30:a6:7b:ca:43:a4:25:6d:
a7:a8:62:64:99:80:95:f1:1a:fc:c7:f3:64:c1:84:
a8:c4:3d:e1:f0:93:36:1c:1c:b7:fa:98:f4:3e:7b:
f1:09:f3:ae:f6:bd:77:cb:4c:18:06:90:4e:1a:47:
8e:53:f2:b9:e7:86:79:fa:54:b7:d9:96:f0:29:4a:
d1:cc:d6:7e:4b:6e:dc:39:62:50:e6:19:78:6c:9f:
27:89:66:00:17:71:78:00:d4:89:b5:8d:67:e0:9c:
67:50:81:6f:02:12:7c:42:bd:f4:4f:84:8d:d5:46:
8e:37:ca:8c:6f:5e:14:ff:b7:95:9c:73:3b:e5:b7:
ee:6f:24:c5:c3:f7:ba:a6:f2:93:92:a0:3f:47:5b:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:76:D9:B6:3F:82:D5:57:E9:AE:76:C5:B7:5B:26:59:36:57:E0:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B9AE0D87D5111F19DF3FEDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:ac:45:d8:51:9e:01:b3:e3:81:03:dd:f4:ed:36:bb:2e:46:
ca:e7:58:25:9a:ea:b3:98:d1:45:dd:74:ad:94:47:ae:c6:b3:
a8:04:d8:1d:bb:06:6c:6e:77:56:32:1c:8f:ce:8f:6e:3b:58:
0d:e8:f0:52:df:73:39:e4:6a:92:a3:33:0d:e3:fe:b0:b0:94:
fa:8c:f2:25:bd:66:ad:89:89:6d:8c:6c:36:92:87:23:d0:4a:
05:21:36:78:f5:51:44:85:ef:93:c6:fb:f4:cb:e7:96:6f:ed:
20:3e:41:15:87:ad:40:9b:1d:87:0b:26:0e:0d:fb:7d:45:89:
57:9f:14:37:84:25:5d:24:b5:b4:97:95:24:74:28:39:78:b5:
0c:36:84:88:b6:57:d6:a1:43:a6:7e:2b:09:ec:5e:95:57:d2:
37:21:6f:ba:ee:96:fa:ba:b6:7c:78:85:b2:e0:86:d6:9a:0d:
8f:0d:23:13:24:ba:6c:04:d5:af:e7:44:eb:8d:68:48:28:f2:
a9:60:49:4c:21:7d:d1:85:14:e0:b3:af:2a:aa:e6:6c:5a:47:
6b:18:18:e1:67:f0:d2:31:74:40:94:ab:72:61:0e:24:87:73:
3b:0b:e0:86:05:fb:ec:d4:8d:ab:d0:90:9f:88:e8:03:f9:e4:
61:a7:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:43 2026 by rpki-client