Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3004B872695811F19B8D73F9CE1D38B0.roa
File: 3004B872695811F19B8D73F9CE1D38B0.roa (raw, json)
Hash identifier: gGFVdmftuu6RD2p2dEShanjhuLomuUbSvqoLOJjwFnw=
Subject key identifier: 7B:21:BF:70:5D:BC:1F:8E:D9:2D:91:81:E4:28:EE:D0:F2:AB:BF:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3004B872695811F19B8D73F9CE1D38B0.roa
Signing time: Tue 16 Jun 2026 07:51:31 +0000
ROA not before: Tue 16 Jun 2026 07:51:27 +0000
ROA not after: Wed 22 Jul 2026 07:51:27 +0000
asID: 137899
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114154 (0x1bdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 07:51:27 2026 GMT
Not After : Jul 22 07:51:27 2026 GMT
Subject: CN=6a310083-b637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:77:b5:a4:ff:33:da:0c:d5:0f:be:16:ca:
8a:5d:8b:c5:60:e3:63:19:53:3c:db:52:b0:c4:55:
fa:b1:be:d5:46:60:cd:a4:49:ad:74:cf:76:e6:b5:
33:d7:52:51:cc:dd:9e:dc:de:24:5f:15:3f:a8:ca:
ad:0b:15:48:65:47:0b:9e:a1:44:c2:39:b1:f0:dc:
11:fc:b3:0d:e4:60:74:b1:ba:ca:cc:54:f7:89:d7:
b5:0a:18:9c:ad:b2:f2:e0:f0:b9:e7:c3:81:bc:e3:
26:df:45:f7:61:fb:55:1c:28:74:f6:43:50:2d:90:
09:66:c0:92:ac:24:e8:55:4b:c8:23:b1:fa:b4:4f:
24:d9:e4:e6:aa:96:fa:ae:5f:10:92:fd:f8:bb:60:
58:69:f9:77:c9:38:60:64:32:b1:b0:4f:5d:ce:85:
36:1e:8e:78:07:f8:21:85:fc:71:1e:e3:3e:bd:2c:
4a:1f:00:10:bd:f4:38:4a:4c:bf:4a:c9:af:c7:eb:
59:04:ef:e7:ca:aa:be:6d:81:a1:bb:65:94:47:98:
91:e8:96:12:20:9d:6e:ca:ae:6e:36:29:66:e4:69:
42:9a:8f:37:af:6a:98:66:02:9b:39:b9:e7:c3:a0:
9f:c4:a7:3d:3a:d2:b1:c6:8a:46:21:ab:00:22:59:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:21:BF:70:5D:BC:1F:8E:D9:2D:91:81:E4:28:EE:D0:F2:AB:BF:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3004B872695811F19B8D73F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:14:59:6e:68:7f:e5:05:28:26:41:fa:71:5f:68:7b:e3:f6:
1e:6f:e0:94:33:23:1f:8e:c0:d2:64:2f:f1:e8:22:2e:2b:d7:
8a:1f:e6:e6:ca:98:f1:15:bc:ca:d5:bb:88:9a:3f:60:cf:70:
23:b5:86:5d:8c:2d:93:c8:c7:7c:8a:49:57:04:27:93:c8:55:
f9:e8:5b:23:58:ba:2a:7d:d9:39:92:8c:89:c6:67:a7:de:1c:
d5:bc:05:f5:32:2c:8e:b5:e8:d0:5c:da:89:19:ce:1f:9b:7a:
a8:b2:0b:41:c6:eb:14:b9:6b:d9:b0:54:b2:93:8a:22:1d:fc:
7c:d5:fd:7a:ba:7e:ca:eb:b3:03:ed:8d:65:80:bc:e3:cf:16:
fc:1f:20:a6:15:01:19:81:ac:d0:ab:6c:34:40:39:f5:a7:d9:
bd:a3:93:09:ec:2d:c8:80:cf:e3:80:f2:85:24:c6:ae:57:b7:
68:4c:74:a2:ef:9c:2b:77:53:3b:87:17:2f:45:ed:f7:42:c5:
45:4a:b2:2b:43:38:db:d5:6c:06:6b:94:a0:ed:c1:ae:72:c8:
c1:84:1a:73:28:5c:b4:b8:d4:f2:4e:e5:37:f7:79:b8:a8:e8:
83:22:d8:fc:57:35:7c:66:3d:86:49:21:66:64:fe:f6:64:a0:
03:07:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client