Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/320A7FAE6F0611F1ADE238C1CE1D38B0.roa
File: 320A7FAE6F0611F1ADE238C1CE1D38B0.roa (raw, json)
Hash identifier: PMhoikgkT31GID/yFzRgfxGh8TFtIAWurtIPxRhmPX8=
Subject key identifier: E8:50:20:90:5E:9D:9B:7D:52:D8:99:47:3C:4D:91:86:90:71:3C:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/320A7FAE6F0611F1ADE238C1CE1D38B0.roa
Signing time: Tue 23 Jun 2026 13:19:43 +0000
ROA not before: Tue 23 Jun 2026 13:19:38 +0000
ROA not after: Wed 29 Jul 2026 13:19:38 +0000
asID: 212238
IP address blocks: 156.229.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114687 (0x1bfff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 13:19:38 2026 GMT
Not After : Jul 29 13:19:38 2026 GMT
Subject: CN=6a3a87ef-4656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b0:05:48:3c:8e:22:b0:0f:64:0d:27:dd:0c:
a7:16:af:c3:3a:f5:42:84:a2:0b:46:8e:d5:0d:87:
27:2f:fc:b4:9b:ca:eb:56:1c:c9:f0:2b:ed:7d:f6:
bb:ba:e5:e7:3a:ef:a4:7c:40:05:fb:13:f4:68:df:
e0:26:8d:91:ff:43:ff:a0:b4:d7:ee:75:9c:71:2c:
3d:30:e8:1d:79:f1:d4:0f:50:bd:7b:92:df:ce:af:
5d:48:8a:d5:4a:81:38:0a:56:80:33:a5:71:95:5a:
27:03:82:96:ca:1f:e5:52:08:9f:3c:0b:ea:43:10:
02:e2:7f:77:c3:f9:d8:18:5e:91:fc:63:9b:59:de:
4e:78:db:b0:c1:51:42:1d:f2:3e:3f:df:a1:d3:64:
2a:d6:a9:93:bd:b7:65:1a:81:e0:75:f0:a1:73:cf:
6d:b7:99:b2:b0:50:0b:84:8a:20:de:27:45:0e:1c:
e9:b0:5a:0a:64:b7:40:08:d6:72:32:02:bd:63:04:
ec:b1:49:7e:6a:bb:91:d9:e6:45:a5:ff:43:c9:e2:
27:2a:8e:1d:21:82:84:84:6d:65:41:e3:6e:cd:67:
e1:0f:35:ee:8c:bd:78:12:98:93:01:0d:9a:1e:71:
e1:c4:7e:e1:77:b0:e1:72:b7:38:c5:fc:e2:42:87:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:20:90:5E:9D:9B:7D:52:D8:99:47:3C:4D:91:86:90:71:3C:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/320A7FAE6F0611F1ADE238C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.122.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:54:de:4a:90:7f:ac:f6:d2:0b:91:f4:77:74:ef:28:db:b3:
7d:ca:08:a8:55:a4:49:f8:01:09:bd:6a:66:b4:83:cf:2b:d2:
d6:50:94:25:86:af:28:d3:2b:5e:2a:71:9c:73:ec:52:e4:44:
bc:85:59:c1:48:f1:b5:bd:71:c3:4d:64:2c:c8:3e:12:40:af:
7c:38:58:d5:cb:df:fb:68:85:bc:83:29:cb:00:3f:b4:63:91:
9c:eb:7d:05:fc:ef:c4:7b:e8:56:6e:48:0c:d4:16:ca:92:04:
37:1a:1b:8c:b9:ab:dd:25:84:16:97:cb:eb:99:60:ef:f4:d9:
6e:c9:7a:a4:4b:66:a9:d8:7e:8d:ba:89:18:f1:24:4f:41:fe:
2a:a7:24:3d:e4:ad:b6:41:5e:1d:62:81:c3:9e:80:cd:1d:e5:
dd:ba:8a:f7:e4:a5:45:dd:70:7e:9b:56:cf:a3:9d:d6:de:0b:
92:10:fd:2c:7f:19:b6:ec:c7:c0:5f:e0:32:81:a0:b4:c9:45:
dc:1b:ed:40:7d:2d:fd:56:de:cc:03:3a:b4:e2:eb:2f:c5:b6:
6b:1c:e0:f6:4a:14:7f:97:2f:33:8a:b0:46:58:dc:6f:1e:db:
94:0c:62:98:98:99:f7:f9:8f:f6:42:6a:43:5b:f8:3b:64:86:
db:98:c7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:44 2026 by rpki-client