Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32D757EE7C4011F1B03E72E9CE1D38B0.roa
File: 32D757EE7C4011F1B03E72E9CE1D38B0.roa (raw, json)
Hash identifier: Ojib7i1gIJpbeJQ8G593YyNaUse4NdN41sLFYi88XPw=
Subject key identifier: 30:28:FD:3B:35:40:BD:1A:44:2C:EE:43:9B:D8:D5:F6:A5:13:3D:8B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C450
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32D757EE7C4011F1B03E72E9CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:17:40 +0000
ROA not before: Fri 10 Jul 2026 09:17:36 +0000
ROA not after: Tue 10 Jul 2029 09:17:36 +0000
asID: 17561
IP address blocks: 156.251.211.0/24 maxlen: 24
156.251.212.0/24 maxlen: 24
156.251.213.0/24 maxlen: 24
156.251.214.0/24 maxlen: 24
156.251.215.0/24 maxlen: 24
156.251.216.0/24 maxlen: 24
156.251.217.0/24 maxlen: 24
156.251.218.0/24 maxlen: 24
156.251.219.0/24 maxlen: 24
156.251.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115792 (0x1c450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:17:36 2026 GMT
Not After : Jul 10 09:17:36 2029 GMT
Subject: CN=6a50b8b4-5071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ef:21:a3:e3:56:39:e6:e4:d8:c7:3c:20:88:
ac:d8:ff:18:73:33:69:5c:b8:a8:07:b0:e8:32:4a:
5a:e9:8f:e5:b5:b8:20:2e:a2:fe:f2:a8:76:12:02:
6b:55:13:97:a3:a3:a3:5a:55:04:4c:0c:2a:7c:a3:
ec:07:9b:74:8b:f5:75:ad:68:66:8e:fc:26:63:87:
db:55:64:9b:96:70:39:93:87:bd:e7:ad:17:07:22:
04:03:e2:cd:01:4b:4c:78:93:62:bf:5b:c0:1e:f2:
a6:b6:53:87:d8:93:22:b0:e5:5b:67:ba:05:6b:49:
42:86:92:95:0b:8f:ea:1e:43:bb:e5:ac:6b:16:3b:
21:38:d8:cb:f0:4a:5c:49:c5:dc:3c:35:56:aa:5f:
dc:8e:2b:43:97:21:c1:c5:93:3a:c4:46:dd:a7:92:
e1:1b:21:dd:e2:9a:c2:29:ba:42:04:f2:87:1c:7f:
28:b9:b7:06:c5:81:74:12:7f:17:ad:5e:14:e9:09:
6b:ac:cc:9e:a6:62:02:a4:b0:63:4f:82:cf:39:2e:
52:f4:13:cc:59:8c:b2:17:24:6b:55:0a:13:3f:e4:
fd:e8:cf:98:e6:42:69:5e:6d:43:9b:cb:1d:cc:17:
fc:8b:3e:cd:a7:18:72:12:a5:39:aa:42:0a:05:68:
94:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:28:FD:3B:35:40:BD:1A:44:2C:EE:43:9B:D8:D5:F6:A5:13:3D:8B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32D757EE7C4011F1B03E72E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.211.0-156.251.220.255
Signature Algorithm: sha256WithRSAEncryption
b3:f8:b0:56:1b:65:38:87:d3:cf:34:09:3d:39:44:7c:fa:b5:
fc:50:86:bc:92:2a:74:09:cf:b1:92:ed:ea:42:ab:b2:bb:2d:
36:1f:e0:0c:b6:18:8b:8a:ff:5a:ba:d9:92:87:f4:30:30:4b:
08:3e:b0:cd:e4:5b:50:4d:18:a5:e8:62:3e:d3:7e:38:8a:c3:
82:81:76:75:53:b2:b0:af:05:6b:58:5c:e6:07:36:b8:0e:5e:
42:7e:e5:5e:fe:7e:f1:67:3c:67:d9:76:dc:04:27:c2:8a:3b:
6d:fc:90:d6:e5:b6:b2:97:0f:49:c4:cd:da:98:b4:bd:09:ff:
17:99:f7:bd:9d:42:83:27:40:77:05:fa:d2:59:2a:2f:c6:a9:
c0:b0:e6:f4:c4:b7:20:39:01:22:c7:38:d0:8d:10:8e:26:a7:
56:ef:fc:71:83:97:84:c6:9b:de:e7:24:c8:08:89:36:0a:96:
1c:40:99:26:50:b3:b9:2d:6b:6a:1a:0c:e7:38:a3:ac:6b:e2:
4f:20:1d:f2:8a:ff:bf:60:d3:e5:be:ed:70:19:06:ca:e0:cf:
0f:fb:82:28:c0:2d:8c:a8:16:a2:86:09:c9:ae:26:dc:a8:ff:
ba:0e:31:77:74:8e:98:fc:98:0f:2f:ea:cc:a3:20:87:7b:4e:
36:ad:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client