Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E9662E6A3B11F1BEB1AFDDCE1D38B0.roa
File: 34E9662E6A3B11F1BEB1AFDDCE1D38B0.roa (raw, json)
Hash identifier: IZlXtxlXhRGoXVstvbLS9Gncb+PY4c5EbUWb1H7e4Qo=
Subject key identifier: 87:89:22:2E:82:70:27:7F:7F:DF:97:21:EC:BF:F5:E3:E1:2B:07:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E9662E6A3B11F1BEB1AFDDCE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:56:35 +0000
ROA not before: Wed 17 Jun 2026 10:56:31 +0000
ROA not after: Thu 23 Jul 2026 10:56:31 +0000
asID: 13335
IP address blocks: 156.247.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114340 (0x1bea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 10:56:31 2026 GMT
Not After : Jul 23 10:56:31 2026 GMT
Subject: CN=6a327d63-7942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:01:22:dd:6c:f1:44:08:f9:88:65:d8:b2:c2:
6f:61:e7:e1:72:1e:f0:86:9a:1d:5e:73:5c:97:0b:
af:72:98:11:05:16:ea:c8:71:fb:6c:d6:9c:7d:44:
3e:48:fa:51:bf:66:6b:f7:9f:2e:fb:ad:c3:9c:a7:
a8:03:43:2a:d7:34:e6:de:e4:e0:4a:4d:48:5d:fa:
3f:db:52:85:b4:d0:8c:95:78:7a:cd:71:f6:f4:ff:
80:4a:43:06:7b:ef:8e:36:65:72:c6:f9:0f:80:3c:
d8:93:ee:ea:48:5e:d0:ad:03:2f:64:26:4e:03:07:
bf:b2:bc:01:46:cd:d7:d0:19:41:44:9c:d6:c4:8b:
07:a7:87:c5:ac:90:25:65:32:78:f8:d5:b6:7d:7c:
29:69:78:7b:28:3d:48:f4:d7:73:47:6c:ee:db:b9:
1d:48:a5:df:96:2a:06:c9:06:32:a7:90:4e:c7:1e:
cc:df:bb:4e:f9:0d:53:98:19:b3:8c:1e:b8:ac:4e:
ac:c4:45:55:9d:b7:dc:73:c5:45:ae:cf:71:d2:08:
b6:c5:da:39:1b:e4:0f:66:b3:6d:1f:4e:c8:97:c6:
ee:20:38:3f:4c:1b:72:15:b0:7b:99:2e:a4:21:82:
b6:06:c5:d3:76:f9:48:f5:cc:2a:c1:fc:bc:dd:f7:
17:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:89:22:2E:82:70:27:7F:7F:DF:97:21:EC:BF:F5:E3:E1:2B:07:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E9662E6A3B11F1BEB1AFDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c0:c9:dc:01:33:75:84:30:24:5a:5f:27:e7:0f:24:a9:18:
82:18:c4:7a:e7:46:c7:68:7c:50:12:bb:a1:15:0c:95:3f:c3:
88:49:85:40:a5:0d:c9:8d:10:08:a4:30:88:9b:07:3d:61:fb:
ec:bf:62:59:6e:00:6d:2c:3e:fa:ef:88:df:f2:fa:be:76:6c:
e7:73:f2:41:c3:8a:d4:cc:4c:76:94:6c:f6:b5:08:f0:ae:d2:
97:cf:e2:bf:b3:6e:49:3b:4c:8b:80:d8:dd:e6:32:22:4d:af:
32:a0:61:00:03:bf:fb:f0:f2:ea:0a:5e:c9:6e:26:16:af:5b:
c9:66:8b:ae:e1:21:67:1e:56:8a:7a:c9:cd:05:71:b5:c4:e7:
09:71:b1:02:25:65:24:09:30:08:8d:08:17:06:fb:be:d6:6e:
ee:11:49:e0:70:e4:8e:ca:70:7c:88:35:42:95:e4:9f:34:a7:
ba:df:25:7d:0a:bd:04:6b:30:5e:14:48:b0:ac:e9:49:87:bd:
82:5f:28:ff:42:ce:84:83:a6:bf:46:59:8b:dc:88:9a:9c:2e:
82:b6:6d:66:10:b0:43:e8:8d:97:22:5c:c5:59:01:7a:7f:7a:
05:aa:7a:4b:da:97:d4:fb:5d:2b:01:86:5f:9e:69:c5:e8:5b:
e2:39:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:31 2026 by rpki-client