Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377FECCC810C11F1A80A66DCCE1D38B0.roa
File: 377FECCC810C11F1A80A66DCCE1D38B0.roa (raw, json)
Hash identifier: ogynYRZkphznCwRk5Jo3b248Rglyd+l7SDpi2EEGjlY=
Subject key identifier: AB:B4:AF:B2:65:94:3F:EE:D0:C5:67:A0:D8:AB:67:35:47:A3:EF:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C576
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377FECCC810C11F1A80A66DCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:48:10 +0000
ROA not before: Thu 16 Jul 2026 11:48:06 +0000
ROA not after: Mon 16 Jul 2029 11:48:06 +0000
asID: 17561
IP address blocks: 156.238.211.0/24 maxlen: 24
156.238.212.0/24 maxlen: 24
156.238.213.0/24 maxlen: 24
156.238.214.0/24 maxlen: 24
156.238.215.0/24 maxlen: 24
156.238.216.0/24 maxlen: 24
156.238.217.0/24 maxlen: 24
156.238.218.0/24 maxlen: 24
156.238.219.0/24 maxlen: 24
156.238.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116086 (0x1c576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 11:48:06 2026 GMT
Not After : Jul 16 11:48:06 2029 GMT
Subject: CN=6a58c4fa-c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:78:8b:dd:c9:60:da:41:ab:05:da:47:4e:14:
7d:75:e7:c1:0d:5b:a8:c6:07:83:fa:2b:19:b8:68:
d3:07:58:c6:7f:2e:a9:51:7f:13:ed:fd:b6:6d:ca:
ff:be:60:3c:82:cd:15:2f:ab:48:42:61:c4:a4:fe:
c8:af:86:20:84:82:a4:d7:b7:b1:5b:d0:c7:20:d7:
b1:ec:cf:7f:25:9c:3c:23:eb:f5:50:94:97:5c:38:
96:fd:4e:20:7b:08:8a:3a:9f:dd:d7:a3:10:4f:de:
84:17:9a:5b:c9:6d:33:27:94:f6:79:9f:f4:14:f5:
1c:ad:0b:d3:e4:19:9d:77:d7:99:f5:56:c5:e7:1f:
31:97:85:54:df:ea:ea:9d:51:6e:20:0f:38:37:57:
97:3c:78:4c:b8:e1:d9:14:11:74:4c:f1:0f:c4:25:
a5:fa:50:27:a5:57:7a:b3:9d:07:44:6d:c2:a3:84:
25:65:4e:33:4b:66:90:c1:06:36:60:7b:96:1a:70:
15:75:c2:98:40:8f:28:8e:68:c1:95:95:de:c5:80:
93:c8:7d:f8:03:ec:46:53:e7:fc:fb:1a:d3:91:0b:
9e:c9:0f:ba:bd:1c:c1:df:fd:bb:ed:94:54:96:d2:
a5:9a:74:bc:1d:84:e0:de:c2:2f:fd:fc:24:2e:98:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:AF:B2:65:94:3F:EE:D0:C5:67:A0:D8:AB:67:35:47:A3:EF:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377FECCC810C11F1A80A66DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.211.0-156.238.220.255
Signature Algorithm: sha256WithRSAEncryption
42:0b:ea:89:98:54:b3:80:d2:89:1a:3b:b5:d3:11:ff:8b:b9:
65:68:14:d7:56:23:88:68:4b:96:a7:7f:76:43:f9:19:10:aa:
28:a1:61:92:a4:bb:a5:85:61:af:bc:d0:d2:5c:e0:1c:36:5c:
a9:5e:4a:85:ec:cc:ba:37:f8:cf:a8:0e:92:1e:90:b7:a9:0e:
f6:84:d6:c7:de:f0:83:48:6b:a7:6d:34:3a:95:6f:ce:d9:86:
de:0f:17:19:52:23:b9:88:3b:b6:4c:66:fb:79:7f:03:15:3c:
7f:73:12:97:a5:07:2d:15:0a:e3:60:73:e6:b1:91:75:a9:fc:
39:ce:3e:42:63:7c:6d:ab:0f:99:44:c2:77:af:77:3b:3c:db:
9a:a6:79:5f:1b:01:00:d1:cc:f3:bb:55:77:4e:e7:2c:95:b2:
5f:12:7e:4d:22:8d:a0:2c:4a:47:71:ee:95:af:2e:dc:5d:54:
09:c6:06:db:5c:af:58:cc:97:a7:b9:c9:b6:4a:39:a4:5b:3b:
a3:93:61:69:43:e1:62:8f:34:a6:23:af:85:34:95:fb:17:df:
26:e5:96:1d:b4:d7:a7:a9:64:cb:44:e7:c7:88:63:28:8b:7c:
ae:21:4c:61:e8:91:fc:e0:67:48:92:97:e6:3e:8f:93:c5:d5:
d9:48:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:26 2026 by rpki-client