Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4284C3D67F5911F1934DAAC1CE1D38B0.roa
File: 4284C3D67F5911F1934DAAC1CE1D38B0.roa (raw, json)
Hash identifier: kcqQHCwxxW6eAMaiQ6s/k8xpqOAnkm3wbwauMos/EY0=
Subject key identifier: A1:2F:26:92:EA:01:DB:03:0E:4A:A0:3A:60:4C:C3:BF:EC:4F:B7:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4284C3D67F5911F1934DAAC1CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:54:37 +0000
ROA not before: Tue 14 Jul 2026 07:54:32 +0000
ROA not after: Mon 17 Aug 2026 07:54:32 +0000
asID: 22773
IP address blocks: 156.229.52.0/23 maxlen: 24
156.229.55.0/24 maxlen: 24
156.229.61.0/24 maxlen: 24
156.239.144.0/22 maxlen: 24
156.248.30.0/23 maxlen: 24
156.248.64.0/21 maxlen: 24
156.248.92.0/22 maxlen: 24
156.249.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115945 (0x1c4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:54:32 2026 GMT
Not After : Aug 17 07:54:32 2026 GMT
Subject: CN=6a55eb3d-70ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:ae:78:72:b8:61:fd:ee:f9:e8:cf:7c:3a:
7f:b5:92:2e:f2:fa:63:db:cd:6f:78:1e:36:5c:2f:
df:c5:b1:5b:89:35:df:d5:b5:6f:2d:1f:ef:a6:47:
7c:44:d9:aa:03:fc:f6:a4:f2:dd:27:77:f1:a0:22:
e3:da:13:72:32:ea:bf:b6:cf:6c:eb:04:c8:9f:76:
16:ef:af:dc:47:12:c5:10:ef:fb:83:19:54:41:c8:
fe:bb:50:9a:6b:6d:ca:62:e9:05:b8:9a:3d:76:03:
70:a9:2e:6f:18:fb:ff:5a:b9:49:02:b5:71:3a:68:
64:d8:24:a5:0f:7d:00:96:b3:7c:83:17:8b:c0:db:
48:f3:d2:5f:80:22:e7:e1:81:d8:f1:14:04:e6:c3:
ae:dc:f7:94:3e:13:f1:2f:b0:98:34:46:2e:9f:07:
7c:aa:ee:a2:8e:fa:04:f6:36:bb:e2:6b:eb:cc:f5:
40:ef:73:ab:f4:80:cc:1c:16:36:06:96:91:a8:f9:
cf:ba:05:e1:26:b6:20:6a:1d:0d:4f:f0:f8:94:9b:
e0:e8:7b:63:69:b8:36:fa:93:6e:ea:4b:fe:4d:b2:
c2:6f:46:1b:03:4c:c5:93:ea:aa:ae:10:77:4b:75:
31:f3:2b:ae:39:93:82:13:06:56:ce:ff:7f:4a:00:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:26:92:EA:01:DB:03:0E:4A:A0:3A:60:4C:C3:BF:EC:4F:B7:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4284C3D67F5911F1934DAAC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.52.0/23
156.229.55.0/24
156.229.61.0/24
156.239.144.0/22
156.248.30.0/23
156.248.64.0/21
156.248.92.0/22
156.249.2.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e2:d9:37:f8:b0:3d:b6:ee:41:b2:e0:c4:87:45:e1:ef:48:
05:1c:a1:39:3b:cb:24:17:9b:d8:e9:e0:e0:60:90:cb:c4:c5:
1a:8e:4d:14:99:a6:43:2a:ff:ff:87:9e:a9:82:f2:5e:2a:79:
89:c7:55:4d:ee:b9:7e:2e:9e:1d:a7:5f:3d:fb:1f:71:a2:f3:
a5:f7:99:9b:91:2b:3c:81:a6:fe:f0:95:a7:eb:ae:33:f7:66:
9e:27:ee:61:a1:31:69:be:4e:5a:e0:8a:bd:37:ad:08:18:77:
00:10:c4:82:57:ad:db:f4:36:df:f5:1f:f9:19:90:77:34:38:
35:53:c0:10:ac:cb:f3:b6:39:6a:fe:66:a3:59:f6:44:6d:5a:
b9:1d:b3:1c:95:02:59:7a:45:c4:d1:61:3b:1c:0d:9c:88:f8:
a2:8f:27:f0:d7:1d:22:1b:da:4d:a3:8f:cc:55:8c:29:e1:24:
d9:6b:9a:5b:ee:24:1e:a4:dc:87:ee:ea:9f:f5:7e:72:79:c1:
e7:fc:06:8e:08:ee:48:20:94:7a:64:c7:93:c7:f3:07:bb:31:
bd:ee:cb:2c:a0:6a:37:73:75:fc:8b:4e:93:d4:32:3f:d5:e6:
31:fa:4e:ad:43:8e:3d:e8:81:4f:a6:d5:92:b1:66:dc:0f:48:
53:6a:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:35 2026 by rpki-client