Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507DCB42579311F1BC2373F3CE1D38B0.roa
File: 507DCB42579311F1BC2373F3CE1D38B0.roa (raw, json)
Hash identifier: TKBUdhcBAuUqBqkMFRCW3Q/5o+lKa3sfOtKUOwohe3M=
Subject key identifier: 9B:87:61:04:1C:90:79:B9:62:1B:39:8B:01:4B:E3:65:00:6F:CE:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B92C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507DCB42579311F1BC2373F3CE1D38B0.roa
Signing time: Sun 24 May 2026 17:09:25 +0000
ROA not before: Sun 24 May 2026 17:09:19 +0000
ROA not after: Tue 30 Jun 2026 17:09:19 +0000
asID: 35916
IP address blocks: 156.225.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112940 (0x1b92c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 17:09:19 2026 GMT
Not After : Jun 30 17:09:19 2026 GMT
Subject: CN=6a1330c5-28b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:54:3c:44:a3:1b:9f:c1:c8:bd:9a:aa:27:a8:
08:e9:93:c0:48:ab:b5:1b:fe:81:02:3c:a4:db:c7:
5a:31:99:44:ce:dd:65:35:eb:38:da:f2:d2:f5:6d:
76:71:3f:d6:9b:74:15:82:fc:1c:b7:d5:92:5c:fe:
65:01:b2:9a:02:a1:f4:41:b2:06:d7:32:ab:79:aa:
45:0a:af:cf:28:1e:81:ee:70:d9:d1:45:ed:43:33:
d1:e4:68:6e:2b:51:6e:78:b7:4d:d7:d8:15:e2:3f:
ef:54:ec:27:23:e4:b5:c5:af:34:98:e3:45:75:2e:
b5:9e:7c:33:b7:31:81:89:c0:f3:66:d1:c9:97:89:
d6:fa:bf:40:e7:dc:04:f7:8f:7c:09:b6:94:b4:50:
36:c7:2d:17:b0:5a:5e:88:a4:b3:11:4d:af:6a:6b:
b1:c0:72:e5:ba:b1:e4:ef:13:4d:57:85:59:71:ed:
2e:cc:58:b8:3c:3f:86:59:c8:0b:0a:c6:bc:e1:72:
87:f2:fd:c5:dc:2e:a1:00:3b:f2:0f:f1:24:83:67:
0c:7e:27:9a:c1:83:1c:b2:3d:62:d5:bf:38:36:76:
a7:46:c3:27:4c:67:fb:86:35:84:75:88:07:11:fd:
5b:d2:23:c0:0c:9b:02:d0:33:e9:cf:9f:e8:3a:17:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:87:61:04:1C:90:79:B9:62:1B:39:8B:01:4B:E3:65:00:6F:CE:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/507DCB42579311F1BC2373F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:94:66:f5:6a:b0:aa:c9:36:99:76:db:95:c1:02:c6:1c:07:
b6:7d:50:82:44:c5:bb:48:8b:e7:e0:a6:0c:ec:49:fb:9b:03:
9c:45:3e:d5:59:1c:a8:24:81:8b:aa:a0:5f:ba:79:3b:dd:b5:
da:8d:5d:05:f3:c5:44:ff:40:c8:ae:6f:b7:be:c0:e8:bd:c8:
d0:5d:28:cf:e5:2c:a4:79:55:dd:8b:59:ea:ca:8f:c0:ea:46:
49:70:67:1d:4c:ff:32:2f:fc:f8:66:6d:bb:bc:95:0a:b3:95:
44:1f:29:87:12:ed:9b:48:60:c0:7b:13:be:13:a2:69:95:37:
14:e7:a3:7f:f6:03:22:43:e6:ee:33:68:ad:55:82:69:1e:1f:
54:de:b6:3f:6a:47:aa:7f:44:42:5f:34:af:6e:17:96:f7:94:
e7:e7:23:fc:f5:a5:26:c8:08:bb:80:d3:0e:80:6c:fb:07:fc:
71:f3:a3:4f:43:d1:2e:4e:4d:38:35:32:93:b6:02:76:87:f4:
bc:c5:e9:d5:ba:19:ba:f4:9e:73:ff:e7:1e:87:4c:a6:1b:bc:
c4:51:6b:78:a2:c9:3c:8c:10:2b:6b:f9:6b:75:96:59:17:a1:
17:7d:5b:0f:a1:9a:9e:fa:41:97:3a:a8:be:b3:ba:f2:60:d6:
f6:24:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:58 2026 by rpki-client