Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619786AE795111F1B67BBECECE1D38B0.roa
File: 619786AE795111F1B67BBECECE1D38B0.roa (raw, json)
Hash identifier: 0aWzZcGXSGQghux169CN182/hvvGvhMG10jZbLqqN+s=
Subject key identifier: F7:AF:78:E5:4A:3D:65:D5:1C:60:91:0F:B4:87:86:49:D5:3C:FA:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C34D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619786AE795111F1B67BBECECE1D38B0.roa
Signing time: Mon 06 Jul 2026 15:43:07 +0000
ROA not before: Mon 06 Jul 2026 15:43:02 +0000
ROA not after: Wed 01 Mar 2028 15:43:02 +0000
asID: 17561
IP address blocks: 156.243.218.0/24 maxlen: 24
156.253.61.0/24 maxlen: 24
156.253.62.0/24 maxlen: 24
156.253.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115533 (0x1c34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 15:43:02 2026 GMT
Not After : Mar 1 15:43:02 2028 GMT
Subject: CN=6a4bcd0a-bb88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ef:5a:7b:a9:68:2a:1d:18:0e:55:75:0c:ed:
da:11:90:b3:e5:7f:66:4f:90:0c:20:2e:71:d8:d3:
34:90:38:5a:0e:a2:8f:fb:99:5f:bf:2d:8e:b3:b3:
1c:8c:5d:8e:43:f1:b4:10:d9:1f:76:81:32:34:74:
3d:61:37:27:c2:45:b6:57:5a:39:18:58:c0:dc:84:
19:68:5b:c5:4a:71:51:59:f3:4b:05:d6:68:bf:a6:
cd:78:d2:5d:05:0d:b3:95:0d:3b:fa:18:80:8e:bd:
e8:1a:9b:b0:c1:25:90:dd:d0:77:99:4d:59:8a:20:
7c:b8:d3:45:53:af:14:c9:cf:65:61:ca:db:bd:ff:
da:f4:04:c4:c0:fd:4a:ba:ba:3b:0e:e1:28:b0:7b:
a1:9b:3a:73:46:63:f7:a7:7b:d9:00:fd:46:34:8d:
74:20:f1:26:a9:6e:43:16:9d:5b:25:69:30:7f:83:
81:d6:8b:fc:29:23:cb:78:00:9f:d2:23:13:b6:f5:
4b:1d:58:91:ef:fa:ea:04:f8:68:ed:b5:36:f2:cf:
5a:54:c8:27:f3:36:32:18:8f:ec:ab:07:eb:1b:84:
e7:cb:e9:4c:61:93:ad:34:e7:4f:a2:08:0b:53:58:
44:68:0a:fc:fc:83:76:f4:9f:8c:92:57:b6:fc:2b:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:78:E5:4A:3D:65:D5:1C:60:91:0F:B4:87:86:49:D5:3C:FA:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619786AE795111F1B67BBECECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.218.0/24
156.253.61.0-156.253.63.255
Signature Algorithm: sha256WithRSAEncryption
55:85:47:c0:4b:64:7e:ce:3c:ba:ab:90:c7:a5:65:e0:e1:ac:
bf:4b:40:a8:55:84:f4:15:c6:72:b1:33:38:e2:80:51:8b:ae:
b2:08:e8:18:5a:90:eb:95:b3:1d:df:75:d7:32:bd:74:2e:cc:
99:52:56:40:8e:c4:30:5d:1f:45:97:e4:95:b8:df:d2:75:10:
89:ab:89:bc:07:bb:42:15:6f:aa:96:fa:41:3f:c2:1b:9a:c7:
74:2e:c8:6f:6a:ee:e2:03:e1:a1:6e:7a:a7:bb:31:7c:f3:26:
91:16:a5:37:43:91:24:e2:1e:fc:2e:20:33:2b:55:f6:58:fd:
de:f2:a6:7f:50:f7:df:29:29:8f:bb:d3:2f:90:00:69:97:c6:
31:4a:24:ce:15:79:38:c9:b9:d5:fd:a4:80:0e:38:88:a4:df:
3a:46:16:56:3f:44:64:55:b7:f3:21:85:4c:5b:92:20:91:4e:
89:7f:5f:04:a6:37:5d:71:7a:c1:1f:ac:eb:a3:7a:fb:8c:05:
cb:9c:95:73:f2:74:6f:8f:a3:37:73:77:0c:84:ea:7d:14:69:
da:b6:40:7f:6b:fc:0c:04:5e:94:c5:5f:8a:3c:95:27:0d:d5:
f2:7b:7e:d8:ee:70:95:2a:40:9c:51:36:b1:77:d1:a2:0a:cf:
03:8f:db:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:14 2026 by rpki-client