Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6208AB187D4D11F1B93ED5C3CE1D38B0.roa
File: 6208AB187D4D11F1B93ED5C3CE1D38B0.roa (raw, json)
Hash identifier: KfC0HoHvPmT6aQUtrdbd5E3+00ZPAmXGTM47HdJD0do=
Subject key identifier: 5D:B3:E0:CB:65:0C:C3:81:D2:ED:45:2D:26:1A:F1:07:50:1C:66:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C481
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6208AB187D4D11F1B93ED5C3CE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:24:34 +0000
ROA not before: Sat 11 Jul 2026 17:24:29 +0000
ROA not after: Tue 18 Aug 2026 17:24:29 +0000
asID: 62610
IP address blocks: 156.241.129.0/24 maxlen: 24
156.241.133.0/24 maxlen: 24
156.241.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115841 (0x1c481)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 17:24:29 2026 GMT
Not After : Aug 18 17:24:29 2026 GMT
Subject: CN=6a527c52-52b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:af:e8:1e:95:59:01:24:a2:81:e7:de:79:
e1:63:c6:22:f9:e1:ec:e2:2c:fc:cc:c5:9c:5d:ce:
e1:65:4b:af:be:af:0d:30:00:24:7d:aa:8d:1d:b5:
e0:d9:92:20:80:4f:d8:a4:f5:fb:bd:73:b8:42:ab:
ac:cc:a6:cd:f0:9a:94:98:71:15:26:cc:5b:21:8e:
0a:c7:f8:2e:b7:b8:16:ec:9b:88:76:ae:bb:22:04:
d6:6d:c8:24:e1:dd:72:9e:ec:a0:9f:da:d1:d0:4e:
13:d5:73:c9:0a:a2:79:a6:c7:de:f8:21:3d:7a:e0:
65:2c:c2:15:15:26:b8:bb:a1:d4:8d:da:b8:45:5a:
16:65:d7:8d:6e:70:f5:25:0d:03:7c:8a:f3:b5:5f:
9e:3e:22:51:d6:a6:14:28:2f:96:bb:b5:2e:2f:60:
bc:b3:21:f2:a2:38:38:5d:fd:ba:7d:57:7b:f2:29:
a6:10:43:74:f8:96:70:08:2a:ce:57:48:21:07:56:
b2:d0:08:ed:4e:13:5c:db:46:59:ba:9a:13:72:12:
df:fb:5c:22:0a:01:b2:d3:a1:8c:a1:45:f0:8a:8f:
18:29:7d:a8:ec:67:ba:5d:8d:3d:45:f7:a4:e0:d6:
16:7d:5c:4e:9e:93:78:af:d6:1e:77:f1:a3:6f:84:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B3:E0:CB:65:0C:C3:81:D2:ED:45:2D:26:1A:F1:07:50:1C:66:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6208AB187D4D11F1B93ED5C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.129.0/24
156.241.133.0/24
156.241.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:48:12:1c:91:07:91:68:c9:f4:0b:50:8e:60:67:29:e9:cf:
56:58:85:06:ba:93:1c:9c:ca:78:ae:be:0d:a9:66:4e:90:78:
cc:12:a6:49:52:b2:9f:3b:d1:2b:44:79:98:de:cb:e5:07:53:
e5:29:ef:fa:e0:a1:b2:45:98:8c:e5:71:58:55:42:2b:09:57:
5c:f6:c0:24:39:53:dc:f0:e1:d1:84:95:89:52:48:e6:c6:1a:
eb:f0:07:60:0f:41:2b:c2:9c:0b:c0:2f:58:d9:89:5e:8f:bb:
05:a1:bb:d9:ff:82:34:ab:b4:10:21:84:4d:3d:2a:ee:12:c2:
ea:8a:27:3a:d0:8b:37:54:64:f4:24:7a:40:fd:cb:66:c7:5b:
3c:a7:93:57:1a:51:78:dd:dc:e9:ed:ba:24:f8:8d:81:34:c1:
27:3c:35:47:2b:37:81:1c:f5:50:b4:46:14:8d:5e:1c:6c:d5:
99:23:27:1b:38:2f:c9:32:d9:1c:9b:ff:6a:a9:6d:fe:a5:0c:
1a:f4:3d:a6:ae:ac:98:53:2d:e5:35:32:42:31:56:c9:11:99:
16:c6:30:58:9b:b6:00:88:d8:0c:47:ad:14:39:64:f6:d4:ac:
d8:28:3e:d3:6b:6f:7b:f0:5b:da:95:20:2e:08:22:4f:4f:a4:
ea:13:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:00 2026 by rpki-client