Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63623B32510611F1A95E0112CF1D38B0.roa
File: 63623B32510611F1A95E0112CF1D38B0.roa (raw, json)
Hash identifier: F7Tsa7xZQi4ComqyS1V9s0lbLJPBrccb7NsEWIXWxkw=
Subject key identifier: ED:2D:53:0E:14:77:55:29:1B:37:1B:15:76:CE:2E:A5:36:34:9F:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63623B32510611F1A95E0112CF1D38B0.roa
Signing time: Sat 16 May 2026 09:05:31 +0000
ROA not before: Sat 16 May 2026 09:05:26 +0000
ROA not after: Wed 26 May 2027 09:05:26 +0000
asID: 212552
IP address blocks: 156.241.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111889 (0x1b511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 09:05:26 2026 GMT
Not After : May 26 09:05:26 2027 GMT
Subject: CN=6a08335b-766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bc:e4:40:fc:5b:8d:91:39:98:5d:2e:9a:02:
25:07:58:41:ec:c7:36:dd:48:f7:79:c0:ae:74:9a:
9e:69:aa:70:cc:ee:20:1b:45:c3:73:ff:ae:d7:d0:
0c:63:dd:b0:48:3e:1b:55:99:e8:72:6a:f9:e6:44:
b4:2d:fa:12:fe:28:90:40:74:00:a6:7b:74:6b:7b:
21:15:39:e7:b4:cd:c8:a6:b8:10:f3:62:6a:8b:66:
0d:10:60:23:82:77:b2:dd:ce:d4:4d:21:d6:0f:40:
5f:2b:27:43:54:95:43:1e:ec:3d:8d:58:d8:9e:04:
93:4e:59:ee:23:6b:3a:42:0c:50:b7:b2:5a:70:5d:
38:dc:b4:80:51:7c:21:73:ed:ec:e5:3e:1e:fb:28:
77:86:ec:b2:e8:e2:93:b8:98:49:4b:46:e0:68:f7:
5e:c2:60:d2:37:0f:9d:04:d1:17:6d:29:52:d3:36:
1b:d3:7c:d6:1d:e9:a4:a2:75:c2:e4:43:72:e9:9c:
9b:89:20:68:8c:f1:3e:0a:f5:04:dd:fa:2d:4b:9a:
cc:8c:f4:80:81:cc:85:43:b2:e2:a2:5f:87:a2:c6:
b0:92:3c:60:30:ef:95:04:55:84:82:02:66:7e:e6:
a3:0b:e9:74:ed:76:28:99:70:7e:4a:70:fb:15:99:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2D:53:0E:14:77:55:29:1B:37:1B:15:76:CE:2E:A5:36:34:9F:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63623B32510611F1A95E0112CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:50:02:36:f9:08:9e:a5:38:e0:ab:89:aa:09:d1:84:d8:6a:
db:29:61:9f:86:0b:6b:57:92:cf:c2:7a:a2:99:eb:9c:8a:ea:
af:66:16:8f:5a:b0:ed:65:11:17:17:bb:58:38:5c:ce:67:6a:
6f:b7:15:ea:e4:a1:1b:23:6e:7d:41:b1:ea:39:3e:28:de:8c:
a5:5b:f1:1d:24:d0:9b:d7:a4:8f:bc:38:ab:c0:99:32:12:72:
01:69:f4:1b:f5:ef:d9:97:cd:3a:74:b7:ae:2d:6e:f2:d9:df:
bc:d3:5d:b1:af:e7:88:34:2c:b0:19:39:46:40:74:2b:78:65:
5d:76:e8:53:cb:a5:e1:f8:e4:24:c3:3f:ef:08:09:11:fa:99:
86:16:02:03:25:34:ea:8b:a3:59:1c:da:f4:57:4c:78:cd:4b:
cc:51:c2:fd:0e:84:08:19:26:7f:2d:a1:54:a9:76:34:03:02:
20:1e:45:3e:30:30:7d:93:dc:63:e6:5c:00:0d:44:ea:19:e0:
28:72:e8:59:79:3a:56:84:d6:45:43:34:d6:43:db:92:1d:e3:
22:5f:cc:7c:eb:6a:59:22:44:02:bb:71:19:81:41:44:18:d0:
83:d0:16:56:16:6d:d0:16:e7:99:d1:7a:1e:3e:3b:3a:23:c6:
bb:4b:12:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client