Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6607F2C0325511F1AC3344F6DAE4EC9C.roa
File: 6607F2C0325511F1AC3344F6DAE4EC9C.roa (raw, json)
Hash identifier: rd5lGC1x4KOUPIaBzcPnixb6bhffdk9GWE94TNvLttg=
Subject key identifier: 88:D8:53:1E:DF:DE:57:A9:06:87:D6:26:78:A9:B1:41:4C:8E:A4:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6607F2C0325511F1AC3344F6DAE4EC9C.roa
Signing time: Tue 07 Apr 2026 07:42:59 +0000
ROA not before: Tue 07 Apr 2026 07:42:55 +0000
ROA not after: Mon 28 Sep 2026 07:42:55 +0000
asID: 138152
IP address blocks: 156.227.232.0/21 maxlen: 24
156.227.232.0/24 maxlen: 24
156.227.233.0/24 maxlen: 24
156.227.234.0/24 maxlen: 24
156.227.235.0/24 maxlen: 24
156.227.236.0/24 maxlen: 24
156.227.237.0/24 maxlen: 24
156.227.238.0/24 maxlen: 24
156.227.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109233 (0x1aab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 07:42:55 2026 GMT
Not After : Sep 28 07:42:55 2026 GMT
Subject: CN=69d4b583-e83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:ed:66:ea:62:f2:f3:68:d2:b8:96:e3:e0:
74:e3:99:e8:da:2a:8d:93:b2:a7:4d:6e:b1:47:d0:
3a:e6:12:c5:93:87:48:e5:54:2c:d8:00:3c:e4:9b:
e6:14:74:57:58:86:50:ff:9f:e4:f4:cc:9a:f2:8e:
32:d9:5d:04:8f:1e:b5:0d:38:79:df:87:8d:b2:09:
8f:aa:6a:f9:9c:7f:21:b2:89:10:e7:2b:57:d9:04:
91:72:7e:0e:de:be:dd:95:f3:90:61:5f:48:51:d6:
f5:83:b3:b2:75:6d:cf:a8:f3:a5:52:c1:b0:31:a1:
27:af:11:9d:df:54:5d:f9:24:e3:54:21:ab:2f:39:
f0:0a:ac:05:77:05:06:34:2b:11:fd:3f:92:25:1b:
11:51:ea:a9:d3:c8:91:e0:38:cf:53:9d:97:03:6f:
0f:0c:58:c7:6a:3f:56:51:7a:b7:5d:ba:2b:cb:57:
b9:16:e8:74:3c:ad:21:48:f4:68:d0:1a:7a:15:56:
1c:4a:9f:3c:b1:2a:d7:32:35:b6:8d:63:29:8a:48:
d9:66:9d:ae:9e:a5:d5:64:1e:a7:ff:16:64:0a:c7:
3f:0d:f6:d9:3c:1e:6d:cc:9b:f2:69:36:18:6b:4f:
10:a7:21:c9:75:48:a4:44:89:57:6e:ed:3e:a5:4c:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D8:53:1E:DF:DE:57:A9:06:87:D6:26:78:A9:B1:41:4C:8E:A4:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6607F2C0325511F1AC3344F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.232.0/21
Signature Algorithm: sha256WithRSAEncryption
49:32:23:f0:d4:58:a3:b9:a7:6b:27:f0:db:28:b0:ea:44:c9:
ec:ad:ef:a6:cd:a1:ba:60:cb:bc:78:05:06:76:08:3c:c7:40:
08:e2:c2:33:f0:f4:93:e1:1c:86:33:ea:6a:0f:8c:b2:29:83:
d8:c4:2f:d0:36:af:6a:87:9a:43:09:26:60:e2:dd:18:63:41:
52:a5:f7:fd:23:bf:f7:71:e2:93:2f:dd:25:f0:18:56:03:8f:
4d:48:f4:2b:64:ba:d2:75:ca:bb:d3:88:7a:a4:92:13:39:15:
31:16:8a:e9:a0:43:df:0f:1c:8a:df:fe:e7:57:ac:1a:fa:2b:
aa:72:d9:06:83:42:eb:f2:09:d4:60:51:91:72:a5:fc:94:59:
ba:ed:ed:bb:e9:25:c6:87:24:3c:bf:61:ef:ef:59:94:96:1f:
cd:83:bd:98:2e:29:03:fc:47:c1:6e:d4:31:76:5b:7b:5e:28:
ea:47:ef:c2:c8:76:48:35:fa:3f:ab:cb:9d:02:11:67:84:1e:
be:f1:8c:d0:ee:9b:dd:ef:b3:66:39:cf:cd:f0:cf:5b:db:27:
fa:ee:15:4c:50:0e:18:e8:05:04:18:a1:68:49:71:71:92:ed:
33:79:ed:b7:b4:f0:a2:ad:e6:77:d9:df:e1:40:35:90:4d:a2:
96:3d:08:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:39 2026 by rpki-client