Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EDAEB9C720511F1A76670FFCE1D38B0.roa
File: 6EDAEB9C720511F1A76670FFCE1D38B0.roa (raw, json)
Hash identifier: esleI9qcnCQeeZIICpbouh8ugufieA4JDKit5e7S1aI=
Subject key identifier: C6:BE:80:70:E1:EE:36:AB:49:48:5A:43:66:AD:E7:36:F0:5A:C4:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EDAEB9C720511F1A76670FFCE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:51:49 +0000
ROA not before: Sat 27 Jun 2026 08:51:44 +0000
ROA not after: Thu 30 Jul 2026 08:51:44 +0000
asID: 32043
IP address blocks: 156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114904 (0x1c0d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:51:44 2026 GMT
Not After : Jul 30 08:51:44 2026 GMT
Subject: CN=6a3f8f25-62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:be:cd:7d:ba:62:8d:97:2c:82:6a:55:66:
02:8f:7d:07:76:bc:0e:d8:c4:ce:77:25:5b:1d:8f:
79:9f:93:ba:d0:08:b8:46:50:eb:a0:90:94:5b:43:
7d:72:5f:7b:6b:66:08:ab:e2:30:fb:48:70:8b:88:
b2:f1:3b:6a:b5:4a:a1:42:b8:d8:a3:67:72:d4:ee:
ff:4d:ac:cf:ab:4d:dd:a0:4b:ce:50:de:37:e3:8c:
51:de:36:63:78:4f:ca:0b:00:f4:0d:26:fc:c7:04:
d9:ee:5a:6e:3c:e3:70:9b:e4:a0:2f:52:a9:37:89:
23:d4:70:3c:21:80:cb:43:5d:57:51:a5:a1:97:67:
ef:53:59:d6:6d:03:eb:24:79:7a:66:34:7c:cf:89:
94:b0:84:5d:8f:f2:a3:fa:e8:50:32:17:8e:f5:a9:
2c:60:bc:a4:51:75:c7:d5:8d:bb:43:88:b1:53:2e:
56:aa:9a:56:09:27:c6:07:be:d7:54:f2:e8:86:e7:
95:72:de:1d:d2:55:2f:3d:b0:64:43:d3:e7:9b:da:
7d:d8:22:10:48:e6:7f:18:59:be:92:67:b6:ff:a1:
89:bf:1d:94:e4:91:e7:af:ac:c0:2b:12:e7:fb:46:
ac:96:5b:14:5a:c1:23:38:40:ab:11:7e:4e:7c:11:
cf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:80:70:E1:EE:36:AB:49:48:5A:43:66:AD:E7:36:F0:5A:C4:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EDAEB9C720511F1A76670FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/22
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
10:82:ea:6a:f4:a2:3a:dc:50:44:24:e2:6e:20:38:fe:88:1b:
ff:44:eb:5d:ca:42:67:2d:36:aa:17:57:1d:54:ee:3c:e7:53:
73:42:39:0a:e6:ac:44:f6:d8:85:79:d5:e1:49:18:66:15:c2:
d4:69:18:0c:c2:da:98:0e:dd:20:c5:fe:df:2f:90:ac:05:af:
c5:dc:49:0e:c4:e4:7d:a3:e5:b6:14:4d:a6:06:96:0c:5b:c4:
f9:dd:38:62:3b:0a:59:ff:23:ba:49:db:0a:62:19:e5:51:7e:
39:3a:72:80:b9:85:d8:0b:34:3c:ea:f5:08:20:25:15:90:46:
75:2c:a8:71:c7:09:c6:30:8e:b2:88:1e:f0:70:95:e3:cb:48:
79:a3:e0:3b:63:f6:3e:3a:c9:4c:0e:d1:dd:20:43:fa:77:2c:
20:8c:89:14:cb:96:0b:8a:93:ed:81:1f:d4:c3:eb:33:d6:42:
9f:dc:27:90:85:89:79:03:24:b3:71:73:3f:6f:a5:2f:f8:ef:
99:5b:79:7a:dc:2c:36:c8:43:d8:34:36:e8:29:79:dc:17:47:
6a:ae:9e:a3:90:e7:f1:97:80:b7:35:6c:b5:72:d6:9d:5b:93:
2c:b2:75:0b:6a:9a:d7:23:fb:59:61:60:24:40:df:ae:4f:30:
5c:98:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client