Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF331AE81C111F19300EEAFCE1D38B0.roa
File: 6EF331AE81C111F19300EEAFCE1D38B0.roa (raw, json)
Hash identifier: qPCLq/Ldp+CLTYUBJEy1hwA/OB58PIYm9D80EgypAX4=
Subject key identifier: 5A:87:91:A8:E0:59:D0:90:06:40:76:B6:32:1C:62:A8:9F:97:72:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF331AE81C111F19300EEAFCE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:25:22 +0000
ROA not before: Fri 17 Jul 2026 09:25:18 +0000
ROA not after: Mon 24 Aug 2026 09:25:18 +0000
asID: 402169
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116173 (0x1c5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 09:25:18 2026 GMT
Not After : Aug 24 09:25:18 2026 GMT
Subject: CN=6a59f502-e89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:79:49:0b:61:27:be:ad:21:f3:c4:07:62:b8:
1f:f9:34:52:8b:e5:01:06:50:94:b8:28:cd:8d:4c:
64:ab:52:7c:0a:23:af:d4:f2:e5:c4:25:63:72:9c:
df:c6:55:f0:cd:e2:60:4a:3f:4d:ff:94:6f:c8:ca:
b3:4a:44:1c:1a:f1:cc:62:e6:97:95:ec:79:08:24:
bb:57:1c:68:96:aa:e8:98:72:c4:19:ec:c4:c3:50:
b2:87:e1:a4:9f:b6:42:36:6f:f1:94:77:1c:85:22:
ba:ff:26:47:a5:b1:35:59:bc:55:bf:c4:bc:dc:9f:
a5:d1:33:f5:50:e7:23:64:c3:e2:8a:1c:5a:f1:70:
4f:3e:3e:9a:22:85:6f:e4:40:74:11:74:e7:70:e3:
2a:08:fa:2d:e1:67:c4:92:82:f9:41:dc:eb:93:56:
45:5b:91:4c:9a:4d:7d:11:9c:00:51:d0:81:4c:7c:
65:f4:fc:9f:30:1a:13:62:e5:6d:bb:aa:2a:3c:f0:
35:5f:17:2f:ed:2b:f3:10:87:f1:42:19:26:a5:f5:
c5:29:f7:ab:b9:88:22:c9:2c:6a:00:15:4e:73:5c:
1e:25:de:a9:a6:d3:47:bd:76:a7:1e:df:07:0d:64:
a3:62:f6:10:49:4f:cb:d8:e0:68:35:c0:b3:6a:8d:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:91:A8:E0:59:D0:90:06:40:76:B6:32:1C:62:A8:9F:97:72:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6EF331AE81C111F19300EEAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0/21
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:fb:91:a6:3e:8d:d9:05:4b:ee:28:0e:85:48:3b:0c:2a:07:
e7:45:00:e1:2e:ed:e7:c4:e8:c0:1d:c9:de:2a:eb:13:7e:e7:
cd:06:83:0f:28:66:2b:6e:08:5d:13:7a:ed:fd:f7:f8:aa:91:
c1:50:7f:8d:a6:86:01:9b:65:eb:da:1f:e9:07:6f:cb:f2:dc:
1f:6e:49:5b:3e:a0:41:f1:02:c7:02:d8:27:49:1a:52:a4:96:
7b:c1:e0:18:e4:5d:54:6c:2a:1a:f9:5c:05:80:d8:92:27:4d:
93:ce:e3:97:78:d5:e8:6e:aa:3c:ea:4d:b9:aa:78:8f:9b:0f:
79:82:7b:27:2a:52:6d:34:5f:6e:1c:42:48:66:29:af:af:69:
23:42:1c:a4:4c:bf:c9:0e:8a:78:2a:6c:d2:2c:3b:20:7b:92:
ce:ae:0e:65:31:35:fd:bb:0c:d9:10:05:e6:48:fe:0b:fa:22:
35:aa:f2:1e:5b:ea:8d:e5:ab:ea:5a:59:c8:5c:bf:54:66:ef:
c7:b5:8a:94:f3:0c:57:5d:0b:5e:63:c2:7f:7d:d9:4f:d4:61:
86:1c:ce:36:d0:64:7b:8b:58:bd:3c:96:2c:d2:79:5b:4f:39:
06:7a:59:b3:20:c3:b9:e9:73:f5:3f:2c:20:80:51:ec:bd:33:
f6:49:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:18 2026 by rpki-client