Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7503529076E511F19256081DCF1D38B0.roa
File: 7503529076E511F19256081DCF1D38B0.roa (raw, json)
Hash identifier: NW0/yb4zS986NfvfULMSU7epiARHfOTUyzynqf/Ay90=
Subject key identifier: 07:28:3D:56:3F:8B:0B:77:57:05:3B:C3:5F:70:A4:86:8C:14:1F:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C28A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7503529076E511F19256081DCF1D38B0.roa
Signing time: Fri 03 Jul 2026 13:45:31 +0000
ROA not before: Fri 03 Jul 2026 13:45:26 +0000
ROA not after: Mon 10 Aug 2026 13:45:26 +0000
asID: 154177
IP address blocks: 156.244.16.0/24 maxlen: 24
156.244.17.0/24 maxlen: 24
156.244.19.0/24 maxlen: 24
156.244.20.0/24 maxlen: 24
156.244.21.0/24 maxlen: 24
156.244.26.0/24 maxlen: 24
156.244.29.0/24 maxlen: 24
156.244.30.0/24 maxlen: 24
156.244.53.0/24 maxlen: 24
156.244.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115338 (0x1c28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 13:45:26 2026 GMT
Not After : Aug 10 13:45:26 2026 GMT
Subject: CN=6a47bcfb-0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:91:cf:4f:c2:aa:7e:fe:10:1a:57:6c:c1:ad:
3d:14:c6:4e:bd:a4:2e:2c:12:5f:75:47:06:e2:5f:
61:c7:16:91:e6:da:89:6c:f9:76:92:84:1d:20:c9:
e6:17:ab:ce:08:3f:71:b5:6f:25:6b:9e:9c:85:3a:
7f:a0:81:44:2a:a7:5c:dc:0e:66:bc:b0:94:9d:7a:
17:ae:05:17:a4:e2:ee:54:9d:a3:2a:f9:2b:3c:60:
a2:fb:99:c6:81:86:92:5a:0f:dc:6a:43:bc:88:70:
f6:43:ef:05:59:af:48:8c:9f:58:a1:03:96:33:18:
4d:b3:cf:62:c3:ab:2c:64:4a:32:ff:7e:21:9b:9b:
43:e8:a4:2c:be:54:6b:ba:0e:74:fc:50:e1:17:37:
78:a5:3a:35:24:9e:ad:35:9c:37:ba:53:5f:2f:2e:
c0:69:74:bc:62:7b:31:46:37:7f:de:c4:a4:36:9c:
1f:6e:0c:3e:69:c4:fd:82:b7:f7:0e:70:b2:15:20:
2d:f8:54:c3:bf:7e:87:31:28:7a:d8:46:a5:c4:36:
b1:27:10:60:0f:1e:90:5b:6f:1d:ad:d9:dd:aa:eb:
24:47:e7:b2:b0:3b:f6:c8:f1:6b:5a:6c:52:6a:00:
31:a3:00:ec:82:85:ac:e9:31:26:fb:9a:e2:98:62:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:3D:56:3F:8B:0B:77:57:05:3B:C3:5F:70:A4:86:8C:14:1F:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7503529076E511F19256081DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.16.0/23
156.244.19.0-156.244.21.255
156.244.26.0/24
156.244.29.0-156.244.30.255
156.244.53.0/24
156.244.60.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0c:a0:c5:05:1d:48:3d:6e:f7:ff:85:33:8c:c0:89:a2:8c:
54:85:69:62:d7:46:cf:2d:5b:f8:ca:ce:1a:91:7d:2b:20:a2:
37:01:17:6b:25:a1:fa:37:5d:d0:ba:51:5e:1d:3b:a8:96:5c:
10:63:0f:ee:e9:a6:f9:6a:8d:73:70:cd:1d:dc:da:28:af:97:
8e:d8:f5:33:0c:92:0f:18:9d:9d:6e:aa:2c:a1:5c:1d:fb:c6:
5f:76:08:9c:02:d9:50:c9:bf:e6:56:0d:4d:31:0b:6d:e5:36:
d9:cf:11:bc:5a:27:be:56:f9:f8:03:59:66:14:bb:e4:c6:61:
a4:5b:bc:c2:bf:80:ed:1f:4a:75:6b:30:cc:6b:7b:f1:c3:57:
d6:1a:19:4d:bf:92:1e:04:ac:f1:fc:f4:90:c2:46:bf:5c:fe:
0b:89:a3:67:09:81:1d:61:d3:8b:53:9e:72:fe:70:dd:5f:b4:
0b:89:40:7e:0a:02:ac:ed:48:6c:73:c1:e6:13:b2:e2:0f:49:
2c:9a:a7:f5:10:04:88:09:67:e0:52:ee:b9:8f:6e:18:e2:8e:
41:a6:5d:2c:a2:cd:26:b5:ac:f0:a7:fb:8c:3b:38:71:1d:e5:
92:f4:fc:92:e9:69:7a:35:4d:56:a5:4a:1b:23:cb:33:c3:7b:
1f:d7:4b:84
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAcKKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAzMTM0NTI2WhcNMjYwODEwMTM0NTI2WjAYMRYw
FAYDVQQDEw02YTQ3YmNmYi0wODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA35HPT8Kqfv4QGldswa09FMZOvaQuLBJfdUcG4l9hxxaR5tqJbPl2koQd
IMnmF6vOCD9xtW8la56chTp/oIFEKqdc3A5mvLCUnXoXrgUXpOLuVJ2jKvkrPGCi
+5nGgYaSWg/cakO8iHD2Q+8FWa9IjJ9YoQOWMxhNs89iw6ssZEoy/34hm5tD6KQs
vlRrug50/FDhFzd4pTo1JJ6tNZw3ulNfLy7AaXS8YnsxRjd/3sSkNpwfbgw+acT9
grf3DnCyFSAt+FTDv36HMSh62EalxDaxJxBgDx6QW28drdndquskR+eysDv2yPFr
WmxSagAxowDsgoWs6TEm+5rimGK5PQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFAco
PVY/iwt3VwU7w19wpIaMFB/kMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTAzNTI5MDc2RTUxMUYxOTI1NjA4MURDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBnPQQMAwDBACc9BMDBAGc9BQD
BACc9BowDAMEAJz0HQMEAJz0HgMEAJz0NQMEAJz0PDANBgkqhkiG9w0BAQsFAAOC
AQEAAwygxQUdSD1u9/+FM4zAiaKMVIVpYtdGzy1b+MrOGpF9KyCiNwEXayWh+jdd
0LpRXh07qJZcEGMP7umm+WqNc3DNHdzaKK+Xjtj1MwySDxidnW6qLKFcHfvGX3YI
nALZUMm/5lYNTTELbeU22c8RvFonvlb5+ANZZhS75MZhpFu8wr+A7R9KdWswzGt7
8cNX1hoZTb+SHgSs8fz0kMJGv1z+C4mjZwmBHWHTi1Oecv5w3V+0C4lAfgoCrO1I
bHPB5hOy4g9JLJqn9RAEiAln4FLuuY9uGOKOQaZdLKLNJrWs8Kf7jDs4cR3lkvT8
kulpejVNVqVKGyPLM8N7H9dLhA==
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:31 2026 by rpki-client