Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763110D85A6311F18C3D4617CF1D38B0.roa
File: 763110D85A6311F18C3D4617CF1D38B0.roa (raw, json)
Hash identifier: p4fNXAvEkUqaNpsuxfjlxoZid32aYKGxPnaRs9Ht8D0=
Subject key identifier: 7A:38:92:5E:CC:C1:01:D9:37:53:D7:18:23:F7:FB:93:9F:BE:67:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763110D85A6311F18C3D4617CF1D38B0.roa
Signing time: Thu 28 May 2026 07:04:26 +0000
ROA not before: Thu 28 May 2026 07:04:21 +0000
ROA not after: Wed 01 Jul 2026 07:04:21 +0000
asID: 214238
IP address blocks: 156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.241.40.0/24 maxlen: 24
156.241.42.0/24 maxlen: 24
156.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113234 (0x1ba52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 07:04:21 2026 GMT
Not After : Jul 1 07:04:21 2026 GMT
Subject: CN=6a17e8fa-34b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:4d:d3:dc:7a:cd:cb:99:e1:3c:8a:29:66:
aa:75:11:7d:e7:b1:70:ac:fa:4f:14:c4:38:eb:84:
c4:67:0e:ca:22:25:51:1f:91:02:7a:2b:f3:a7:f9:
57:3a:56:a5:ac:ec:b4:70:8b:c6:ff:0a:e8:61:1e:
83:d9:40:80:3d:81:f8:ff:a7:03:83:d6:44:17:ae:
3a:2f:7f:a4:ee:ec:23:9e:6d:62:80:93:d7:4b:64:
bc:9d:f2:0a:5d:e5:ca:8c:5d:55:b9:e2:ef:f2:16:
15:76:ad:92:67:66:3d:26:32:50:66:5e:88:08:03:
4c:17:9e:da:af:4f:35:d8:9c:84:3b:92:3f:7b:c4:
a0:62:b2:ef:78:8f:e6:00:b0:07:fb:3d:de:97:60:
28:00:b9:dc:cd:ec:f7:fd:f9:64:e4:45:e2:80:0d:
84:de:ef:2e:32:2c:04:b1:1d:ff:8b:8e:a7:eb:d9:
3d:00:e2:7c:2f:37:1a:e7:95:ec:7b:43:8d:98:15:
d5:19:d4:5c:bc:b9:31:32:90:93:34:eb:24:cd:64:
7f:aa:b2:46:b8:e0:b6:7c:5e:51:f3:c7:29:43:d2:
5d:42:67:36:b8:82:fe:fa:08:9d:f5:c8:2d:f1:5b:
e8:72:46:a0:ce:05:1f:9e:c9:df:f6:fa:95:a9:88:
fb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:38:92:5E:CC:C1:01:D9:37:53:D7:18:23:F7:FB:93:9F:BE:67:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/763110D85A6311F18C3D4617CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.21.0-156.239.22.255
156.241.40.0/24
156.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:2c:96:da:83:50:85:a2:4d:5f:59:1e:4a:04:5b:3f:8f:08:
8a:90:96:9c:74:5d:05:40:3a:22:ee:93:a1:24:47:4c:9d:bf:
32:f3:44:0c:96:67:5b:37:c4:2a:5b:09:6c:42:e4:d9:68:0b:
df:92:e5:8e:f6:4b:6f:f5:0a:6a:df:3e:72:08:6e:53:f5:cb:
ee:77:71:76:a4:38:dd:d9:a5:b9:e6:b0:69:b6:64:63:49:a7:
f8:6f:22:6a:ef:7a:cd:65:fd:c3:a2:08:7b:6e:53:8e:34:02:
46:4f:40:08:9f:3b:84:ae:35:99:17:e2:48:27:5a:e8:5d:8d:
d3:7a:9d:43:89:b7:d2:39:8d:cb:60:93:3a:16:3f:2a:13:33:
2e:ea:24:fb:9d:13:7a:ba:93:04:df:c2:5f:92:3d:1d:b9:98:
91:88:6d:3a:e7:0a:09:74:0d:50:b1:c1:58:57:0a:ba:30:05:
17:87:24:69:fb:1a:fd:a0:5c:7a:26:6d:f2:35:52:05:38:a0:
1b:39:d7:f9:bf:d8:62:76:6b:2b:a8:f6:3f:6d:f9:ce:ae:57:
1f:6d:d0:aa:10:48:98:75:de:af:9f:58:df:0e:58:2b:e6:1e:
00:8e:d8:7b:ac:dd:39:e0:37:74:1c:65:a1:cc:b4:32:5f:55:
b9:73:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:57 2026 by rpki-client