Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A68B4B872F411F1889FC2A7CE1D38B0.roa
File: 7A68B4B872F411F1889FC2A7CE1D38B0.roa (raw, json)
Hash identifier: YvLHQS8dQKslqJ5QPLYj8d4vJq6/hot7Fx2PSxFIVfQ=
Subject key identifier: 81:DA:79:47:C5:00:AC:56:1D:DD:C8:56:37:79:0C:A9:5F:27:F7:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C147
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A68B4B872F411F1889FC2A7CE1D38B0.roa
Signing time: Sun 28 Jun 2026 13:22:58 +0000
ROA not before: Sun 28 Jun 2026 13:22:53 +0000
ROA not after: Tue 04 Aug 2026 13:22:53 +0000
asID: 64013
IP address blocks: 156.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115015 (0x1c147)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:22:53 2026 GMT
Not After : Aug 4 13:22:53 2026 GMT
Subject: CN=6a412032-675e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4d:76:58:f9:99:90:a7:f8:06:2e:90:11:63:
0a:d2:a3:17:00:18:e7:3a:8a:2d:16:41:e3:72:f4:
fa:ca:72:30:6d:7b:e9:5f:5c:ec:4f:21:07:68:28:
41:2b:39:42:2d:e0:3b:77:db:3f:42:37:0a:ef:7e:
18:b5:70:3d:3b:f6:1b:b4:bc:83:76:24:b9:e4:9b:
7f:5e:bc:07:2d:b3:27:fd:8d:55:c2:f8:78:69:70:
74:d5:1f:ee:f1:1e:9c:ba:30:fd:0e:3a:a4:1e:2d:
cc:bd:45:9e:02:08:6f:bb:38:4f:2d:aa:70:ae:b0:
f4:30:57:ad:8d:b6:9a:8f:df:c8:88:9b:66:78:42:
11:96:df:4a:b1:f0:00:96:48:29:fe:ac:31:0c:77:
b8:99:2f:c8:ae:e3:ff:b6:9f:21:36:5d:b6:a6:af:
c9:94:88:77:49:ee:1b:ba:3d:d6:cf:a5:57:92:a5:
ba:42:27:90:e5:d5:8b:7b:04:d3:83:98:ec:ff:e2:
f8:54:1f:3f:22:86:41:ae:2e:9c:c5:db:00:9e:6f:
c7:d1:a6:7f:1e:bb:29:a3:32:03:ca:17:6d:41:95:
b6:e8:5d:a5:ed:c4:1e:0c:45:18:f2:d1:eb:b3:67:
71:d4:37:52:2d:87:71:cb:2e:09:15:0b:1e:58:21:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DA:79:47:C5:00:AC:56:1D:DD:C8:56:37:79:0C:A9:5F:27:F7:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A68B4B872F411F1889FC2A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:38:8a:a4:18:c8:4d:3c:ae:34:08:65:06:42:fc:e5:5d:a8:
a3:da:72:48:1c:46:9a:bf:ed:42:cd:ac:98:61:8e:00:b4:fb:
13:74:c0:f9:a4:c6:84:24:12:0c:ef:a9:05:cd:b1:ef:cc:fd:
6e:d5:c1:f3:60:30:eb:71:12:65:b2:c6:7a:2d:ea:32:19:f7:
97:e8:0c:e3:f0:34:7c:a0:2c:7f:0c:3c:9b:d9:52:c5:a9:a4:
46:76:56:11:4e:9c:bf:7d:59:d5:1b:b8:21:ee:fc:72:78:a1:
92:91:06:63:db:53:4a:de:ff:0a:f0:f0:80:5a:72:9d:bd:4b:
38:ce:a3:52:64:75:ab:7b:f7:13:80:2f:b1:82:5e:4d:8b:1a:
f5:d4:73:51:87:3d:54:f2:c3:cf:5f:56:79:0e:2c:92:bb:a6:
65:8e:46:08:ca:e1:11:22:89:4e:95:37:30:b2:f5:7d:7d:ca:
95:88:60:41:a9:b5:af:4d:8a:d6:69:bf:48:04:8f:c5:a0:95:
b0:29:14:1f:d6:06:80:74:b6:a6:a4:56:09:72:2d:c7:5b:b6:
30:c7:8e:32:ee:6b:a7:1e:3b:dc:b4:b5:21:76:87:79:69:93:
a7:7a:7b:85:a2:ef:61:61:f3:6a:3d:74:fd:92:c1:6c:87:41:
ae:40:7a:53
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAcFHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI4MTMyMjUzWhcNMjYwODA0MTMyMjUzWjAYMRYw
FAYDVQQDEw02YTQxMjAzMi02NzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1E12WPmZkKf4Bi6QEWMK0qMXABjnOootFkHjcvT6ynIwbXvpX1zsTyEH
aChBKzlCLeA7d9s/QjcK734YtXA9O/YbtLyDdiS55Jt/XrwHLbMn/Y1Vwvh4aXB0
1R/u8R6cujD9DjqkHi3MvUWeAghvuzhPLapwrrD0MFetjbaaj9/IiJtmeEIRlt9K
sfAAlkgp/qwxDHe4mS/IruP/tp8hNl22pq/JlIh3Se4buj3Wz6VXkqW6QieQ5dWL
ewTTg5js/+L4VB8/IoZBri6cxdsAnm/H0aZ/HrspozIDyhdtQZW26F2l7cQeDEUY
8tHrs2dx1DdSLYdxyy4JFQseWCF5awIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIHa
eUfFAKxWHd3IVjd5DKlfJ/fTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QTY4QjRCODcyRjQxMUYxODg5RkMyQTdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBAAM4iqQYyE08rjQIZQZC/OVdqKPackgcRpq/7ULNrJhhjgC0+xN0wPmkxoQk
EgzvqQXNse/M/W7VwfNgMOtxEmWyxnot6jIZ95foDOPwNHygLH8MPJvZUsWppEZ2
VhFOnL99WdUbuCHu/HJ4oZKRBmPbU0re/wrw8IBacp29SzjOo1Jkdat79xOAL7GC
Xk2LGvXUc1GHPVTyw89fVnkOLJK7pmWORgjK4REiiU6VNzCy9X19ypWIYEGpta9N
itZpv0gEj8WglbApFB/WBoB0tqakVglyLcdbtjDHjjLua6ceO9y0tSF2h3lpk6d6
e4Wi72Fh82o9dP2SwWyHQa5AelM=
-----END CERTIFICATE-----
Generated at Thu Jul 9 02:31:51 2026 by rpki-client