Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD44FAE746211F1AA01FEDFCE1D38B0.roa
File: 7CD44FAE746211F1AA01FEDFCE1D38B0.roa (raw, json)
Hash identifier: dILlYy0ai9nPPTXr7yUgdWKFoH49p55v8/j1wzBED+Y=
Subject key identifier: 47:DC:3D:C4:6F:9E:98:8F:84:3A:BA:39:FD:80:93:FF:88:26:B9:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD44FAE746211F1AA01FEDFCE1D38B0.roa
Signing time: Tue 30 Jun 2026 09:02:58 +0000
ROA not before: Tue 30 Jun 2026 09:02:53 +0000
ROA not after: Sat 01 Aug 2026 09:02:53 +0000
asID: 395793
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115183 (0x1c1ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 30 09:02:53 2026 GMT
Not After : Aug 1 09:02:53 2026 GMT
Subject: CN=6a438642-ca16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:d0:f1:61:69:e1:1c:09:23:9c:d8:f4:af:
64:b1:7e:fe:70:05:db:d1:e2:25:e3:5c:c1:5c:05:
60:37:3b:03:52:21:4d:80:63:84:6c:f6:e4:0b:c3:
38:b9:9d:4f:e2:ce:ea:0d:0f:fa:2f:99:1b:2f:97:
57:cc:53:59:eb:d9:3d:92:74:4a:09:00:e4:74:cf:
44:aa:16:9b:78:33:2a:57:fd:99:48:b0:0f:ec:74:
08:ef:29:9c:b6:52:28:09:a9:da:ee:72:17:e6:78:
b5:10:b2:43:ff:48:d0:d0:77:4e:cf:b0:70:8d:e8:
23:df:23:d1:0a:04:b3:26:ec:78:bf:42:34:3f:05:
91:2b:e5:a3:63:fa:31:9c:3f:bf:2e:0f:4a:42:ad:
e2:3d:8c:30:4c:87:4b:f8:61:68:89:7c:17:f7:0c:
ae:d2:84:13:c0:8f:8b:17:51:ce:14:26:e6:48:4e:
87:44:aa:de:c2:5d:e4:3e:82:9e:ba:de:34:ff:b8:
02:95:5f:8a:27:7a:e9:5c:41:31:8b:a2:0c:e3:e7:
2f:58:c4:b0:88:ee:94:b6:de:02:1b:33:d0:2d:10:
93:a1:16:b4:a2:d5:bc:e2:25:81:9c:7e:31:ab:10:
e5:30:05:fd:60:ca:84:42:d4:8d:88:ae:22:c9:13:
c6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DC:3D:C4:6F:9E:98:8F:84:3A:BA:39:FD:80:93:FF:88:26:B9:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CD44FAE746211F1AA01FEDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
32:1d:90:8d:72:d0:3e:c7:f0:1f:3a:16:a8:ee:ae:cb:31:82:
e8:e1:af:fe:40:2b:6e:75:ff:e2:9a:93:29:91:03:cf:61:20:
92:da:cf:94:00:35:55:cc:6f:0e:16:17:fe:38:d1:c4:82:32:
52:f2:5d:cd:8e:e8:8a:b1:e6:51:97:e3:98:10:18:9e:bf:ae:
84:f9:7b:2b:23:1b:a0:82:57:3d:59:22:d3:4b:3b:3a:82:93:
96:a4:1c:3e:3d:09:b9:28:8a:21:49:5b:df:9f:24:0d:46:d2:
e8:38:6c:2e:d3:b1:89:bd:01:03:30:f8:e7:a9:7d:4d:ab:e7:
71:46:ff:a1:08:fb:4a:98:56:94:e2:32:0a:dc:5d:67:2e:b6:
c1:01:18:d6:76:81:07:12:cf:9d:08:70:7a:f7:31:52:46:b2:
3d:7b:39:12:39:51:06:39:2d:72:88:e6:46:4d:08:f1:21:f4:
90:e1:80:ac:58:10:ac:bc:a8:99:fd:31:44:b8:8a:4f:1a:a3:
f4:41:43:08:c8:7a:44:3d:cc:bc:5d:da:d9:92:4b:83:b3:85:
6c:bc:64:56:c9:d6:1e:e5:84:7b:98:03:4c:f4:4e:68:f8:07:
9b:c1:f2:db:91:3d:3b:6c:a8:10:5d:05:c7:8b:b5:6f:ef:ab:
7e:b2:b0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:38 2026 by rpki-client