Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D109B0255DC11F1BC5E0804CF1D38B0.roa
File: 7D109B0255DC11F1BC5E0804CF1D38B0.roa (raw, json)
Hash identifier: Q3mtMkFqTqeADb3/iCu3yGQ3I7p3LZfiFgT0YaQ7FKo=
Subject key identifier: C0:B4:F3:56:8C:1A:45:A0:61:6D:29:64:D2:F3:17:59:7F:C6:3F:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7F7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D109B0255DC11F1BC5E0804CF1D38B0.roa
Signing time: Fri 22 May 2026 12:48:11 +0000
ROA not before: Fri 22 May 2026 12:48:05 +0000
ROA not after: Sat 08 Aug 2026 12:48:05 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112631 (0x1b7f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 12:48:05 2026 GMT
Not After : Aug 8 12:48:05 2026 GMT
Subject: CN=6a10508b-bf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:2b:c0:f5:c2:e0:39:4f:f4:93:7d:a7:f0:
c7:e3:f3:5b:9f:43:d7:05:52:c5:c0:d9:b1:7b:5c:
9f:3b:38:16:fa:28:7b:da:93:2a:a0:70:e3:ea:d0:
34:32:db:ef:69:97:5e:09:d0:12:cf:5c:7f:bc:9a:
06:ca:d0:09:5f:34:86:ed:63:9e:6d:be:c6:9c:d0:
21:25:79:06:19:51:da:bc:09:55:90:e3:f6:0f:a0:
9e:ee:0b:19:8a:9f:1f:fb:9c:e5:dc:69:a2:e9:ba:
d7:0d:a2:9f:c2:74:54:a9:a9:e9:d0:aa:2b:44:f9:
e3:fc:af:39:42:83:73:8c:4c:52:05:e1:c4:cc:b5:
f8:31:b8:fc:fe:93:98:94:4b:ea:da:9f:90:af:b5:
a7:a8:13:f1:d1:fe:55:d7:21:6f:53:a7:97:0e:9e:
ad:06:92:8c:4f:f5:c6:10:a4:7b:bc:5e:cf:8c:b0:
37:47:64:fa:90:92:45:a3:37:86:aa:40:b6:ee:b8:
90:74:3f:19:ed:30:9b:66:1a:3b:c2:30:c6:bd:f8:
6a:a9:16:90:8a:d8:bd:cf:31:7e:b7:d5:29:3c:c0:
54:66:0d:47:1c:7d:d5:3e:18:26:d5:50:b1:62:69:
9e:d2:3a:50:8e:11:0c:e3:85:b9:e1:cf:00:c5:e6:
6b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:F3:56:8C:1A:45:A0:61:6D:29:64:D2:F3:17:59:7F:C6:3F:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D109B0255DC11F1BC5E0804CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:77:f5:9a:02:e4:fa:dc:75:72:ce:00:27:a4:9e:61:78:2c:
c3:6c:3d:83:f8:31:a6:fd:e6:b4:51:c1:ca:dd:af:05:99:75:
fb:20:d0:89:db:2c:e4:28:61:a2:ac:f4:55:cc:54:eb:de:c7:
4f:ef:2c:18:e4:62:16:e0:6e:23:78:b6:76:65:2b:77:c1:34:
0d:e6:bc:c4:c6:75:ad:d0:dd:86:3c:63:0a:88:3f:64:9a:2c:
a7:0b:12:f7:3c:cf:ee:ce:1e:1b:5b:0d:05:d3:66:6e:57:17:
ef:2c:1a:96:ac:4d:05:3e:15:8c:4d:d3:db:b7:c4:a6:2f:f3:
2f:c0:3b:47:1b:ce:3f:ca:af:ec:75:1e:cc:13:93:63:5f:3c:
63:5f:56:ef:b2:cb:bb:c6:8a:e5:b1:ec:53:d3:32:ef:14:3c:
4e:31:71:20:f9:ea:54:04:e5:4a:04:b8:02:be:68:47:ba:f1:
37:b2:9b:27:80:87:a7:cb:c7:6c:a7:a5:2c:56:11:e7:09:7f:
0c:38:80:c2:f2:22:f8:fc:d3:50:05:6f:e4:7f:69:5d:b8:20:
5d:33:51:35:7e:6d:8e:aa:88:c7:7c:36:90:b1:9e:54:56:da:
1e:56:f2:1b:0a:da:92:ed:f0:b0:64:97:3a:d4:36:7e:ee:a8:
74:ca:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:57 2026 by rpki-client