Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D44BB8072E211F18CFD71BCCE1D38B0.roa
File: 7D44BB8072E211F18CFD71BCCE1D38B0.roa (raw, json)
Hash identifier: KyLGPm6w36i2RCLN6BcG6S8IFA/rcBaMeJhuzsHq+rA=
Subject key identifier: 63:08:11:41:96:D0:CA:61:D7:4C:5F:74:8A:B7:D3:EC:0F:09:2C:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C11B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D44BB8072E211F18CFD71BCCE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:14:12 +0000
ROA not before: Sun 28 Jun 2026 11:14:07 +0000
ROA not after: Mon 31 Aug 2026 11:14:07 +0000
asID: 399077
IP address blocks: 156.240.241.0/24 maxlen: 24
156.240.242.0/24 maxlen: 24
156.240.243.0/24 maxlen: 24
156.240.245.0/24 maxlen: 24
156.240.246.0/24 maxlen: 24
156.240.247.0/24 maxlen: 24
156.240.248.0/24 maxlen: 24
156.240.249.0/24 maxlen: 24
156.240.250.0/24 maxlen: 24
156.240.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114971 (0x1c11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 11:14:07 2026 GMT
Not After : Aug 31 11:14:07 2026 GMT
Subject: CN=6a410204-9bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1c:ba:87:39:de:14:43:1b:99:3f:1d:01:52:
ad:36:1c:9b:54:78:c1:d4:c8:f5:6d:36:fb:da:c0:
82:89:e6:aa:71:2e:a1:5d:51:2a:4f:48:f3:03:50:
71:3a:27:ab:9d:ae:3e:43:67:0c:e8:b3:56:be:62:
d8:27:fb:75:85:a9:a3:9c:2d:3a:f8:00:e2:d6:d0:
2c:12:05:85:0d:f5:3a:8e:f1:fd:12:b6:d1:db:5b:
1a:05:46:db:f8:86:66:4c:ba:74:f1:83:97:9b:db:
cb:27:0b:4b:26:21:76:79:b1:76:7e:0a:67:53:b3:
53:ce:ae:55:bc:53:d7:09:9d:16:ca:02:e2:71:47:
c7:ec:80:a7:88:eb:1b:b0:d0:f3:5f:7c:97:d8:7d:
34:b4:a9:31:b4:24:67:b6:2a:10:37:55:17:44:a7:
49:f7:23:fb:95:7a:4e:61:31:90:a6:2d:61:0d:9b:
19:64:45:bf:3c:a1:34:aa:7e:b9:cc:a5:f2:7a:08:
9f:12:e0:5b:18:5d:31:41:af:2f:d1:15:a8:96:b2:
2a:c0:03:eb:45:80:8c:fa:bc:cc:37:2d:99:42:07:
34:93:14:5c:8d:96:ca:86:19:57:0d:94:5c:ce:e6:
e3:07:0e:78:93:49:a4:26:01:b7:d6:ab:82:b2:d8:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:11:41:96:D0:CA:61:D7:4C:5F:74:8A:B7:D3:EC:0F:09:2C:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D44BB8072E211F18CFD71BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.241.0-156.240.243.255
156.240.245.0-156.240.251.255
Signature Algorithm: sha256WithRSAEncryption
74:0a:bd:f9:ef:fb:c6:9a:71:1c:37:eb:a6:87:3c:8e:3d:d8:
4b:94:ac:a0:1d:6d:b6:49:ef:b9:60:21:07:f4:b4:58:66:0a:
ca:9f:af:59:fe:a9:32:24:9e:86:75:47:72:8e:a2:39:20:06:
7a:99:1e:6b:98:1d:78:0d:9c:f4:0b:6b:6c:80:75:e4:75:67:
3e:19:08:d9:b9:6f:38:0b:67:ff:0c:f7:4f:52:43:6c:4b:3c:
be:51:5a:ef:96:a6:ad:ca:70:4d:38:87:c1:4a:ca:86:e6:e7:
6a:ed:b5:2f:93:5e:49:b9:bd:09:b4:35:5d:cd:ef:59:88:34:
ca:80:b0:41:1d:d5:78:2a:e6:02:31:8e:82:c3:fb:2a:29:f3:
34:d3:d1:14:c1:9e:06:a2:01:d9:00:21:1b:ce:e5:80:0f:b6:
18:48:90:e0:a9:6f:aa:19:11:ae:12:96:52:11:da:2f:7a:27:
69:56:7f:4b:4e:fb:bc:cf:5b:0d:68:a7:a6:1d:7a:08:26:01:
b4:78:56:cc:60:c5:50:0f:cc:d0:85:b5:c1:cf:8d:c4:27:46:
70:2a:44:15:c7:9c:53:9b:06:f6:ca:73:1a:9c:9a:d4:62:9c:
ef:af:9a:2b:c0:e4:85:94:ff:d0:b9:33:cf:1c:da:4b:ad:54:
27:cd:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:40 2026 by rpki-client