Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E284D1E873711F1A40790F8CE1D38B0.roa
File: 7E284D1E873711F1A40790F8CE1D38B0.roa (raw, json)
Hash identifier: pUtISgRKvbrz7oSL98ZMUjleoKeOqXn5fkrth4ruTGI=
Subject key identifier: 86:5A:5D:09:71:4D:64:14:70:1A:29:26:2D:89:D3:56:7E:5C:55:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E284D1E873711F1A40790F8CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:13:04 +0000
ROA not before: Fri 24 Jul 2026 08:13:00 +0000
ROA not after: Mon 31 Aug 2026 08:13:00 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116698 (0x1c7da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:13:00 2026 GMT
Not After : Aug 31 08:13:00 2026 GMT
Subject: CN=6a631e90-fa5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:68:ff:68:d3:62:3d:fb:cd:78:ea:fd:29:3b:
b0:6a:81:cb:1b:d5:ae:49:a5:c0:64:c9:54:99:c4:
7e:8f:f8:43:2c:b1:57:e5:a3:76:ef:f5:b7:5f:e6:
40:43:67:94:49:60:45:80:e5:ab:6c:64:09:c1:ff:
6a:9e:29:fa:70:11:24:6e:e7:3d:f9:84:4f:b3:fc:
ca:78:8d:41:61:d3:19:cd:c5:99:a9:71:10:6a:65:
9e:ac:23:78:a0:0b:09:72:d8:d1:26:a4:47:b4:4b:
be:d3:12:59:36:da:7b:3a:c9:d1:ae:70:05:46:70:
e0:85:39:22:27:80:36:99:20:ae:f8:fb:ae:2d:f7:
79:ca:51:d1:6f:05:9d:af:74:ea:7d:1d:bf:4e:3c:
d9:29:13:d0:d5:10:f5:c3:8d:9b:48:5b:af:7c:15:
d4:13:6d:36:00:20:9c:e3:89:f1:ff:83:d7:27:5a:
07:66:5a:51:be:0f:f6:8d:ad:e7:fd:cb:a1:31:0f:
ba:52:56:05:14:cf:c4:9f:4f:88:4a:66:39:c0:bc:
a3:85:fb:95:b1:56:d7:57:52:c6:48:3f:dc:35:52:
05:2b:7f:45:e7:4b:a3:0b:76:94:0d:87:57:68:ae:
5f:91:6b:24:c4:7b:ef:09:91:81:03:98:aa:b6:dc:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:5D:09:71:4D:64:14:70:1A:29:26:2D:89:D3:56:7E:5C:55:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E284D1E873711F1A40790F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
ae:c2:94:22:c1:44:c6:c6:07:2b:24:00:c7:64:a0:b7:34:ad:
e3:a3:13:75:5e:85:1e:d7:2e:3d:1c:dc:6b:ac:53:f0:80:41:
7e:f0:3d:97:34:29:d2:bf:6a:9a:da:f3:53:45:9f:cf:c3:07:
36:46:9c:17:84:d5:b4:69:61:e0:97:ec:f2:d1:f1:2f:b6:4d:
ad:bb:9c:85:63:08:75:e0:1f:d7:ef:dd:23:07:cd:3b:6d:83:
c3:6f:4b:6d:10:19:25:34:44:77:dd:2c:f2:35:96:2b:0d:31:
dc:f7:02:b4:8d:f2:06:0e:a1:f2:e4:bb:7b:1b:b7:5e:0c:54:
01:d9:8c:97:b2:49:25:52:14:97:1b:71:db:d6:ed:ff:be:e4:
30:33:06:b3:cf:fb:e8:8f:5c:0b:20:6a:df:b4:da:03:52:fe:
3e:3c:7e:dd:c8:89:e4:c6:f4:af:05:e3:be:9d:f6:c9:55:b1:
5b:3c:f5:6e:f2:61:b4:3e:2d:fe:87:80:ac:a4:bb:84:99:a7:
82:00:68:05:1a:77:70:a9:62:38:81:80:67:f7:b4:00:7b:43:
1f:25:13:84:7f:7f:98:ae:9a:2f:8c:c6:5a:eb:64:c0:6f:2b:
3b:8c:b8:52:c0:21:d8:83:3e:be:cb:30:8f:54:18:fa:f8:d8:
76:f7:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:22:49 2026 by rpki-client