Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4060C056BC11F19C34C4D8CE1D38B0.roa
File: 7F4060C056BC11F19C34C4D8CE1D38B0.roa (raw, json)
Hash identifier: z0QolnYGMn0FI1esbq5eOqt1L65biucgefEhCUmXbws=
Subject key identifier: DD:56:30:D0:57:3D:56:0B:96:6A:63:8A:E8:31:CC:A3:17:50:E3:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B891
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4060C056BC11F19C34C4D8CE1D38B0.roa
Signing time: Sat 23 May 2026 15:31:42 +0000
ROA not before: Sat 23 May 2026 15:31:37 +0000
ROA not after: Sat 22 May 2027 15:31:37 +0000
asID: 63199
IP address blocks: 156.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112785 (0x1b891)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 15:31:37 2026 GMT
Not After : May 22 15:31:37 2027 GMT
Subject: CN=6a11c85e-c449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:e2:e4:ed:30:df:23:3e:ab:9c:a7:84:72:
3a:bd:15:90:dd:0d:a5:0e:41:4d:43:2e:69:bc:1b:
2d:97:9c:2a:35:2d:ee:7e:ea:af:e1:26:86:e2:e6:
02:6d:a5:c2:33:90:1d:c5:5a:f1:3b:0a:af:0b:e9:
04:54:75:c5:c9:47:2f:f6:9a:b5:d0:01:6a:bc:51:
d1:b8:ac:8d:cc:54:cc:b0:fd:4c:84:98:e5:93:6c:
82:81:53:6b:b3:c7:e5:a2:f4:cf:88:fa:2f:5d:ad:
de:40:e1:dd:9c:2c:e8:22:e0:6d:6b:cc:ee:b8:ac:
12:91:f9:3b:00:55:50:9f:19:86:f8:27:ad:7e:b1:
02:9c:c6:4a:2f:d9:0b:cb:ca:4a:ee:da:ac:9e:26:
05:53:9f:e4:ab:69:ff:14:fe:1c:9b:78:3a:81:38:
b4:d5:cb:01:b8:66:f2:b4:39:74:07:38:4f:08:9b:
59:40:59:8e:0c:7d:f8:52:4f:96:84:0a:50:ea:f1:
a7:f7:ff:9a:45:23:4b:41:e6:fa:4b:42:3d:a9:1a:
98:fe:4e:2c:c1:85:21:c2:37:61:80:ea:07:d8:91:
a8:62:7d:cd:b9:7f:4e:7f:c9:17:9c:b7:a1:b9:a2:
13:d8:2f:9e:a9:52:e1:76:f0:36:dd:d4:f1:db:f1:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:30:D0:57:3D:56:0B:96:6A:63:8A:E8:31:CC:A3:17:50:E3:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4060C056BC11F19C34C4D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:7a:9b:fd:34:c7:e6:26:63:7b:35:c9:b7:ec:9a:f9:a1:7f:
b1:bc:34:37:65:8d:95:ac:6f:96:26:a6:d9:77:50:90:99:c0:
b1:f3:05:9c:97:85:7b:db:ad:9c:7d:99:50:8a:74:99:57:75:
a8:d9:f3:44:32:cc:5a:2f:36:1e:a1:dc:c5:d1:0c:02:19:36:
47:0b:d2:43:7d:c7:26:c5:f1:68:49:95:fa:77:9b:5f:6a:7f:
3d:48:a2:5c:d1:bb:74:14:db:35:d9:87:39:76:e5:7b:6a:8e:
a7:d2:24:38:ab:09:be:8a:ca:8d:b5:be:95:87:23:57:56:36:
56:0b:b9:dc:d8:00:d1:eb:fa:12:5a:19:b0:1e:26:79:f8:14:
42:67:02:f1:24:4e:92:12:a4:c0:6f:d0:63:57:e3:43:92:4b:
ed:59:3f:b9:55:4f:ca:64:3a:88:5e:b6:e6:0d:8f:48:98:e2:
93:9f:c1:f7:e0:80:63:e7:34:49:a7:4c:59:61:f5:05:af:00:
9c:c1:9a:e0:aa:df:ec:de:a4:e1:d7:87:c0:78:d0:a6:a2:8f:
f2:b8:d4:ba:04:60:93:95:91:e6:fe:af:a6:38:16:30:f6:b8:
5b:b0:2f:00:11:95:10:d8:44:df:d7:3d:eb:82:55:75:5b:cf:
67:fd:60:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:09 2026 by rpki-client