Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FEE85B8579011F1880D1CE3CE1D38B0.roa
File: 7FEE85B8579011F1880D1CE3CE1D38B0.roa (raw, json)
Hash identifier: 8PtdElQUUe1Ioxs0ciBUygWZA1SKg1zwGauG2rtlS8E=
Subject key identifier: 59:F6:66:4B:0C:F4:AB:DE:52:A1:72:09:3D:C1:51:85:6F:27:1E:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B926
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FEE85B8579011F1880D1CE3CE1D38B0.roa
Signing time: Sun 24 May 2026 16:49:16 +0000
ROA not before: Sun 24 May 2026 16:49:12 +0000
ROA not after: Wed 01 Jul 2026 16:49:12 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112934 (0x1b926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 16:49:12 2026 GMT
Not After : Jul 1 16:49:12 2026 GMT
Subject: CN=6a132c0c-eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e7:b0:1c:a0:dc:af:ef:82:89:e4:18:2f:4f:
32:f5:f1:d9:af:fd:3a:55:e8:8b:f6:a8:41:5f:5e:
3e:a6:9a:0c:60:be:64:36:6f:7d:59:1a:01:87:7f:
71:0e:8a:03:a3:bf:b8:b3:2e:fd:53:52:55:ed:8b:
5b:c4:e1:2c:94:00:3f:3a:af:5c:d5:2e:d2:cf:70:
7b:cd:78:cf:e6:ea:e2:f5:03:a9:a2:50:be:c2:31:
06:0b:f5:88:e0:da:47:46:2b:17:ad:5f:ba:2e:d1:
53:de:db:ee:97:40:0d:89:00:f6:43:43:dc:a0:a7:
b8:3c:9c:f8:d8:5a:d1:6b:1e:63:c0:ca:17:17:f6:
e9:f4:ff:cf:2c:da:a1:d1:b1:e7:3a:60:8c:3f:98:
21:be:66:de:d7:ed:a5:e1:ca:30:57:fe:81:f1:d2:
e7:8f:de:aa:ef:d9:7c:ed:c6:ff:18:d8:29:de:5d:
e6:f3:cc:ac:d5:07:f2:e2:97:1e:22:fd:bb:56:24:
1a:1a:63:cc:78:d5:db:b3:92:98:46:49:1e:ee:01:
5d:91:81:e2:27:5b:ca:4b:b5:78:b8:eb:ae:fc:73:
cd:21:24:b5:63:fd:d1:e6:14:51:80:d6:02:0d:ab:
f9:2e:f2:c2:9a:28:a4:7f:89:de:5d:eb:f7:4d:e2:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:66:4B:0C:F4:AB:DE:52:A1:72:09:3D:C1:51:85:6F:27:1E:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7FEE85B8579011F1880D1CE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
a1:89:e3:99:db:c9:e1:d9:3d:e6:e0:06:a9:8e:5d:0e:1c:e5:
55:c0:f8:53:d8:bf:94:fa:60:75:37:d5:5d:1d:9e:41:57:a4:
74:a3:30:61:61:06:11:a0:f8:27:42:ca:1c:5d:1a:a3:d0:2f:
36:8a:fe:0c:ed:6f:ac:70:37:be:3c:2f:82:54:1e:81:64:a3:
e4:d6:98:ff:c6:b9:e1:9d:f8:0b:68:17:09:a9:81:00:bb:85:
d6:6e:9a:0e:86:6c:c0:ba:1c:60:03:08:be:4a:bb:40:6f:5c:
35:25:f6:12:0a:4c:bc:4f:ed:62:b8:fa:ac:c7:d7:59:89:a7:
68:a3:e3:66:0e:59:1a:ef:fc:b0:ba:aa:e5:af:5b:e1:2d:5b:
0a:5f:03:3f:36:bc:1f:aa:71:69:77:c3:d1:2b:a6:4d:ac:01:
73:66:64:8c:56:3e:0b:07:a0:8b:a6:2d:bd:8d:2c:36:b1:96:
b3:ea:ae:5b:e8:b5:47:07:65:aa:59:51:4c:f6:97:44:b2:5a:
18:de:bf:c9:3d:4a:4e:ef:78:d9:40:20:b7:4a:4b:6d:1b:fa:
23:5f:e5:c2:3a:43:42:b8:e7:fd:95:a3:61:29:14:87:ee:4a:
65:89:58:78:df:66:4e:1f:2c:c9:46:c7:b4:58:0c:6b:cf:99:
81:53:14:ed
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbkmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI0MTY0OTEyWhcNMjYwNzAxMTY0OTEyWjAYMRYw
FAYDVQQDEw02YTEzMmMwYy1lYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4uewHKDcr++CieQYL08y9fHZr/06VeiL9qhBX14+ppoMYL5kNm99WRoB
h39xDooDo7+4sy79U1JV7YtbxOEslAA/Oq9c1S7Sz3B7zXjP5uri9QOpolC+wjEG
C/WI4NpHRisXrV+6LtFT3tvul0ANiQD2Q0PcoKe4PJz42FrRax5jwMoXF/bp9P/P
LNqh0bHnOmCMP5ghvmbe1+2l4cowV/6B8dLnj96q79l87cb/GNgp3l3m88ys1Qfy
4pceIv27ViQaGmPMeNXbs5KYRkke7gFdkYHiJ1vKS7V4uOuu/HPNISS1Y/3R5hRR
gNYCDav5LvLCmiikf4neXev3TeLVjQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFn2
ZksM9KveUqFyCT3BUYVvJx5+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RkVFODVCODU3OTAxMUYxODgwRDFDRTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc/iADBAWc/kAwDQYJKoZI
hvcNAQELBQADggEBAKGJ45nbyeHZPebgBqmOXQ4c5VXA+FPYv5T6YHU31V0dnkFX
pHSjMGFhBhGg+CdCyhxdGqPQLzaK/gztb6xwN748L4JUHoFko+TWmP/GueGd+Ato
FwmpgQC7hdZumg6GbMC6HGADCL5Ku0BvXDUl9hIKTLxP7WK4+qzH11mJp2ij42YO
WRrv/LC6quWvW+EtWwpfAz82vB+qcWl3w9Erpk2sAXNmZIxWPgsHoIumLb2NLDax
lrPqrlvotUcHZapZUUz2l0SyWhjev8k9Sk7veNlAILdKS20b+iNf5cI6Q0K45/2V
o2EpFIfuSmWJWHjfZk4fLMlGx7RYDGvPmYFTFO0=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:47 2026 by rpki-client