Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E697C8756811F18C28DD0DCF1D38B0.roa
File: 92E697C8756811F18C28DD0DCF1D38B0.roa (raw, json)
Hash identifier: p4J8FiID+QVUa38+XKyVkJAXpMh5PapZ4Dju7l79yMQ=
Subject key identifier: 4C:64:A5:12:7F:16:73:22:01:19:79:69:C1:DA:7E:C7:8D:73:1B:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C216
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E697C8756811F18C28DD0DCF1D38B0.roa
Signing time: Wed 01 Jul 2026 16:19:03 +0000
ROA not before: Wed 01 Jul 2026 16:18:57 +0000
ROA not after: Wed 12 Aug 2026 16:18:57 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115222 (0x1c216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 16:18:57 2026 GMT
Not After : Aug 12 16:18:57 2026 GMT
Subject: CN=6a453df7-d510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d3:53:a8:56:1c:c2:4f:b9:c4:59:a7:53:30:
6c:82:88:62:e3:1d:29:ba:de:45:25:4d:70:1e:cd:
60:3f:f9:c3:5f:c8:b6:47:41:4c:9a:09:34:a8:69:
29:7b:94:c7:15:87:6b:94:80:4e:8b:34:ec:7e:1c:
4d:c1:1f:e3:a7:a4:08:b4:24:09:f1:61:27:ad:c0:
3d:da:13:a7:9d:83:60:f9:58:5c:d0:59:40:e3:a3:
c3:16:28:0c:78:ee:d1:19:3f:ff:08:de:06:22:5d:
61:8c:45:b4:dc:93:c9:5d:58:75:17:d2:3c:fe:0a:
4d:b9:a3:85:0f:f8:e9:53:7b:94:4a:ca:b5:53:7b:
88:2c:c2:72:0d:88:85:cd:6b:eb:e1:73:c8:5d:40:
d9:9e:ce:4b:c9:26:cf:7d:e6:d8:6e:d1:8e:a7:e0:
3d:f3:45:03:f2:50:bf:36:84:f8:96:a6:f2:4a:84:
22:b3:11:c5:be:58:56:c5:74:e1:67:32:ac:23:a0:
a1:e5:a3:04:5f:4c:38:79:82:6f:33:a9:29:38:ab:
3b:d7:ba:d8:69:30:1d:b6:25:ac:34:38:ca:37:7f:
79:e1:c4:e0:38:da:03:0f:ce:00:d0:5c:1e:9e:bd:
74:78:ea:93:00:a1:2e:95:b3:ae:96:01:29:6b:4e:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:64:A5:12:7F:16:73:22:01:19:79:69:C1:DA:7E:C7:8D:73:1B:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E697C8756811F18C28DD0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
32:d4:e0:ed:e7:9a:1d:8b:10:2f:05:a6:86:25:2c:7c:d1:47:
58:bf:66:52:8e:bf:10:a6:e6:09:b2:90:40:42:e9:d6:08:e1:
2a:d6:f9:f3:bc:3b:aa:ea:ca:18:52:c6:d2:a1:8c:93:91:4d:
62:bf:c9:4c:b2:3d:25:cb:ca:e3:12:78:56:c6:c7:18:7c:f3:
b1:5c:d2:a2:e5:ac:b6:d5:bb:c9:83:e4:66:2d:2f:96:af:1c:
d2:7f:80:63:17:2d:0d:ca:72:5c:98:44:f6:85:42:19:b2:ac:
50:43:63:79:c5:4c:d9:1a:f0:ba:15:7f:ee:e4:af:a1:44:2f:
5f:65:1c:57:30:f4:f4:3c:98:14:b6:91:15:9b:93:cd:bc:55:
56:29:67:ac:c1:43:e9:a6:a6:9b:20:99:4a:76:0c:6a:92:e8:
bf:a9:dd:09:f2:06:4c:b2:aa:fa:ac:75:88:6c:b6:e0:d9:48:
3a:df:39:0a:25:a1:d2:c7:f3:2f:28:a8:09:82:87:9f:7d:8c:
9f:48:55:27:ab:b7:7d:68:41:59:dc:8c:af:36:06:90:ec:14:
d9:46:79:6d:9a:64:c3:7f:fc:7a:10:74:93:c1:0f:3d:33:2a:
ee:38:3c:84:62:27:90:97:8b:cd:28:3a:45:a7:fe:50:3e:7a:
1d:52:d2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:03 2026 by rpki-client