Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9739E2B472E111F1A1F53CB8CE1D38B0.roa
File: 9739E2B472E111F1A1F53CB8CE1D38B0.roa (raw, json)
Hash identifier: R5CjbyQqqXV0z4l7klI1STXsh8DWD0t6VNzGAiBS4vU=
Subject key identifier: FA:D9:76:77:CA:CE:BC:76:44:35:B0:18:CF:48:0B:4A:90:6F:BD:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C119
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9739E2B472E111F1A1F53CB8CE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:07:46 +0000
ROA not before: Sun 28 Jun 2026 11:07:41 +0000
ROA not after: Mon 31 Aug 2026 11:07:41 +0000
asID: 399077
IP address blocks: 156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
156.251.0.0/24 maxlen: 24
156.251.1.0/24 maxlen: 24
156.251.2.0/24 maxlen: 24
156.251.3.0/24 maxlen: 24
156.251.4.0/24 maxlen: 24
156.251.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114969 (0x1c119)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 11:07:41 2026 GMT
Not After : Aug 31 11:07:41 2026 GMT
Subject: CN=6a410082-dfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:62:53:bd:4b:c9:c7:1f:5e:0a:36:3c:08:e1:
63:e3:4f:77:56:05:ee:7f:cb:fd:15:d3:9b:32:c8:
84:3d:f3:ad:7a:8b:09:b8:92:7e:34:dd:52:29:f8:
dd:83:94:ce:ca:f6:d9:20:77:4a:f7:2a:ce:e2:6b:
cf:13:ed:f6:2d:3a:3e:35:37:9c:64:0e:1e:5e:54:
e7:c1:05:07:1f:b6:f7:80:49:32:70:d7:87:8d:81:
14:d9:2d:da:b5:b7:ba:6c:c2:7b:a6:24:91:eb:20:
9b:af:18:6b:b4:03:b3:60:70:a7:ed:51:45:3a:6b:
c9:87:d7:d6:7c:72:02:f2:cb:a5:2a:e8:55:7e:a3:
80:fd:01:e9:95:78:6d:ee:12:32:d7:23:d0:33:8e:
98:a5:c0:f9:ff:6f:1b:ee:cb:b4:b1:78:f7:bb:2f:
67:20:e8:ba:ac:b8:bd:33:b1:f6:b6:df:ec:e6:87:
88:1a:bb:52:5e:43:48:52:b8:b4:5f:9a:e2:f2:d9:
a6:3f:4e:f8:74:d6:4e:f4:c9:89:a5:fd:c8:61:4e:
26:d4:c9:77:e6:34:00:3b:c6:0b:69:2c:a1:bc:71:
0a:ad:d5:98:71:1e:44:24:96:5e:6f:6b:5c:12:d7:
31:d2:29:c9:d4:93:0a:1d:a7:a7:a9:51:b7:dc:c6:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:76:77:CA:CE:BC:76:44:35:B0:18:CF:48:0B:4A:90:6F:BD:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9739E2B472E111F1A1F53CB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.252.0/22
156.251.0.0-156.251.4.255
156.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6b:63:e3:05:7e:d2:42:11:76:61:c5:ea:2e:9d:66:cd:c4:
18:32:9c:98:41:e8:40:c3:b5:0b:5f:17:6c:67:5a:ad:55:0d:
60:cf:42:53:b4:e2:a2:1d:a4:00:ee:eb:06:eb:13:16:ef:41:
7e:40:8d:76:40:e5:38:76:cc:f7:b0:53:3f:c1:32:b8:f0:8b:
2c:b5:d8:f7:cb:49:49:db:21:a2:ff:69:78:af:d9:22:30:d6:
19:dc:32:2b:48:a1:0e:0d:c2:62:82:2a:ce:6c:dd:ee:e4:87:
cf:ad:15:55:9e:32:43:e3:93:56:e7:72:b9:8c:df:47:95:da:
c4:bc:f6:62:85:c8:6b:5c:01:7d:2a:53:6d:42:93:aa:b4:a6:
8a:9f:54:08:33:9b:ec:a8:0f:52:ee:00:44:22:d2:d7:3e:54:
77:a6:11:fc:7d:ef:cd:c4:28:40:e5:a0:71:bf:e8:70:7f:c1:
16:e9:be:7c:48:90:a7:45:c3:ea:95:24:c1:a0:8a:e1:5b:a8:
a9:3e:d6:70:15:8a:bc:50:c5:65:ae:f1:29:f3:a3:c1:a0:69:
ce:89:4d:23:c7:1e:46:ba:44:60:b7:89:32:f3:29:65:3a:62:
3a:9d:9d:04:39:b2:60:54:99:2e:f8:8d:f4:01:ea:72:cf:ff:
21:81:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:03 2026 by rpki-client