
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97818736695911F1ABD9A101CF1D38B0.roa
File: 97818736695911F1ABD9A101CF1D38B0.roa (raw, json)
Hash identifier: CwoSWvBTX1s5cvNMm0geSICDIMcsUfJTmgUEPnf4G6s=
Subject key identifier: F2:A1:73:12:71:3E:02:F4:72:49:41:B4:B6:10:FE:78:75:83:00:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97818736695911F1ABD9A101CF1D38B0.roa
Signing time: Tue 16 Jun 2026 08:01:34 +0000
ROA not before: Tue 16 Jun 2026 08:01:30 +0000
ROA not after: Wed 22 Jul 2026 08:01:30 +0000
asID: 142032
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114156 (0x1bdec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 08:01:30 2026 GMT
Not After : Jul 22 08:01:30 2026 GMT
Subject: CN=6a3102de-5c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:49:84:97:b7:82:b5:8b:6e:b4:52:d6:b4:
8c:99:97:3c:1c:e7:90:99:4e:6b:0b:e5:df:7a:dd:
31:f0:33:46:2e:b2:aa:f9:cc:0d:ee:69:2d:bd:71:
7b:da:7e:88:02:e6:a5:ce:8f:3d:9f:89:2c:f5:21:
05:35:26:30:90:dc:8f:24:fb:8b:48:22:58:c9:06:
ca:0c:93:cd:62:b0:b0:c7:c1:28:60:66:f9:b5:f0:
59:3e:7c:b8:8b:9a:88:86:cf:a0:e1:08:95:02:2b:
9c:82:86:0d:4c:6b:99:f0:6a:d3:fa:83:6f:70:44:
60:43:4d:42:c2:97:58:e0:4a:38:80:3b:6f:a3:bb:
10:cd:12:e7:ad:7e:86:7d:42:db:76:25:e2:ee:c6:
3c:47:f3:91:de:f1:2d:b9:ce:f5:c9:d7:ed:cd:28:
1f:31:e7:4c:fa:38:0e:67:2e:d7:db:c7:a8:d6:78:
ad:df:06:61:8d:d2:9d:80:fa:90:6f:a7:40:66:95:
0c:5b:ef:09:03:63:67:64:4b:e2:17:8f:76:4f:41:
66:30:7e:9b:2d:20:58:9f:74:b9:d9:21:04:02:a2:
68:38:d7:72:f9:16:e4:20:e4:48:6c:43:aa:42:a5:
f3:d2:3a:34:6c:3a:7e:81:df:4a:79:9d:d6:d4:17:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A1:73:12:71:3E:02:F4:72:49:41:B4:B6:10:FE:78:75:83:00:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97818736695911F1ABD9A101CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:d5:75:96:05:b0:27:a7:46:cb:e5:30:19:54:90:40:38:73:
37:87:86:70:55:9f:e9:26:d4:36:8b:08:6a:60:5f:3c:a0:ef:
3d:37:a6:31:de:94:53:3b:10:49:31:9a:c0:28:c0:41:ff:1a:
20:f2:70:2c:e1:02:eb:ff:e6:cb:2f:56:5f:63:7c:f5:b6:05:
92:cf:c7:38:f7:57:15:e2:e5:ed:d5:91:56:07:12:b7:88:47:
bb:4d:e0:06:66:be:90:ce:71:4b:e1:c2:3c:d6:6f:bd:43:3a:
a7:00:3f:26:6f:fe:ad:d3:d3:ed:bd:a8:52:ff:a6:3a:9a:8d:
ac:3b:d6:fe:30:71:fb:23:15:87:c7:6b:6b:22:0a:e5:44:57:
4b:62:35:f8:c1:6d:3b:2c:95:72:e3:6b:98:b2:13:0c:c5:d3:
71:46:52:59:ef:45:97:c1:8a:5b:fd:93:bf:c4:90:b5:6e:fd:
c2:52:16:ae:d0:e8:c3:03:f2:ae:93:a1:61:24:ec:0c:5c:80:
45:87:c1:24:ed:08:eb:b2:28:ef:8b:7d:6b:0f:65:a7:cc:c8:
2d:f2:13:e9:b2:f4:e8:47:66:8d:3f:a7:92:93:3d:6e:22:70:
40:0f:fe:d0:ec:85:b6:fd:ff:ec:ee:9f:ab:b1:26:d6:54:6e:
c2:ed:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 10:41:41 2026 by rpki-client