Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9991912E7C3C11F1B06E05D5CE1D38B0.roa
File: 9991912E7C3C11F1B06E05D5CE1D38B0.roa (raw, json)
Hash identifier: AlMO+xpqNkDYV1RL58YOoUuUH02/w6Z6VpW6D6/8KOo=
Subject key identifier: 34:65:13:00:30:0D:9D:4A:9B:25:46:25:1D:5F:27:5B:E8:87:F5:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C444
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9991912E7C3C11F1B06E05D5CE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:51:54 +0000
ROA not before: Fri 10 Jul 2026 08:51:50 +0000
ROA not after: Tue 10 Jul 2029 08:51:50 +0000
asID: 17561
IP address blocks: 156.251.171.0/24 maxlen: 24
156.251.172.0/24 maxlen: 24
156.251.173.0/24 maxlen: 24
156.251.174.0/24 maxlen: 24
156.251.175.0/24 maxlen: 24
156.251.176.0/24 maxlen: 24
156.251.177.0/24 maxlen: 24
156.251.178.0/24 maxlen: 24
156.251.179.0/24 maxlen: 24
156.251.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115780 (0x1c444)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:51:50 2026 GMT
Not After : Jul 10 08:51:50 2029 GMT
Subject: CN=6a50b2aa-374f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:c3:2b:0e:c4:0e:56:ba:d3:56:f4:30:b8:
e3:d6:2a:3f:d8:a8:ff:fd:de:c5:1c:d2:42:75:5d:
bc:61:4d:17:09:72:ce:8f:a4:40:3a:45:d0:8d:0d:
56:da:50:8a:37:38:01:e0:63:95:6e:0a:f3:76:61:
ed:31:0b:85:fa:44:ca:6e:61:8c:94:01:5b:33:eb:
31:b7:09:42:f2:97:9d:4b:2d:dc:55:26:b1:36:8b:
d4:b5:4c:92:28:78:9b:0c:ba:26:bd:d4:a2:aa:92:
51:06:e9:78:26:15:5c:60:04:51:36:5f:93:27:18:
87:57:f7:40:b8:5d:b4:56:5e:b4:4a:9c:89:99:83:
56:1b:fe:2d:b6:27:9f:68:d3:b9:44:e8:9c:c9:30:
51:a5:04:46:3a:24:1b:4c:d8:88:53:2e:76:c7:dd:
66:e4:2d:71:ef:c2:05:20:a3:8c:98:3e:e0:eb:79:
4d:f2:f5:b2:aa:b1:6e:de:82:cd:23:8e:1b:f0:5e:
1f:ca:15:f9:ef:82:42:c1:fb:f9:df:5e:e0:87:f7:
18:25:f5:a9:b6:c2:a1:02:d7:12:3e:9f:7b:01:b6:
3d:e5:90:56:90:b3:64:ac:02:fe:2c:57:71:c3:99:
b3:dc:41:17:e2:b9:50:1e:d8:4e:83:29:36:7c:e1:
81:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:65:13:00:30:0D:9D:4A:9B:25:46:25:1D:5F:27:5B:E8:87:F5:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9991912E7C3C11F1B06E05D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.171.0-156.251.180.255
Signature Algorithm: sha256WithRSAEncryption
28:9a:1a:4c:21:de:df:2b:d6:f4:d5:cd:89:1c:83:83:c7:93:
36:5e:e1:d2:4e:0d:af:9f:e7:2a:9b:90:58:ea:e8:02:6d:cb:
64:d2:5c:74:32:aa:31:05:d8:ed:f7:5b:5a:bf:93:fa:96:73:
17:e4:c8:62:b2:e1:3e:7f:ea:7f:63:62:9b:6b:b3:86:90:76:
f4:d1:17:6d:f1:0e:31:00:b6:f0:11:a6:cd:ef:80:93:d2:e9:
ce:30:48:b1:4a:d5:5d:ba:27:64:25:aa:d8:d1:b4:7d:3b:3e:
71:8c:bd:2d:0b:ef:2f:e9:16:6a:34:4e:ac:36:cd:4c:23:2e:
c4:51:92:9a:77:58:05:b8:8b:eb:74:9a:ec:1a:7b:d8:81:73:
b6:29:af:6c:33:bc:59:14:35:f1:3b:7f:b6:9a:18:0d:33:58:
5f:a9:2b:88:f0:73:61:51:d4:99:73:91:54:09:99:bd:00:97:
f2:8d:76:63:f9:c1:74:8f:c5:0b:17:30:8b:eb:64:4e:f1:1d:
b6:e5:58:dd:2d:ed:1d:00:8c:2e:4b:be:12:52:6d:d5:1f:a1:
45:86:ff:3e:ca:5b:65:a7:fe:3c:a6:29:94:4b:3f:9c:fa:54:
a7:b2:72:96:c0:50:7f:fb:9e:08:18:c0:d3:58:30:96:37:a3:
a7:cb:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:22 2026 by rpki-client