Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA851A40757111F1B6CA96C5CE1D38B0.roa
File: AA851A40757111F1B6CA96C5CE1D38B0.roa (raw, json)
Hash identifier: TfIzYYDVDX5atWIXbFLc0fWdOBBQ+Y50RT0kEyZPK0k=
Subject key identifier: 2D:E1:62:68:E3:BF:03:8B:BB:B2:19:3A:20:12:3A:13:4A:84:B7:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C228
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA851A40757111F1B6CA96C5CE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:24:08 +0000
ROA not before: Wed 01 Jul 2026 17:24:03 +0000
ROA not after: Tue 02 Mar 2027 17:24:03 +0000
asID: 40115
IP address blocks: 156.240.104.0/24 maxlen: 24
156.240.105.0/24 maxlen: 24
156.240.106.0/24 maxlen: 24
156.240.107.0/24 maxlen: 24
156.240.108.0/24 maxlen: 24
156.240.109.0/24 maxlen: 24
156.240.110.0/24 maxlen: 24
156.240.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115240 (0x1c228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 17:24:03 2026 GMT
Not After : Mar 2 17:24:03 2027 GMT
Subject: CN=6a454d38-81aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c6:aa:cb:6a:b9:55:33:d6:7d:7d:f6:5d:e9:
bd:ae:71:a5:11:2c:03:64:05:d3:d2:8f:44:88:77:
d9:78:c5:7d:64:37:24:cd:1c:c8:60:e0:f7:50:06:
14:a6:73:ba:f3:0c:81:2d:3e:5d:46:35:dd:bf:56:
3f:40:7a:ab:27:a8:01:d9:b5:6f:40:ee:56:8f:96:
74:66:03:6b:f4:7f:aa:da:1c:62:24:88:18:db:95:
93:4b:8e:c3:6c:33:73:f2:57:7c:7b:94:15:d3:a6:
8d:ab:0d:f6:c5:29:cd:66:ac:20:99:a1:aa:c8:0f:
97:0b:8a:d9:d5:58:1a:d4:a3:2b:65:ad:64:5b:2c:
92:78:3d:b1:7a:f2:90:56:fe:6a:32:c2:d1:6f:e9:
d7:cc:6f:b3:8d:3b:d0:78:1e:9e:14:f9:ee:16:40:
46:78:f9:28:89:13:fc:6b:d1:07:3e:01:5b:14:5d:
37:22:81:82:cc:0e:5a:eb:2e:b2:dd:f4:09:93:97:
2e:ce:61:23:72:1b:35:ad:60:03:fc:c8:e3:5a:99:
6e:42:2a:33:0b:2a:12:63:22:35:cc:a4:4c:d4:ef:
71:c8:17:2c:89:49:f3:9a:8a:c2:76:01:bd:f9:7d:
9e:fb:3f:b1:d5:d1:82:e9:b5:04:04:4b:32:bb:4f:
70:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:62:68:E3:BF:03:8B:BB:B2:19:3A:20:12:3A:13:4A:84:B7:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA851A40757111F1B6CA96C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:7f:62:30:87:6e:59:3d:98:8c:f8:58:5b:6b:2c:04:b0:2f:
df:0f:42:e6:67:8b:1c:a1:a6:09:ff:21:2d:b0:af:82:5c:2c:
1f:f5:ba:bf:dd:72:be:52:8e:a6:1e:9c:92:1d:2a:fc:58:a1:
b7:0c:c7:61:e7:24:27:b1:4a:70:6c:a9:be:6b:2c:83:7e:ba:
9c:cf:80:2e:59:6a:46:ff:df:0b:d9:f0:1a:96:95:31:3e:18:
e2:86:97:88:56:e7:b9:6e:a0:de:c9:d7:34:bf:8b:da:f1:85:
de:49:25:2c:19:79:26:c8:76:aa:ba:14:08:18:f6:1a:1b:64:
c7:95:72:46:bc:49:de:c9:2b:33:2f:b0:45:3f:55:bd:e1:0b:
5c:06:a9:16:ec:dc:c3:bd:16:be:9b:3f:5d:98:82:30:62:de:
e3:82:66:89:b1:93:fb:4f:38:b4:62:85:15:b2:0a:c0:d3:1e:
00:a9:66:a4:9b:7b:ba:ec:e7:32:41:52:20:0e:a2:08:10:6e:
fb:55:71:b8:96:51:d2:62:27:b6:80:58:61:63:13:4b:38:f4:
69:56:a2:37:61:8a:ef:11:30:08:4c:36:b1:f2:22:3a:28:eb:
8a:3a:6c:65:42:7d:1a:5b:90:b5:d0:11:3d:df:4e:8e:ab:3c:
05:65:85:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcIoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAxMTcyNDAzWhcNMjcwMzAyMTcyNDAzWjAYMRYw
FAYDVQQDEw02YTQ1NGQzOC04MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyMaqy2q5VTPWfX32Xem9rnGlESwDZAXT0o9EiHfZeMV9ZDckzRzIYOD3
UAYUpnO68wyBLT5dRjXdv1Y/QHqrJ6gB2bVvQO5Wj5Z0ZgNr9H+q2hxiJIgY25WT
S47DbDNz8ld8e5QV06aNqw32xSnNZqwgmaGqyA+XC4rZ1Vga1KMrZa1kWyySeD2x
evKQVv5qMsLRb+nXzG+zjTvQeB6eFPnuFkBGePkoiRP8a9EHPgFbFF03IoGCzA5a
6y6y3fQJk5cuzmEjchs1rWAD/MjjWpluQiozCyoSYyI1zKRM1O9xyBcsiUnzmorC
dgG9+X2e+z+x1dGC6bUEBEsyu09wUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC3h
YmjjvwOLu7IZOiASOhNKhLfOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTg1MUE0MDc1NzExMUYxQjZDQTk2QzVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPBoMA0GCSqGSIb3DQEBCwUA
A4IBAQCmf2Iwh25ZPZiM+FhbaywEsC/fD0LmZ4scoaYJ/yEtsK+CXCwf9bq/3XK+
Uo6mHpySHSr8WKG3DMdh5yQnsUpwbKm+ayyDfrqcz4AuWWpG/98L2fAalpUxPhji
hpeIVue5bqDeydc0v4va8YXeSSUsGXkmyHaquhQIGPYaG2THlXJGvEneySszL7BF
P1W94QtcBqkW7NzDvRa+mz9dmIIwYt7jgmaJsZP7Tzi0YoUVsgrA0x4AqWakm3u6
7OcyQVIgDqIIEG77VXG4llHSYie2gFhhYxNLOPRpVqI3YYrvETAITDax8iI6KOuK
OmxlQn0aW5C10BE9306OqzwFZYU4
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:05 2026 by rpki-client