Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE66BBE4785C11F1B7084F0BCF1D38B0.roa
File: AE66BBE4785C11F1B7084F0BCF1D38B0.roa (raw, json)
Hash identifier: 8BJ74PfVQc1ua3NY8HCA5yTorUTvHYZoY1eVrUp4AQ0=
Subject key identifier: 52:8E:C1:40:87:28:BA:71:2C:0B:8F:9D:93:0A:4A:0A:32:D8:4D:1D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C318
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE66BBE4785C11F1B7084F0BCF1D38B0.roa
Signing time: Sun 05 Jul 2026 10:31:29 +0000
ROA not before: Sun 05 Jul 2026 10:31:24 +0000
ROA not after: Sat 22 Aug 2026 10:31:24 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115480 (0x1c318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 5 10:31:24 2026 GMT
Not After : Aug 22 10:31:24 2026 GMT
Subject: CN=6a4a3281-2586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5c:22:a1:5e:0d:5e:26:b5:6f:a2:65:99:52:
62:ba:7e:7c:0a:7b:5f:3b:74:96:9f:22:fe:9d:c0:
03:48:af:ed:af:e8:31:71:96:6e:16:e4:07:1b:be:
4e:4b:98:ef:3a:17:c3:f3:34:71:15:25:0e:d9:c5:
8e:39:28:33:42:d3:ef:54:68:c4:45:9d:16:dc:4b:
f5:83:98:26:8b:36:dc:8d:57:4b:29:8f:29:9c:47:
af:89:9a:0c:b0:65:b9:a3:f6:75:58:68:00:1c:1c:
cc:4a:96:ef:17:3d:9e:93:69:51:93:12:66:16:93:
7f:27:f1:91:9a:80:2f:f2:93:e1:dc:41:86:c8:a4:
22:46:76:20:04:e5:e6:41:89:55:3b:a0:c6:c5:cf:
f9:f4:94:c8:35:5d:82:cf:8e:e6:b1:bc:65:2d:9b:
64:50:6a:4f:c8:24:33:d6:89:c1:f7:b1:d8:65:5a:
d3:1d:8a:ab:07:bb:69:ce:f9:7e:b6:37:84:a0:21:
3e:14:fb:e1:45:6f:d8:77:ea:de:5b:d0:29:d2:d2:
26:b4:a4:ed:d6:58:af:b0:30:a7:be:5f:29:f6:c6:
0b:a0:9e:2d:52:91:8e:34:72:ff:7a:57:ef:0b:83:
00:60:11:01:39:a8:bc:5a:a5:3c:c5:ba:3f:da:95:
4e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8E:C1:40:87:28:BA:71:2C:0B:8F:9D:93:0A:4A:0A:32:D8:4D:1D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE66BBE4785C11F1B7084F0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:53:57:98:2b:e6:54:fc:63:a1:54:c1:21:71:ac:f5:40:aa:
eb:ee:ba:3b:9e:9a:f5:2e:82:c8:1f:e6:6b:26:f2:b0:e1:4e:
aa:38:a3:64:ef:3a:f1:6e:e1:65:e5:f7:2f:18:0d:3b:2b:7e:
2c:a5:8b:71:28:9b:f8:91:60:ba:1c:b8:40:64:49:a3:11:35:
b2:3c:67:91:75:ff:92:29:aa:fa:eb:ed:22:98:19:3c:84:db:
63:06:f1:c0:90:17:28:64:72:38:0d:24:bd:ef:6f:25:52:a9:
9a:56:94:82:84:54:24:99:24:a8:11:a1:31:35:ca:0d:48:dc:
fe:af:98:0c:86:52:a3:05:c1:5d:4c:c0:43:10:72:14:8c:0d:
2c:d6:92:7f:44:f1:4b:e7:ee:d8:4d:a1:38:7d:02:54:b5:b8:
02:cd:a4:35:07:31:40:e1:16:05:03:b1:06:dd:b4:c4:c5:95:
03:5e:72:e8:6e:90:8b:1e:a1:e9:3a:bd:04:e5:67:e3:40:86:
a7:40:42:a9:2e:98:11:22:16:b2:99:d4:0b:6b:7a:1a:a4:3e:
66:03:a7:9b:17:e5:86:5c:00:66:7e:c3:89:1c:12:a9:5e:3b:
c9:4f:49:61:f2:e2:a3:96:3c:29:97:9d:00:f1:83:f3:de:22:
c6:70:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client