Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3E2F3881F911F1BE2DC0FECE1D38B0.roa
File: AF3E2F3881F911F1BE2DC0FECE1D38B0.roa (raw, json)
Hash identifier: 1v8RreFXqAxxe9yRAM/9EILTrerWLvnXL8vs3BTmi6A=
Subject key identifier: 00:94:72:62:8F:BB:CB:A4:26:28:69:DD:39:64:B8:C4:06:84:DB:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3E2F3881F911F1BE2DC0FECE1D38B0.roa
Signing time: Fri 17 Jul 2026 16:08:02 +0000
ROA not before: Fri 17 Jul 2026 16:07:57 +0000
ROA not after: Sat 22 May 2027 16:07:57 +0000
asID: 154701
IP address blocks: 156.255.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116205 (0x1c5ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 16:07:57 2026 GMT
Not After : May 22 16:07:57 2027 GMT
Subject: CN=6a5a5361-32f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:7a:42:67:1c:18:53:74:6a:32:32:e8:6c:
8b:d9:92:0c:29:e5:ef:26:98:ae:23:8e:b6:58:08:
f3:25:84:7f:cf:c0:40:86:1a:df:79:a6:51:f7:27:
74:28:6d:d0:e7:cc:00:d7:ae:7c:c6:01:9f:21:c2:
1d:13:c5:0b:c9:6b:0f:1d:6e:f2:84:81:70:23:ff:
e6:8a:21:47:eb:0a:d0:44:e2:25:f8:0a:3d:7b:6b:
74:4e:ac:de:fb:3f:54:04:6f:62:71:26:76:a5:c2:
13:8b:90:10:ff:55:26:87:69:43:53:cd:77:8e:9b:
68:37:7a:72:99:ae:57:5a:fc:54:e3:1f:66:b8:78:
59:a3:e0:3e:c8:71:08:7c:66:e7:6d:00:1c:9b:95:
4c:89:4c:62:53:9e:78:43:8e:51:0e:a9:f5:1e:08:
52:c4:fe:ba:cb:41:a0:5b:41:cd:ca:60:be:4e:aa:
a8:03:f3:e3:b0:22:1b:0b:66:ea:ac:4f:4e:d1:2b:
55:5f:f4:20:25:1d:e1:42:b0:ea:42:d3:64:64:3e:
2c:db:2f:4f:0f:94:73:98:2e:09:c8:5d:cc:83:0f:
81:cb:c2:c4:da:53:a5:2f:85:55:2b:de:54:47:cd:
a1:7b:dc:de:03:fb:a2:90:06:6c:bc:b1:1a:43:36:
d0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:94:72:62:8F:BB:CB:A4:26:28:69:DD:39:64:B8:C4:06:84:DB:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF3E2F3881F911F1BE2DC0FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.6.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:7a:8c:03:96:dd:f4:98:d0:b8:84:fb:a3:2a:40:0d:15:78:
02:c0:95:15:22:9c:80:51:ed:f8:0c:60:99:57:f0:78:14:c2:
6f:32:8a:63:78:8e:ad:8f:27:fa:d3:df:81:b0:26:bc:b8:a8:
16:0e:a8:b6:51:27:41:e1:a7:e0:1d:c7:89:cb:07:02:ab:99:
d6:d7:c3:32:83:cd:7d:6e:1b:b5:de:3b:da:88:9b:30:ab:78:
18:65:93:ad:59:09:2e:08:47:76:b6:b7:4b:36:4a:31:72:ca:
46:97:6e:98:ab:04:58:4e:18:2e:e3:1c:7b:77:0f:06:cc:1b:
23:49:7c:52:7c:62:b5:d3:51:87:fe:c1:78:ff:88:65:a1:87:
58:29:55:9b:a2:4d:94:28:7d:2f:0b:5f:bf:77:b0:ab:42:95:
67:f5:ea:a0:8a:ea:a1:6e:1a:bc:b2:3e:11:4b:8c:85:d1:7d:
3e:90:b8:83:31:d6:2c:e0:7d:d1:35:55:d8:24:79:7a:1c:4f:
39:da:12:81:57:98:91:0a:34:3e:06:0f:af:47:39:34:01:52:
52:2a:4f:e3:f3:6f:7d:91:0b:ea:fd:9d:9e:a0:60:ce:e7:37:
ab:ba:e1:dc:69:fb:59:fa:42:1a:1c:a5:7c:e8:a8:08:34:63:
f0:85:d4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:49 2026 by rpki-client