Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF8516E672FE11F196FF93E2CE1D38B0.roa
File: AF8516E672FE11F196FF93E2CE1D38B0.roa (raw, json)
Hash identifier: Q/kxgyO8G8oZ82If4JZTjsp0pSbR67ZdrtsAJ6OeLJs=
Subject key identifier: C1:66:E3:5B:93:47:34:F7:C3:C3:11:1D:74:D9:10:52:B5:CA:4A:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C161
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF8516E672FE11F196FF93E2CE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:36:02 +0000
ROA not before: Sun 28 Jun 2026 14:35:57 +0000
ROA not after: Wed 05 Aug 2026 14:35:57 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115041 (0x1c161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:35:57 2026 GMT
Not After : Aug 5 14:35:57 2026 GMT
Subject: CN=6a413152-d47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:c8:a1:63:7c:aa:82:0f:80:3b:6d:74:80:
f5:58:9b:74:d7:ac:9f:b2:a2:f5:b5:96:bc:51:ac:
b8:42:e4:e6:57:5f:b2:fb:e2:10:7c:64:07:c4:67:
99:57:34:63:42:93:21:c9:8e:4c:7f:bf:21:77:5d:
0f:2b:07:ca:09:1f:ba:0e:b0:3c:95:cf:9b:77:1b:
a9:0f:4c:bb:6c:2a:f9:af:d3:67:40:c2:c4:78:97:
32:2e:cc:f3:04:66:6c:7e:90:a4:fc:b8:97:0c:0c:
0a:c0:4a:eb:bd:26:4d:72:51:72:52:62:9b:a8:36:
6e:fb:c8:15:2e:8f:3a:00:4e:2e:72:54:71:1f:7e:
9e:d1:8a:2f:6c:13:79:fa:60:a3:5b:4c:29:63:04:
cb:88:cc:19:2e:67:33:74:07:12:20:91:c5:16:32:
19:45:5d:0b:50:cc:e6:43:20:3f:bf:d9:95:c4:bd:
00:72:a6:c8:a5:48:f7:b4:44:48:be:ed:bc:8e:8f:
19:0a:c6:30:65:83:8e:d3:b5:c2:50:2b:94:86:cb:
56:90:7d:0b:48:15:a7:0c:3c:e7:52:f1:0a:8c:c1:
d3:be:1e:d2:78:7a:c1:7e:5f:d3:b2:96:cb:6f:1d:
c5:5e:60:20:96:70:5c:2f:4e:70:ea:64:44:05:36:
5e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:66:E3:5B:93:47:34:F7:C3:C3:11:1D:74:D9:10:52:B5:CA:4A:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF8516E672FE11F196FF93E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5a:5c:a9:ec:19:72:db:1e:03:bb:60:76:0a:4a:05:af:ff:52:
9e:78:5d:82:b9:5a:94:73:d9:51:3b:5d:44:e1:8e:fa:68:a7:
27:88:a0:98:ac:76:9f:0e:13:1b:0e:3d:be:8a:6d:07:25:5b:
c6:d2:0f:d5:a5:72:04:fe:d3:69:8b:d9:80:4f:6d:8e:69:34:
29:2c:ba:51:a4:a6:24:16:74:e4:ff:6f:ca:e8:e4:35:29:1d:
2b:30:7e:02:6c:57:c5:e6:89:bb:46:40:36:0f:f1:3c:94:01:
c2:fd:b2:93:4a:5e:53:67:1c:48:83:e5:4c:1f:d2:a6:85:3b:
85:f5:94:ca:e0:a5:b8:9f:7a:0d:d7:34:b6:4f:12:e2:33:6e:
8e:ee:22:16:98:35:0e:f5:6a:2d:c3:1c:d6:39:63:14:98:55:
f1:3b:21:05:bc:e1:c2:b2:eb:5f:6c:34:0e:ba:55:b1:b7:5f:
4f:4c:19:a3:de:f6:10:dd:5c:cf:90:aa:6e:b8:64:41:72:47:
2f:b8:7e:4a:30:31:0f:be:e4:6c:64:4d:eb:2a:46:7e:77:ed:
50:34:b5:9c:5f:2c:e0:1f:47:1c:f9:e8:7b:17:65:e7:22:51:
a7:2a:cf:5f:50:fa:cd:cb:5f:37:6a:26:ce:e6:ca:c0:92:35:
61:b1:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:44 2026 by rpki-client