Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EF32946DA011F18BF53FBBCE1D38B0.roa
File: B6EF32946DA011F18BF53FBBCE1D38B0.roa (raw, json)
Hash identifier: t2CApd4m7Fm7ul3Wd5EFdJphBV9Tc03eZcisLdDTSqA=
Subject key identifier: DA:7C:4C:44:F5:98:9A:E7:22:B0:C7:2A:5C:6C:AE:54:A5:6E:1C:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EF32946DA011F18BF53FBBCE1D38B0.roa
Signing time: Sun 21 Jun 2026 18:40:46 +0000
ROA not before: Sun 21 Jun 2026 18:40:39 +0000
ROA not after: Wed 29 Jul 2026 18:40:39 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114515 (0x1bf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 18:40:39 2026 GMT
Not After : Jul 29 18:40:39 2026 GMT
Subject: CN=6a38302e-c291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:e9:b1:42:d8:47:69:25:08:28:2d:87:52:
4d:00:4f:d8:f1:f9:f3:c0:12:2e:46:a3:84:78:e6:
9b:fa:f7:ce:f0:e5:bc:21:d1:76:1f:4a:99:d2:cf:
5e:67:8a:f1:db:9d:a4:41:ae:f9:4d:1c:bd:55:60:
71:39:24:b4:99:44:b7:34:9d:b6:a1:ac:b4:aa:3a:
bd:49:64:03:bd:33:25:55:61:85:71:10:b4:c7:72:
58:9b:8b:99:e3:2e:31:2f:eb:fc:78:76:ed:53:0f:
20:b0:81:28:65:d3:e2:96:25:f9:e7:3c:b3:bc:f0:
15:cb:e2:82:d7:50:7e:b5:07:05:a6:68:1b:35:3c:
e8:d7:32:76:d7:d6:7e:f0:11:77:58:92:bd:66:a0:
2f:f4:35:dd:0b:6c:01:9f:95:d1:d7:61:31:e4:5e:
71:74:b7:28:26:77:3a:26:69:07:37:26:b8:a4:28:
4f:4b:59:09:3e:3d:24:54:93:da:78:5d:4a:96:45:
69:e8:5e:10:8e:09:48:15:99:7b:c2:ca:65:fc:1c:
41:82:fe:6e:5c:aa:b6:61:ca:7c:84:f1:d5:2b:66:
0f:a8:17:6c:65:bc:f3:c6:6a:2f:d0:7b:fc:79:47:
5e:2e:c7:94:9c:d8:37:dc:b3:72:a8:9b:80:3b:f2:
6b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7C:4C:44:F5:98:9A:E7:22:B0:C7:2A:5C:6C:AE:54:A5:6E:1C:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6EF32946DA011F18BF53FBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
12:a5:e6:8e:13:05:3f:10:4a:16:cc:67:7d:2a:19:5d:66:03:
37:cb:1f:a8:2f:1c:37:67:79:f1:f6:0c:b0:d1:7d:c4:d5:f0:
e6:ee:fc:d6:43:46:fa:ea:c0:12:cb:6d:d7:fa:17:82:fc:fa:
58:93:71:fe:53:5f:89:8f:bb:26:f3:ca:24:03:1c:24:ed:77:
99:8d:06:e0:e3:84:f0:72:51:ca:a0:0f:22:f8:2f:48:ce:0e:
c7:95:fd:db:21:c8:06:ce:02:d4:60:82:79:2b:47:f5:c0:2e:
6e:84:1a:16:d6:a1:03:01:7a:1a:c1:cb:fa:13:e6:8c:23:fe:
dd:d7:1a:b5:dc:8d:b1:ce:dd:41:be:27:c0:f4:30:21:bd:71:
8d:33:e9:c2:56:bd:6c:3e:51:3f:ef:67:78:23:0a:52:a2:e8:
65:59:48:cf:11:50:2f:c4:e2:6d:22:45:71:87:6a:1a:cb:a2:
7c:91:3d:78:90:35:12:f3:0e:3f:fe:3a:52:b7:fe:0e:d2:b5:
48:7c:30:68:b5:78:1b:5e:78:e6:3d:0c:8b:9a:75:ce:a9:2d:
85:52:23:c8:8a:3e:eb:09:da:5a:56:9f:b7:12:2d:aa:47:86:
7a:76:ff:e0:54:63:91:ff:5d:30:cc:a7:7a:3d:3c:94:b4:8d:
cb:0b:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:31 2026 by rpki-client