Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F06A5E6C9411F1A046E61BCF1D38B0.roa
File: B6F06A5E6C9411F1A046E61BCF1D38B0.roa (raw, json)
Hash identifier: w0z+1w6t15Dh11kIo8VXxxMu29oYDbEVlJ1yoUYX7Fk=
Subject key identifier: 22:AA:A7:63:C9:2D:B0:8A:9E:D5:64:2A:46:B6:C5:FE:E3:74:68:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F06A5E6C9411F1A046E61BCF1D38B0.roa
Signing time: Sat 20 Jun 2026 10:42:21 +0000
ROA not before: Sat 20 Jun 2026 10:42:15 +0000
ROA not after: Mon 27 Jul 2026 10:42:15 +0000
asID: 63139
IP address blocks: 156.225.115.0/24 maxlen: 24
156.225.120.0/24 maxlen: 24
156.225.122.0/24 maxlen: 24
156.225.123.0/24 maxlen: 24
156.225.124.0/24 maxlen: 24
156.225.125.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.225.127.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114478 (0x1bf2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 20 10:42:15 2026 GMT
Not After : Jul 27 10:42:15 2026 GMT
Subject: CN=6a366e8d-c762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d0:da:95:75:b3:c1:e6:9d:59:56:41:0c:3f:
8d:42:89:9f:85:a4:f5:90:a3:3b:58:ac:54:e2:6a:
00:fe:c4:98:de:47:fe:21:74:64:b7:02:2c:de:8b:
db:aa:35:43:35:bc:ee:01:0e:45:8a:44:f0:83:99:
e8:2f:5d:f8:12:a0:6f:94:33:4e:b0:e7:2e:56:3f:
5b:5d:a8:e8:d6:9a:56:4d:5b:7d:87:36:8a:56:e3:
89:82:fa:8a:b3:01:ea:96:e8:e6:60:68:7d:f1:1f:
75:8c:af:8c:24:18:b5:52:ec:5c:c3:38:9b:ef:41:
f4:df:32:50:ae:47:fc:d0:61:4c:11:bc:d5:53:2e:
7c:48:9b:ba:84:21:95:ca:48:bb:5f:2e:30:cc:1e:
30:76:89:3d:56:9b:13:6f:15:76:f2:e1:a8:d0:a7:
1f:a8:cc:b1:e4:fc:43:20:4f:45:b4:ba:c1:92:c3:
66:8c:f5:63:49:d0:eb:21:9f:47:13:5d:9a:a3:95:
0c:ee:cd:30:d8:7b:40:4e:8a:94:6a:50:7e:08:13:
76:5a:55:bd:fb:f7:86:8a:17:97:04:13:b1:5e:96:
99:83:d7:06:10:a1:6a:47:1b:7f:fb:f9:ad:96:ab:
fc:42:9c:d4:ea:5e:9c:db:fb:4d:1a:a5:b4:4c:66:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:A7:63:C9:2D:B0:8A:9E:D5:64:2A:46:B6:C5:FE:E3:74:68:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6F06A5E6C9411F1A046E61BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.115.0/24
156.225.120.0/24
156.225.122.0-156.225.127.255
156.229.51.0/24
156.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
46:04:38:48:ea:9e:d9:92:93:02:37:0a:4e:8d:e8:c2:43:27:
67:ba:05:12:a7:b3:e4:a3:a7:67:4b:21:99:2c:ed:8a:24:44:
2a:99:9c:ec:cf:81:33:44:44:4b:57:2f:f6:0b:40:ed:99:da:
94:09:93:2f:45:fb:74:85:ba:ec:c0:9b:49:61:ca:67:7b:92:
09:cf:2d:ed:33:94:b8:6e:a2:4b:4b:17:05:ba:9e:02:09:62:
e2:e0:0f:41:0e:d8:08:0f:25:74:28:ab:47:3f:34:12:be:9d:
23:69:da:d4:46:a5:e1:cf:a1:5f:b8:0e:b2:e7:a0:05:24:b0:
c7:f4:ee:e2:1c:1d:3f:72:3a:25:cd:cb:38:f8:06:67:80:93:
37:33:a3:f5:f4:ce:52:88:c0:33:38:ac:d0:6f:30:ac:f0:d6:
51:0e:03:05:3e:46:2e:3b:a3:7b:f6:85:54:cd:64:2b:0c:1d:
84:0d:ee:13:d7:44:75:f6:2b:d8:80:db:82:e3:1a:e5:b7:c3:
64:6f:54:1d:06:08:7c:20:0e:f1:9c:02:b7:65:33:3d:f0:65:
b5:58:de:63:50:ba:92:42:87:4d:8f:7c:2c:53:0d:78:47:83:
22:8e:d7:c6:d6:92:ed:9d:35:31:27:7d:60:bc:6a:a6:d5:60:
d3:af:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:54 2026 by rpki-client