Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89F074A730411F18576CB06CF1D38B0.roa
File: B89F074A730411F18576CB06CF1D38B0.roa (raw, json)
Hash identifier: TLzTjly3Irotnq2fuL64sC4MxvHoCgL2e6YR5At0EX4=
Subject key identifier: 73:93:50:41:89:95:91:F7:A0:4B:E4:41:A6:50:8A:4D:C4:7C:04:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C16B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89F074A730411F18576CB06CF1D38B0.roa
Signing time: Sun 28 Jun 2026 15:19:14 +0000
ROA not before: Sun 28 Jun 2026 15:19:09 +0000
ROA not after: Sat 15 Aug 2026 15:19:09 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115051 (0x1c16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:19:09 2026 GMT
Not After : Aug 15 15:19:09 2026 GMT
Subject: CN=6a413b72-dc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:b4:5a:34:14:b8:3d:01:22:ed:2c:46:54:
29:b4:53:19:28:43:32:c6:45:ae:75:7e:6f:c0:3c:
94:aa:e2:3c:cd:7c:28:15:47:42:71:dc:ab:82:3d:
d0:70:5c:5a:79:56:51:d9:fa:16:1f:6d:69:c4:42:
56:53:68:f4:f4:88:a8:2b:fc:ca:9a:48:fc:57:3b:
54:8e:47:3d:36:89:1d:60:94:ca:b3:0b:ba:a4:57:
c3:ad:c0:a6:f3:f5:04:23:f6:93:34:a6:db:50:be:
53:f7:f9:0f:13:78:c3:8f:30:1e:1b:25:5b:a8:26:
40:b4:ec:c7:bb:d4:eb:12:44:cc:d0:05:90:e7:90:
f8:5e:fc:c1:b1:be:11:10:31:c4:6a:9f:e7:b8:45:
ba:33:3d:d1:59:71:be:f4:8f:bd:c5:46:7d:c4:46:
50:65:27:30:a9:68:28:89:78:5b:04:3c:e2:f3:fd:
5e:5d:9f:2a:1e:83:b0:37:46:5a:82:69:81:4b:82:
88:f8:85:dd:8e:94:34:de:23:f7:7e:a8:1d:25:d7:
0f:37:87:ef:55:35:33:0f:ca:bf:aa:6d:a1:af:c3:
8c:f6:bc:37:38:2c:79:4a:ec:41:a5:83:2c:71:d5:
e2:1c:c2:b2:ac:a3:eb:ae:90:48:f4:9c:72:c3:39:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:93:50:41:89:95:91:F7:A0:4B:E4:41:A6:50:8A:4D:C4:7C:04:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B89F074A730411F18576CB06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
33:b1:b2:8c:9c:70:4f:45:2f:15:9e:72:82:91:8c:f2:b8:eb:
97:49:eb:b3:1a:58:3f:41:28:5b:d3:6a:09:1b:ad:26:81:1f:
d9:01:9f:26:20:2b:63:53:7e:f3:50:f6:12:80:fb:80:e4:24:
e4:f7:4d:dc:50:a0:c9:ab:99:54:83:45:dd:06:5f:be:8d:bb:
cf:8d:ba:26:85:79:ee:c1:a7:63:3e:bc:e4:af:ca:7f:42:8d:
80:4c:de:4b:36:2b:05:c1:22:c3:f6:1a:61:6e:f8:b8:87:24:
10:ca:58:16:90:19:a2:ba:f0:1a:08:bf:0f:f1:a8:c5:29:94:
74:8f:fb:ff:d7:d2:17:0d:d0:c9:74:1c:fe:7b:39:3f:d1:17:
a0:8b:11:04:85:1b:d3:78:d4:9e:69:53:26:0d:3e:ca:68:b4:
4d:d0:20:36:09:95:25:ba:a6:bd:6a:cb:aa:35:a3:1f:18:70:
c9:80:97:6a:40:dc:d0:c3:b6:e0:11:d8:3a:a3:d8:62:16:a7:
8b:4d:87:5c:65:f5:ca:cd:72:58:e2:bd:0e:1d:97:2e:29:9b:
bc:79:d7:1e:3e:1d:e1:07:c2:d9:80:70:8e:5e:be:0f:21:f5:
37:34:2d:55:9b:a1:f9:c9:b2:35:31:02:6b:47:f8:6e:f1:19:
19:bd:4b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:13 2026 by rpki-client