Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB045F0273FA11F1B6BB7EDACE1D38B0.roa
File: BB045F0273FA11F1B6BB7EDACE1D38B0.roa (raw, json)
Hash identifier: gIIUA0dy/aN7GWtJZS5EsMtU5cU/020BS6Op13hz35M=
Subject key identifier: F1:58:B3:79:E3:4C:34:A2:37:32:06:14:FE:F8:33:31:C3:18:B4:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB045F0273FA11F1B6BB7EDACE1D38B0.roa
Signing time: Mon 29 Jun 2026 20:40:14 +0000
ROA not before: Mon 29 Jun 2026 20:40:09 +0000
ROA not after: Tue 04 Aug 2026 20:40:09 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115134 (0x1c1be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 20:40:09 2026 GMT
Not After : Aug 4 20:40:09 2026 GMT
Subject: CN=6a42d82e-2a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a3:a7:c7:9e:20:cb:63:00:84:ca:81:ea:d3:
75:96:cc:7c:31:bf:79:17:1e:5a:d7:45:c2:8b:a9:
98:a2:c2:cc:09:31:f2:84:49:55:4d:05:a4:54:bb:
9f:8f:6b:d3:6a:e0:f5:8d:cc:45:18:95:75:73:d3:
84:2f:f8:cb:e6:ee:2c:96:84:7d:6e:0e:d7:39:87:
ff:0f:86:bc:1f:6e:69:c1:7a:0f:af:8b:cc:37:ec:
21:67:bc:c4:87:65:1c:10:3b:52:28:eb:bb:67:4c:
43:4f:f3:b5:c9:6f:a6:ad:d8:5a:c1:da:f4:06:99:
b6:c1:73:67:8a:e7:10:e5:0b:dd:00:ae:bd:f4:48:
06:f4:6e:6f:b0:ff:c0:27:c8:02:06:c0:01:16:f0:
73:b4:2e:04:53:8b:29:fb:a7:ca:93:22:cc:1b:9d:
4a:7a:c1:eb:45:14:35:59:ea:17:ec:75:27:c6:bd:
4c:50:64:33:47:07:ac:45:a2:e1:53:ed:9a:a3:ec:
75:2f:85:89:68:a0:7f:11:38:f0:48:ce:8f:7d:ba:
60:52:6d:f3:c9:fa:53:06:d7:46:c7:3e:4e:71:15:
2b:fe:e0:77:46:b8:42:f3:91:87:00:6a:b5:9e:4b:
b6:98:07:3b:66:8d:b8:91:42:aa:cf:28:99:28:fb:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:58:B3:79:E3:4C:34:A2:37:32:06:14:FE:F8:33:31:C3:18:B4:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB045F0273FA11F1B6BB7EDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:35:2e:67:19:18:8b:39:09:f1:d5:7c:79:2d:31:9f:c4:eb:
22:14:05:d4:e8:b3:3e:65:a7:18:fb:69:da:32:f1:45:ea:91:
4a:d3:3d:75:6d:3d:86:66:49:a1:31:72:24:c3:70:79:e1:c1:
5f:5b:29:d9:e5:48:e7:72:a5:fc:2b:4b:95:0c:fb:0d:55:b6:
ec:f8:9c:a7:f7:f0:a9:2a:56:50:29:aa:d2:83:8d:3f:ed:17:
f6:d7:0f:78:a9:35:09:4b:b2:9d:e1:4d:db:dc:d6:09:5c:e1:
ec:8a:0d:45:96:24:87:39:db:49:b6:de:e5:aa:47:04:75:fd:
ba:e5:2d:95:73:5f:7f:9e:6e:ec:5a:7d:56:c7:5d:7e:4c:fc:
94:ce:56:3e:3e:6a:53:6b:a1:d7:e0:24:37:f1:d6:2b:28:20:
94:8a:88:a2:d7:16:72:96:c1:da:ac:ff:ad:46:af:63:8d:50:
59:15:2a:4d:70:64:ce:52:8d:6b:a3:d0:70:e4:38:c9:8a:67:
63:ed:e2:8d:41:55:df:c1:74:b0:0d:bb:e2:80:6d:cb:03:51:
d9:91:36:e3:4d:53:4a:52:08:5c:f0:9b:95:3c:43:2f:6d:7a:
7b:72:6a:d3:46:3e:ae:c2:b5:85:68:a9:b9:26:35:d9:1d:29:
ce:11:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:11 2026 by rpki-client