Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33F65C06E5C11F1AE8583B6CE1D38B0.roa
File: C33F65C06E5C11F1AE8583B6CE1D38B0.roa (raw, json)
Hash identifier: mHBj7Png3iwpEX6sIwoOsJtIzJ9wL1Lp/HxXb5/gGW4=
Subject key identifier: AD:F6:99:C4:18:72:88:81:E5:85:07:98:FB:29:AD:E2:42:5A:1E:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33F65C06E5C11F1AE8583B6CE1D38B0.roa
Signing time: Mon 22 Jun 2026 17:06:52 +0000
ROA not before: Mon 22 Jun 2026 17:06:47 +0000
ROA not after: Tue 28 Jul 2026 17:06:47 +0000
asID: 48031
IP address blocks: 156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114596 (0x1bfa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 17:06:47 2026 GMT
Not After : Jul 28 17:06:47 2026 GMT
Subject: CN=6a396bac-b2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:55:a3:06:3c:5b:dd:ab:37:90:39:58:14:
3f:ea:cd:7d:2b:a5:af:ee:9c:6d:a6:74:90:61:5d:
d3:ce:b9:43:d1:53:c6:02:de:46:6f:fd:72:f6:59:
41:ad:b7:24:9e:6d:81:db:7c:6a:02:83:3d:ee:72:
cd:67:7a:33:70:91:2a:ce:b6:48:25:9f:bf:e8:97:
d7:a5:b8:e7:1b:ab:4d:25:ad:96:42:c4:01:4c:b1:
2d:50:a4:91:d5:73:ee:0b:0e:f4:3c:1b:0a:f0:9b:
7c:e1:b0:48:0e:01:e2:39:fc:c8:bb:6a:0f:29:fd:
d8:47:fb:dc:55:06:8c:a3:06:61:bc:fa:64:a9:b8:
f3:b6:88:6b:24:be:70:82:99:20:66:5e:6a:79:18:
a7:cd:05:34:3a:c9:5d:62:57:db:f7:c8:e8:85:d6:
b4:73:4e:da:67:80:6a:b0:78:15:d5:06:f1:b8:08:
28:69:88:c9:d0:08:76:eb:6d:e8:e0:47:a1:02:4c:
3b:88:1e:98:93:c1:13:72:a0:56:79:10:db:7c:04:
ba:85:fe:15:f7:78:2d:bf:e2:df:49:ac:f4:94:34:
d8:1b:80:ff:a3:e0:4a:83:57:0b:90:cd:9f:68:9f:
5a:93:cd:9f:65:93:dd:ea:33:0f:6c:d5:ec:e0:22:
82:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:99:C4:18:72:88:81:E5:85:07:98:FB:29:AD:E2:42:5A:1E:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C33F65C06E5C11F1AE8583B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.138.0-156.246.147.255
Signature Algorithm: sha256WithRSAEncryption
52:a9:82:ef:db:f4:a9:b1:af:78:71:2c:8a:a6:6e:21:65:e9:
36:f0:17:f4:7c:8d:ea:b0:3b:31:f0:f5:91:65:26:ec:40:ec:
99:28:05:60:4a:19:91:38:51:6f:6b:b1:47:00:32:2c:e6:d6:
c6:bb:3e:85:8a:78:24:91:41:56:de:59:7b:aa:cc:05:c3:a3:
d6:d3:c1:af:93:7c:d4:70:5c:e8:b1:7d:5b:7e:73:82:56:f8:
f3:51:f7:a3:93:0d:4e:1c:ca:0a:ec:18:d1:62:df:05:3f:9f:
65:03:24:bd:3b:3a:6d:72:69:e4:73:16:80:6f:d7:6b:a0:28:
02:41:cf:67:97:d8:6a:9a:1a:21:21:ce:bf:cc:35:0e:8e:e3:
6d:7e:57:ee:6b:ed:50:96:40:54:30:bc:4d:1c:9e:87:bc:88:
e5:fd:83:ee:1d:98:1d:19:3c:53:62:ee:54:fc:93:54:9f:24:
ed:bc:60:f1:14:57:05:fc:c6:4a:7e:ec:8f:44:6f:39:32:54:
8c:1f:ff:bf:2a:32:41:f2:8c:14:20:55:b0:ee:3a:5c:8e:87:
ab:73:c7:b9:76:cc:d0:33:aa:26:91:a5:2b:f5:03:f9:2b:c0:
ef:31:4b:76:47:b8:71:71:b2:aa:d7:e6:8c:c5:87:f7:d1:68:
de:ba:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:59 2026 by rpki-client