Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C364925073F711F1A8EC60C9CE1D38B0.roa
File: C364925073F711F1A8EC60C9CE1D38B0.roa (raw, json)
Hash identifier: 4MSXsPRjxAz7NsnU9c//KuY0LQ3vvo2lrKyOJrOUvVc=
Subject key identifier: C0:33:4D:09:B0:7F:95:F1:B6:70:DD:84:2F:97:8E:30:94:A9:95:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C364925073F711F1A8EC60C9CE1D38B0.roa
Signing time: Mon 29 Jun 2026 20:19:00 +0000
ROA not before: Mon 29 Jun 2026 20:18:54 +0000
ROA not after: Tue 04 Aug 2026 20:18:54 +0000
asID: 136800
IP address blocks: 156.234.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115126 (0x1c1b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 20:18:54 2026 GMT
Not After : Aug 4 20:18:54 2026 GMT
Subject: CN=6a42d334-d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:1c:30:4d:0a:ef:2a:59:6d:78:83:dc:27:
bf:21:b4:23:13:36:ea:96:72:08:33:7e:2b:09:71:
ae:7a:58:06:a7:94:e2:57:0f:c0:6e:9b:ba:0a:83:
f1:91:ab:e8:68:7a:ec:08:a2:6a:0b:dd:c7:f5:c3:
85:69:64:e3:6d:9e:11:78:3d:22:36:c5:00:9e:c9:
1f:0a:4a:6c:b6:72:74:5b:77:c6:c4:dd:a2:41:67:
27:8e:93:13:ce:de:91:3a:98:e1:30:90:d1:a2:bb:
e0:dc:9f:3f:29:dd:82:94:08:58:7a:fd:4e:e3:0e:
3b:6a:2d:8c:6f:15:71:8b:45:69:80:96:c7:6c:84:
9f:2a:7d:8e:1d:ba:71:a4:34:00:73:e0:6e:2a:a7:
3d:5b:dd:c6:d6:b8:b4:f1:03:27:0c:73:1f:9d:f1:
04:0a:37:60:fd:e4:ac:bc:24:76:3c:b0:d1:6a:17:
39:a9:b9:30:0c:fc:13:8e:b6:90:00:32:17:59:97:
ef:80:5e:8c:66:c4:67:bc:9d:c8:c6:1e:9f:7e:33:
2a:95:4c:e8:9f:2e:61:25:75:2e:ea:d7:2a:ce:fb:
5f:71:c1:11:cd:df:26:d2:3e:c6:11:d3:6c:f9:05:
4f:17:fc:c2:3f:bd:1d:32:19:47:da:53:3d:08:7e:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:33:4D:09:B0:7F:95:F1:B6:70:DD:84:2F:97:8E:30:94:A9:95:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C364925073F711F1A8EC60C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.77.0/24
Signature Algorithm: sha256WithRSAEncryption
89:33:a1:c6:a2:c9:fe:01:d6:6f:c1:4a:3b:83:0e:3a:a3:d8:
48:78:8c:fe:3f:94:7b:5e:43:b6:08:05:df:9c:05:49:ef:85:
a5:4a:53:da:76:1d:38:e4:3a:13:23:81:0d:b1:4b:86:a9:9e:
db:42:70:34:e4:55:f2:1a:90:f9:f1:e1:8e:64:f6:df:e5:74:
eb:f0:27:63:04:34:29:6c:fd:85:a8:39:ba:8b:2d:e7:ea:84:
e9:15:fe:0a:01:af:bc:15:b0:a4:f5:8b:48:39:7f:06:6a:69:
ad:a8:7a:d0:81:fe:ac:76:9b:61:33:0d:ad:e1:cd:1c:96:4b:
cd:c0:63:5d:f9:85:db:ad:e6:b2:bb:77:87:00:65:fa:47:02:
e0:a1:cb:0d:f8:d2:f7:2e:ac:e0:2b:31:39:5b:a5:25:22:bb:
bc:8e:0f:cb:b0:e8:9a:f6:e9:3c:48:9d:71:55:cc:d9:88:42:
1d:44:7e:76:a9:01:15:0e:f7:7d:1a:2c:2b:91:12:d0:56:71:
89:5f:58:c1:59:d3:2c:da:18:23:a0:a6:6f:65:5f:51:20:d6:
54:43:5f:d6:59:9c:7e:ca:52:c5:57:51:8c:e7:0d:3f:1c:ec:
f1:32:2a:5a:c3:31:29:95:76:08:35:35:af:ab:3b:c9:d2:54:
f4:1a:1e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:47 2026 by rpki-client