Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6497B325F2C11F1BB3778ACCE1D38B0.roa
File: C6497B325F2C11F1BB3778ACCE1D38B0.roa (raw, json)
Hash identifier: 2pj+pYpf1VgpGFaWuvyihxGcouPEz8JMVwpfysaG71g=
Subject key identifier: 29:3B:95:4C:F0:93:45:90:38:93:03:D7:52:53:91:AB:4C:F8:52:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6497B325F2C11F1BB3778ACCE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:15:34 +0000
ROA not before: Wed 03 Jun 2026 09:15:29 +0000
ROA not after: Fri 10 Jul 2026 09:15:29 +0000
asID: 17497
IP address blocks: 156.245.203.0/24 maxlen: 24
156.248.80.0/21 maxlen: 24
156.248.80.0/24 maxlen: 24
156.248.81.0/24 maxlen: 24
156.248.82.0/24 maxlen: 24
156.248.83.0/24 maxlen: 24
156.248.84.0/24 maxlen: 24
156.248.85.0/24 maxlen: 24
156.248.86.0/24 maxlen: 24
156.248.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113563 (0x1bb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 09:15:29 2026 GMT
Not After : Jul 10 09:15:29 2026 GMT
Subject: CN=6a1ff0b6-ea97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:2a:4a:21:90:73:3c:52:62:bf:31:f7:10:
14:c8:db:25:cd:40:6d:4b:01:67:af:99:3f:98:87:
63:f2:92:75:56:15:dc:3b:7f:cc:51:56:6d:1c:71:
c6:f7:21:41:de:a2:27:d0:9c:35:81:0b:77:c9:51:
f7:4a:8a:f7:56:10:8c:e2:de:a5:6f:35:f9:3c:8d:
07:39:6c:11:4f:c5:f8:1f:4d:78:45:bd:3a:91:d2:
c1:bd:b7:d1:54:b5:02:bd:60:9a:be:af:4d:83:93:
b9:55:d1:3b:c0:e6:a0:e9:8e:df:a8:5b:c3:b2:75:
b4:52:45:b0:ec:47:f2:f0:a3:2f:b2:2a:aa:51:ba:
a6:6f:3e:f0:a0:d3:99:ae:89:97:17:27:77:be:9b:
9c:a3:92:3b:3a:05:8e:85:a7:de:c8:b4:cb:c5:15:
48:bd:23:bf:af:cc:a3:b4:88:18:35:92:d1:e4:78:
80:15:37:93:a0:0d:5d:84:fb:bc:62:bb:9b:56:1a:
91:37:79:1c:63:49:74:33:ed:c9:2e:1f:66:63:1d:
f1:98:e1:6e:59:28:d6:a6:98:10:2a:99:db:2d:4b:
2e:36:33:fb:31:eb:a0:96:bd:74:6d:f5:1a:5b:ca:
76:a2:93:9d:93:b8:37:53:8c:90:ce:7d:23:b3:71:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3B:95:4C:F0:93:45:90:38:93:03:D7:52:53:91:AB:4C:F8:52:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6497B325F2C11F1BB3778ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.203.0/24
156.248.80.0/21
Signature Algorithm: sha256WithRSAEncryption
60:31:35:7b:04:43:0b:0c:30:90:b5:1f:f3:4f:16:5a:6e:10:
7c:7b:ed:36:dd:51:a5:36:ea:55:8c:c1:c9:72:f4:82:b7:b0:
ef:36:02:f2:39:8f:d0:68:36:30:fe:f3:dc:50:74:bd:ee:e3:
dc:68:f3:8d:4e:1f:f1:2b:2d:09:c9:61:00:90:db:7c:d2:52:
cc:af:bf:e4:dc:82:9d:28:77:dd:34:9f:97:cc:15:2d:ee:00:
13:d8:9f:f8:e9:75:18:7c:dd:e4:23:9e:d2:c1:f1:92:c3:0d:
b5:8a:18:68:d3:e8:68:ce:56:1f:b9:19:b9:6e:9f:37:ce:df:
32:70:d0:2c:36:d9:ad:0f:14:1b:d2:8e:ad:ec:e2:6a:c3:a3:
f6:80:76:75:7c:18:0b:6e:d3:9b:bf:7b:a7:47:cb:08:2d:44:
59:2a:da:5e:9a:7f:be:cc:00:6e:f2:39:6e:69:0d:da:d3:f6:
82:0c:a9:c6:1b:e9:9a:3f:70:98:ef:c1:d6:b9:0e:b7:cb:77:
f3:ed:5b:19:74:4b:1f:6b:f8:02:20:6f:83:b2:fb:2a:32:59:
e2:1b:e7:e1:c9:38:89:e8:70:d1:c7:ba:65:54:5a:0c:ec:04:
3d:b9:2b:d9:f6:01:0d:62:a6:d0:1e:f8:74:7b:84:46:19:c4:
55:17:62:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:55:35 2026 by rpki-client