Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C66703A67D6711F1BB35BFE0CE1D38B0.roa
File: C66703A67D6711F1BB35BFE0CE1D38B0.roa (raw, json)
Hash identifier: i65S0j031/Ilr4LjKW5hjGoW/G2h+AlFtm3Db5oqMSk=
Subject key identifier: 85:9B:62:8E:77:86:AF:BF:1A:83:E6:53:50:4A:72:45:B3:CF:D2:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C495
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C66703A67D6711F1BB35BFE0CE1D38B0.roa
Signing time: Sat 11 Jul 2026 20:33:29 +0000
ROA not before: Sat 11 Jul 2026 20:33:24 +0000
ROA not after: Mon 10 Aug 2026 20:33:24 +0000
asID: 54801
IP address blocks: 156.225.79.0/24 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115861 (0x1c495)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 20:33:24 2026 GMT
Not After : Aug 10 20:33:24 2026 GMT
Subject: CN=6a52a899-886d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:5c:7a:43:08:fa:d7:31:c5:3d:77:69:ed:
80:3e:a6:e4:3d:d1:9f:b7:ea:67:d5:e2:f7:e8:2a:
35:e7:e5:45:33:b2:6c:92:9a:ab:bd:ab:58:9d:91:
e2:fb:91:77:8f:b3:5d:f7:ea:24:85:74:c8:a9:d6:
21:8b:f8:a2:27:0b:8f:26:a2:40:c6:02:46:6d:1c:
c5:8d:c0:e9:ea:3a:12:46:98:3c:32:78:c9:67:f4:
cf:47:ea:97:06:c8:85:58:52:a9:13:95:5c:1c:ef:
83:fe:75:97:20:dd:6c:54:73:2c:67:e3:9b:65:8a:
af:3e:d8:aa:cc:02:bc:ae:b1:e0:9f:52:79:de:60:
ae:19:e0:5b:4b:47:e1:0e:06:31:3a:bc:f8:3e:28:
a8:90:07:58:57:c2:de:c7:3d:be:af:91:2b:30:dd:
b5:6c:95:8f:ed:b1:92:0b:03:56:0c:08:8c:c5:7e:
17:54:0a:11:cb:d7:8f:73:f3:54:89:74:8f:cc:d8:
7b:aa:dc:d7:fa:dd:93:d6:4b:a3:f3:64:2c:71:ef:
e3:18:94:6f:26:f5:18:b5:8c:32:93:71:02:31:f9:
4a:5e:03:a0:c1:2d:16:e1:a3:90:9c:be:f2:47:28:
59:ca:5a:f6:d4:44:d0:e9:4e:b6:47:5c:f4:e9:66:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9B:62:8E:77:86:AF:BF:1A:83:E6:53:50:4A:72:45:B3:CF:D2:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C66703A67D6711F1BB35BFE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.79.0/24
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:df:fb:2d:e6:ef:ea:f5:04:7a:88:68:ea:b4:bb:7d:b4:60:
28:7e:ad:44:ef:71:f4:30:c3:3d:f5:a5:ac:89:a8:3f:fe:b5:
db:63:a2:a9:ba:e9:b2:24:34:79:c6:20:92:c4:82:5f:8f:76:
ec:65:a8:a7:42:98:f5:d0:75:87:a7:45:43:8b:11:56:b4:74:
d3:b1:83:5a:94:81:ee:80:5a:a1:be:88:3b:5b:34:3d:66:4c:
ed:ac:7b:23:31:59:ca:5f:3c:ca:81:fa:cf:9d:eb:df:16:49:
5f:32:a0:3e:3d:84:ba:16:8c:59:1c:d2:bb:ff:52:d1:f9:de:
10:78:62:38:10:da:15:11:b6:32:18:7e:16:27:60:80:34:37:
81:2e:8a:60:6a:a7:a0:c6:9b:96:0c:1f:ca:e5:df:13:c9:08:
37:9e:17:db:e2:8f:8b:99:79:f3:45:bd:c3:f6:0a:ae:3d:ae:
69:1b:c5:be:a9:3a:2e:fe:3f:b5:91:32:1c:71:cf:35:da:4b:
ca:69:f4:dd:46:d9:8f:af:69:c3:75:65:a3:6f:22:a8:46:00:
64:3c:b3:7a:28:e2:6a:a8:10:dc:01:41:c7:7c:a4:36:0a:1d:
21:ae:b3:cc:62:b5:fe:70:12:bd:35:8b:0b:f6:25:6f:4a:94:
f6:08:cb:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:54 2026 by rpki-client