Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07F049A7AA811F1B887E4FDCE1D38B0.roa
File: D07F049A7AA811F1B887E4FDCE1D38B0.roa (raw, json)
Hash identifier: aSlEmDH7shivtbv2LT+EKdwa7lAANXvyDxjv6qHhUSo=
Subject key identifier: D1:CC:F1:D8:77:B7:4B:B7:23:2F:64:29:44:6D:D8:77:CD:4B:A4:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C39A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07F049A7AA811F1B887E4FDCE1D38B0.roa
Signing time: Wed 08 Jul 2026 08:41:30 +0000
ROA not before: Wed 08 Jul 2026 08:41:25 +0000
ROA not after: Sat 29 Aug 2026 08:41:25 +0000
asID: 214941
IP address blocks: 156.229.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115610 (0x1c39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 08:41:25 2026 GMT
Not After : Aug 29 08:41:25 2026 GMT
Subject: CN=6a4e0d3a-99e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:7e:27:5b:26:73:46:6f:3e:6e:05:b0:65:
bc:d8:a5:ac:1c:d2:17:96:b1:73:b5:b7:b8:a5:85:
f0:d2:0d:e0:3f:c3:9f:0a:15:22:fd:15:b4:af:73:
69:e5:bb:16:ef:83:72:a7:d0:7d:61:64:49:52:58:
fe:71:3b:a1:4c:74:e3:bd:2c:9a:ce:c3:a4:a3:93:
90:8e:1f:64:c5:70:8a:68:57:9a:33:b1:f2:34:49:
2d:99:4c:6b:84:d9:f8:46:5b:ec:53:b6:7c:57:af:
bd:5c:17:20:72:0a:7e:be:8f:6c:ed:bc:03:35:ad:
2f:2b:4a:3f:2b:91:46:8d:85:f5:5a:0a:52:61:ee:
01:86:ce:97:24:62:89:db:79:48:03:35:0e:2c:59:
de:8a:be:fd:2d:10:d8:15:2b:68:d0:c1:91:72:97:
22:d4:2a:62:63:31:65:7e:ab:89:2b:10:9a:7e:d8:
05:77:9c:54:77:3a:ee:a6:3c:7d:ee:b8:0d:73:5f:
d9:4c:68:91:5c:ce:ca:47:e0:cc:6e:34:a3:e8:03:
d2:9f:db:80:60:de:dd:bf:a0:d0:47:cc:19:c4:c3:
27:e4:fd:a9:ca:40:87:4d:c8:0a:16:c7:b2:2c:61:
e8:0a:15:03:7f:8c:0b:f7:4a:98:b0:16:35:7a:b1:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CC:F1:D8:77:B7:4B:B7:23:2F:64:29:44:6D:D8:77:CD:4B:A4:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D07F049A7AA811F1B887E4FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.60.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7b:f0:d5:b7:0d:4b:ca:ba:10:63:6d:ed:21:ac:b2:22:8c:
b1:72:96:95:12:76:00:03:2f:82:30:03:f0:72:3e:c7:ea:4a:
c2:27:dd:46:18:d1:24:47:66:5e:43:19:dd:5c:79:aa:22:a7:
76:d5:ac:12:85:72:08:fb:57:d5:98:55:7f:92:c5:d8:8b:98:
8d:2d:86:37:2b:8d:ae:3d:bd:02:42:a7:a3:54:6e:5c:de:92:
e5:92:ad:f2:b7:d5:53:bc:c6:90:d2:49:c8:e6:20:6b:f1:e6:
bd:20:11:4f:0b:a3:69:83:a3:0a:36:9f:05:51:a0:a6:f9:cc:
ad:d0:ee:e2:e9:40:54:54:af:e3:ea:ee:65:87:40:30:0d:7b:
f5:b9:64:32:c7:3f:1d:ee:c8:4c:4f:99:b8:1b:97:54:3e:49:
06:89:89:9f:4b:ee:44:0e:33:60:a5:4f:fa:0c:fa:df:3e:59:
46:a2:30:e9:7d:8a:12:0a:2a:0f:7c:18:8f:35:5d:13:13:1c:
f6:ba:49:c3:6b:45:ce:a2:34:49:d4:ae:63:30:7e:e4:1e:bd:
ea:c0:cf:92:b4:65:9d:02:8a:1a:d0:54:9a:43:51:4d:7c:af:
ee:ec:5c:ee:32:84:a6:3b:5d:fe:4a:92:07:3c:4f:e8:3b:a9:
5b:f9:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:59 2026 by rpki-client