Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D638DB3C7B6011F18BF4F618CF1D38B0.roa
File: D638DB3C7B6011F18BF4F618CF1D38B0.roa (raw, json)
Hash identifier: Pamr04BjT3FpVgM6zLlKhbQ25tu2c0WVKjuRhn5dnj8=
Subject key identifier: E5:3D:D6:5A:43:71:F8:93:FE:E3:C1:EF:31:BE:BB:CD:70:9E:54:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D638DB3C7B6011F18BF4F618CF1D38B0.roa
Signing time: Thu 09 Jul 2026 06:38:47 +0000
ROA not before: Thu 09 Jul 2026 06:38:42 +0000
ROA not after: Sat 01 Aug 2026 06:38:42 +0000
asID: 63099
IP address blocks: 156.227.136.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.231.8.0/24 maxlen: 24
156.231.9.0/24 maxlen: 24
156.231.63.0/24 maxlen: 24
156.231.106.0/24 maxlen: 24
156.231.128.0/24 maxlen: 24
156.231.129.0/24 maxlen: 24
156.231.133.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.133.0/24 maxlen: 24
156.249.162.0/24 maxlen: 24
156.249.166.0/24 maxlen: 24
156.249.167.0/24 maxlen: 24
156.249.170.0/24 maxlen: 24
156.249.180.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.249.190.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115651 (0x1c3c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 06:38:42 2026 GMT
Not After : Aug 1 06:38:42 2026 GMT
Subject: CN=6a4f41f7-225a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9c:7c:62:68:f6:03:87:a1:60:f2:de:98:3a:
57:46:e2:45:96:04:7e:a5:5d:96:26:f7:d1:4a:37:
44:2c:d6:9d:14:ca:bb:32:6b:65:ae:d3:65:4a:01:
a9:8f:e1:4f:8e:88:06:c2:4a:df:9d:c5:49:bc:08:
e6:79:42:9b:a4:6e:79:32:a4:d1:ea:39:b1:07:e3:
c0:b6:5c:2c:66:cc:2b:ee:7a:5b:72:fc:f2:d4:f7:
1d:b9:bb:ff:f6:3f:0c:bc:92:92:29:91:48:b7:48:
aa:5b:46:e1:14:1d:ff:f6:82:67:6c:f9:45:26:ed:
eb:dc:e6:fe:2c:2d:0d:1d:6d:07:d7:7c:d3:6e:fe:
83:1c:34:ae:46:79:62:03:8c:79:d8:f7:d7:57:5d:
41:9d:ea:d7:b7:d3:96:eb:04:8a:f0:47:cb:5f:bd:
71:5a:4b:9a:f2:4c:5e:aa:a1:82:a3:b0:7f:ad:af:
53:89:35:34:ea:c6:be:ea:e6:cf:ef:91:55:2e:04:
29:44:44:d5:6d:7a:f1:40:01:64:b8:db:52:79:9f:
f2:ec:81:56:db:03:24:28:c6:e1:79:4a:ae:3f:ae:
cd:14:1c:7a:d3:69:30:9a:52:26:1f:fa:7a:bf:db:
9b:ed:d8:f3:fd:ec:a1:a2:42:b1:f7:f9:62:a2:18:
f0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3D:D6:5A:43:71:F8:93:FE:E3:C1:EF:31:BE:BB:CD:70:9E:54:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D638DB3C7B6011F18BF4F618CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.136.0/24
156.231.6.0/24
156.231.8.0/23
156.231.63.0/24
156.231.106.0/24
156.231.128.0/23
156.231.133.0/24
156.233.66.0/24
156.249.133.0/24
156.249.162.0/24
156.249.166.0/23
156.249.170.0/24
156.249.180.0/24
156.249.187.0/24
156.249.190.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b9:8b:a5:24:14:ff:75:4e:9b:9a:88:3d:0a:ad:fc:ef:89:
5e:78:ee:04:55:1a:71:76:99:e9:4f:e2:65:cc:6e:eb:d2:6b:
9b:b0:75:9e:7c:d0:9f:10:db:f3:5f:ed:d1:d8:35:7c:9c:5a:
eb:91:6b:26:b9:21:0c:7c:72:17:7a:29:e8:d0:80:ac:a4:6c:
96:ec:bd:5a:e5:38:09:2d:79:5e:6a:56:1f:7b:3b:21:a9:34:
a3:9f:f1:41:e7:cb:bd:4b:1c:81:6c:73:b6:f7:da:28:6d:d2:
2d:0c:e0:45:94:51:a1:90:29:a1:38:d4:4d:2e:d3:f6:48:0b:
0a:22:3b:26:ab:e1:15:f1:8e:13:03:9f:8e:6b:38:4c:55:d8:
5c:41:39:5c:67:10:88:d5:54:46:bc:bd:b5:1e:c9:d4:1e:0f:
76:80:95:40:fe:c4:b6:9f:01:ad:ee:ca:44:24:6a:a8:65:8e:
f9:f2:b4:09:af:32:42:e5:5d:fe:36:d9:6f:1a:22:ef:ee:fc:
33:f2:b7:0b:a0:fb:4a:af:41:fc:93:8f:f1:84:9d:74:57:61:
8b:ba:c2:68:36:3d:66:24:a1:54:75:6d:e6:ae:1c:4b:78:47:
59:ea:3c:13:10:34:36:7e:e4:2a:b0:f7:e6:ed:ef:f1:83:5d:
3c:2f:6d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:37 2026 by rpki-client