Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D882859A72FB11F1BBAD5DD2CE1D38B0.roa
File: D882859A72FB11F1BBAD5DD2CE1D38B0.roa (raw, json)
Hash identifier: 0lULWtHCceV+PCPy5F68prx3FfN+4/s+juKOJWIAYEA=
Subject key identifier: 4E:2F:1D:7E:C4:FA:25:26:6F:D4:F7:C0:B8:B4:67:C2:CA:B3:19:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C159
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D882859A72FB11F1BBAD5DD2CE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:15:42 +0000
ROA not before: Sun 28 Jun 2026 14:15:38 +0000
ROA not after: Wed 05 Aug 2026 14:15:38 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115033 (0x1c159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 14:15:38 2026 GMT
Not After : Aug 5 14:15:38 2026 GMT
Subject: CN=6a412c8e-80fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:7d:c7:13:d1:55:f2:a6:73:a3:fc:6b:0f:
4e:b6:f3:2b:d7:04:53:93:a6:50:b1:22:92:b9:76:
ca:8a:9e:5e:85:98:c5:8a:31:f3:af:52:17:25:46:
dc:eb:2e:32:0e:cd:77:98:f9:3a:60:cf:46:84:5b:
61:d9:b0:72:95:b1:06:9f:d6:e8:5f:e1:af:c9:15:
cc:ce:5c:76:a1:74:ea:a3:72:57:9d:eb:ad:0f:d4:
75:10:ce:c3:d8:a2:6e:cb:04:cb:a6:c5:b6:cf:75:
a8:25:b5:87:a7:a0:36:38:2e:e3:a5:34:f8:b8:71:
38:5f:21:7f:ed:8d:3d:c1:91:a8:e6:85:76:7e:ba:
60:a7:b8:ae:45:25:b0:e4:64:ba:74:19:9e:3a:33:
14:76:7f:85:d5:87:a5:c9:32:3d:47:4b:3a:46:3b:
c2:12:90:ce:61:69:57:4f:c0:9f:b3:5f:33:27:af:
9c:92:64:70:f6:34:35:4e:f6:25:8b:3c:71:d3:b9:
16:04:5b:f6:71:2e:d7:26:55:64:73:09:84:b2:21:
e0:70:2a:bc:1d:4c:ed:fa:c8:e5:cb:c6:21:7f:77:
7b:b6:fd:4f:8d:68:cb:a5:8b:ae:7b:a3:de:ff:0e:
1f:86:a8:30:fe:e5:44:ea:8b:70:80:09:99:c0:ff:
a8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2F:1D:7E:C4:FA:25:26:6F:D4:F7:C0:B8:B4:67:C2:CA:B3:19:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D882859A72FB11F1BBAD5DD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:81:06:7d:37:3f:6b:d0:9c:f4:9a:2e:d8:19:6d:e2:63:66:
0b:c3:1c:07:ec:40:79:ad:fe:45:bb:34:4c:d3:8e:ae:f7:0e:
54:2c:5f:29:47:56:b5:75:d6:32:a0:fe:a0:7a:b6:62:4b:00:
4c:6d:b9:10:81:b6:b9:ef:5e:87:40:a1:84:85:2a:fe:38:b5:
e8:ca:25:a1:7c:05:56:06:a2:e5:4e:6d:bc:0e:9f:03:d4:db:
8b:28:89:a4:fe:ee:67:24:a8:3f:ff:96:99:7c:19:54:63:48:
c3:40:86:57:8c:20:ad:70:a9:7c:09:95:8a:50:2f:aa:7d:50:
b5:06:bd:1b:07:b5:c5:9a:50:14:0c:5b:2f:42:10:c2:ce:fb:
f2:e3:55:c8:0e:c2:6e:3a:50:dc:26:09:cb:c8:9a:80:9f:0b:
36:af:d3:71:0e:04:d1:e6:ee:a6:88:66:c8:22:87:e6:7b:14:
98:1d:27:57:c0:68:91:82:c9:06:12:b6:92:e6:38:e4:fc:9d:
ef:59:9f:78:40:fe:d3:76:3d:e9:e8:89:99:16:f2:82:49:b9:
a3:30:a9:3a:7a:21:86:73:6b:e4:43:0d:01:6e:b9:af:11:9b:
e6:ff:58:38:b8:95:2d:a5:b6:f3:f5:62:04:9c:8d:b5:a0:c1:
f3:5c:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:32 2026 by rpki-client