Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F14A526FF511F181B358E9CE1D38B0.roa
File: E1F14A526FF511F181B358E9CE1D38B0.roa (raw, json)
Hash identifier: z6vMxIlkESsO1lZ+ZriM1+ncbFt33La+mC4z7MwQ9hE=
Subject key identifier: B5:21:4F:98:B8:C6:68:CD:45:E3:3D:16:43:A1:A9:BE:4A:B7:4D:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C042
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F14A526FF511F181B358E9CE1D38B0.roa
Signing time: Wed 24 Jun 2026 17:55:28 +0000
ROA not before: Wed 24 Jun 2026 17:55:23 +0000
ROA not after: Sun 09 Aug 2026 17:55:23 +0000
asID: 63099
IP address blocks: 156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
156.243.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114754 (0x1c042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 17:55:23 2026 GMT
Not After : Aug 9 17:55:23 2026 GMT
Subject: CN=6a3c1a10-e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:21:3e:74:f0:de:4c:eb:dd:84:14:3a:fa:f5:
d9:2a:b3:4b:95:ee:0b:76:14:53:49:91:bb:9e:3e:
32:29:9c:a4:0d:8e:e5:84:d5:c4:dc:54:f9:38:27:
f4:18:80:13:de:64:73:9f:7e:01:aa:44:f1:07:47:
11:2a:b0:9e:fa:d3:eb:a0:3a:99:dc:2c:f9:9b:5b:
bb:0b:30:9f:1e:c7:b1:74:fa:21:31:11:20:d8:0d:
43:c3:c3:3b:05:c2:a1:33:96:5b:2d:d7:4a:e8:a0:
b9:34:2b:3c:a4:ae:6f:31:c4:11:08:63:27:bc:aa:
8f:eb:3f:4c:32:eb:0b:92:7f:0b:3f:fb:f0:ef:67:
15:ef:f9:e8:4b:01:ae:95:6f:97:a8:62:d0:4f:da:
e2:5a:00:6c:ce:75:ac:d1:11:07:04:4e:41:9e:44:
42:f3:b4:68:cc:f7:37:c4:ae:d5:c2:79:5d:6a:07:
60:c2:7b:b1:0b:dd:32:b0:75:0c:96:62:bf:ac:2c:
f3:b9:3e:75:38:b0:7f:c8:97:cf:3c:3f:f0:1c:60:
3b:67:f5:c4:76:84:5c:b0:9c:78:ac:35:e8:0e:78:
42:2f:81:1e:88:de:73:a1:08:77:cf:bd:b0:e6:a7:
7c:17:5c:1d:a5:5e:e7:5a:5a:1f:78:4f:45:36:d1:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:21:4F:98:B8:C6:68:CD:45:E3:3D:16:43:A1:A9:BE:4A:B7:4D:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F14A526FF511F181B358E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.62.0/24
156.228.210.0/23
156.243.225.0/24
Signature Algorithm: sha256WithRSAEncryption
20:75:2b:fd:fd:22:f0:15:c1:3b:2a:7e:92:6c:69:ed:4e:68:
d2:94:21:09:77:9c:de:b1:cc:69:c7:77:aa:05:db:7e:7f:03:
6c:33:b4:69:57:42:45:06:eb:9f:6b:0d:55:10:42:a0:aa:8a:
ef:c4:f4:74:54:a1:62:c1:d4:f7:4a:e8:4e:28:96:f7:5c:51:
99:a5:78:c9:e3:20:19:98:3b:a2:b9:4f:d8:c4:52:90:3d:7b:
cc:22:a9:b7:d1:d4:38:88:ad:b3:d9:ca:51:43:dd:c2:65:30:
e0:6f:43:81:68:6f:e4:88:4b:a0:fc:5b:e9:35:0f:ea:97:a6:
99:7e:23:76:73:b7:af:dd:c9:e8:fb:23:6e:4f:5d:2f:5c:d5:
cb:46:ba:c7:89:07:85:2f:42:a9:fa:54:0e:4f:61:7a:10:75:
d7:c6:5f:15:34:5b:56:c9:91:37:7d:4c:43:b5:44:cb:25:77:
93:19:cd:90:27:3e:99:3f:a4:55:ce:2e:e2:40:e8:30:a8:71:
d4:90:0e:bc:27:ca:cf:1f:d0:a3:ae:a5:61:b6:4d:66:a4:f8:
56:32:b0:ec:4a:86:55:ef:be:d1:2c:ee:3f:b1:90:a7:17:67:
70:bf:53:03:f4:f0:b5:19:cb:1e:b1:30:ea:e0:4e:47:1e:7a:
80:8a:a7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:17 2026 by rpki-client