Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D96A8E552611F1858699AFCE1D38B0.roa
File: E6D96A8E552611F1858699AFCE1D38B0.roa (raw, json)
Hash identifier: RiJBp29h2aIEpZQ9Wmi2R14J63+Dmr4mEyh4tyYMeIU=
Subject key identifier: 23:C2:D5:97:C4:74:33:C2:51:94:9D:DF:71:22:9D:8B:1D:8C:CF:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B740
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D96A8E552611F1858699AFCE1D38B0.roa
Signing time: Thu 21 May 2026 15:08:20 +0000
ROA not before: Thu 21 May 2026 15:08:15 +0000
ROA not after: Thu 25 Jun 2026 15:08:15 +0000
asID: 273155
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.224.0/19 maxlen: 24
156.236.224.0/24 maxlen: 24
156.236.225.0/24 maxlen: 24
156.236.226.0/24 maxlen: 24
156.236.227.0/24 maxlen: 24
156.236.228.0/24 maxlen: 24
156.236.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112448 (0x1b740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:08:15 2026 GMT
Not After : Jun 25 15:08:15 2026 GMT
Subject: CN=6a0f1fe4-6204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:17:2b:43:54:b8:47:05:4e:b6:b2:9c:e7:
8a:4d:76:b5:af:b4:10:c3:48:82:98:7e:a1:d9:a7:
75:1e:41:2d:17:ce:ee:f6:49:24:05:09:4b:eb:cf:
47:a6:39:82:c6:3f:f7:37:f4:31:09:3f:01:f7:9d:
f9:e6:34:a2:bc:bd:97:ef:bf:29:c9:37:c1:b4:7b:
32:ce:07:07:50:48:d1:87:ee:8a:f1:b0:8d:02:ae:
86:a1:b6:66:90:55:c1:32:d4:c6:e1:7b:fd:9c:d9:
33:34:bc:d8:6c:8b:c7:56:da:69:f6:3e:3d:c4:88:
2e:46:f0:f1:8b:8b:c9:9a:f8:d6:31:fa:3e:e7:0c:
72:96:e5:5e:6e:c9:ca:fb:22:83:30:3f:55:c8:dc:
21:2b:6d:1c:46:f1:d3:19:6a:e0:00:9d:58:98:7e:
7c:c6:92:f3:e0:9d:6e:7b:dd:99:fc:6f:f2:cb:22:
0c:4d:c7:bd:bc:37:8d:e2:d4:89:f1:12:f7:42:29:
0d:ef:fc:b6:20:bb:e9:fd:f4:97:22:e4:39:19:cd:
ae:b0:b1:d6:3d:1a:2a:23:40:bb:b9:25:67:61:d4:
de:d4:02:e7:ac:3a:b7:56:9a:a9:0e:f8:c8:e0:70:
88:68:70:74:47:a3:d2:31:85:05:e2:6a:34:73:69:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:D5:97:C4:74:33:C2:51:94:9D:DF:71:22:9D:8B:1D:8C:CF:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D96A8E552611F1858699AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
68:d4:98:5b:be:cc:a7:10:1c:3d:a0:c8:fd:1e:90:f5:07:27:
52:23:6f:97:ba:ed:ea:2d:87:47:fb:52:d8:f7:dc:9a:ba:b6:
56:46:2f:6a:c5:3f:08:c7:8c:d1:4b:c4:9f:e0:82:b8:5e:2f:
c9:1e:6d:7a:ce:19:ee:87:cc:b1:59:a4:5d:9b:e1:83:75:49:
df:9b:4b:03:2e:a3:e8:73:35:91:38:2f:e9:19:9c:83:ce:eb:
16:28:a0:b4:97:a7:a1:57:fe:b6:04:2b:32:19:16:9f:e5:43:
84:d0:dc:05:24:98:2f:9e:cb:05:96:f9:75:23:aa:1e:43:42:
27:34:e6:80:1d:11:98:6a:f8:49:1d:e7:32:c3:d9:f1:2e:7b:
21:c6:69:a8:6c:f6:33:9b:f1:15:57:2b:62:0d:dc:9a:52:f7:
75:3f:54:d7:e3:a8:52:29:20:64:d8:4b:d3:c2:08:e5:f8:9b:
62:f2:d4:79:f2:43:61:7f:7b:7c:0d:43:f3:78:8f:57:95:85:
16:1e:c4:4c:06:98:13:b1:de:91:34:26:ab:ff:15:a1:61:7e:
ae:38:e2:d9:f9:dd:ce:d1:98:93:09:5a:2b:87:8c:b4:2d:9c:
36:c0:c5:9e:29:e9:c4:b4:3a:f3:10:a7:29:87:3c:ba:ab:a1:
f4:f8:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:22 2026 by rpki-client