Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8406B2C7C3911F19F15C3C4CE1D38B0.roa
File: E8406B2C7C3911F19F15C3C4CE1D38B0.roa (raw, json)
Hash identifier: GFnN+CyZVn6kFpFyrJ7Y7xbDHBpnrjRk1PAj3JdH4BA=
Subject key identifier: 54:CA:06:96:8A:98:D5:F5:74:B8:9B:85:BB:22:91:66:55:7A:6E:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C43C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8406B2C7C3911F19F15C3C4CE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:32:38 +0000
ROA not before: Fri 10 Jul 2026 08:32:33 +0000
ROA not after: Tue 10 Jul 2029 08:32:33 +0000
asID: 17561
IP address blocks: 156.251.141.0/24 maxlen: 24
156.251.142.0/24 maxlen: 24
156.251.143.0/24 maxlen: 24
156.251.144.0/24 maxlen: 24
156.251.145.0/24 maxlen: 24
156.251.146.0/24 maxlen: 24
156.251.147.0/24 maxlen: 24
156.251.148.0/24 maxlen: 24
156.251.149.0/24 maxlen: 24
156.251.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115772 (0x1c43c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:32:33 2026 GMT
Not After : Jul 10 08:32:33 2029 GMT
Subject: CN=6a50ae26-d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2e:05:1b:c3:93:04:a1:f9:63:75:04:a2:35:
a6:ef:b5:cf:19:0a:11:28:d1:f0:02:e3:db:eb:5c:
84:d6:9e:4e:0e:da:bd:7b:e8:56:da:b4:e0:15:e0:
cc:3e:48:59:fb:e9:1f:1b:7c:cf:32:0a:89:54:95:
99:fb:c6:4b:fb:4b:57:92:e4:49:d1:ab:6b:f0:3a:
f7:0d:ff:86:0f:4d:26:4c:2e:41:83:0d:f3:86:a5:
78:64:89:f8:84:05:c1:e4:87:d5:1d:87:12:06:7c:
e6:da:57:b2:e0:a7:e5:1f:c5:98:97:03:51:ef:a4:
c9:c4:73:cd:37:88:24:01:d1:90:40:68:ae:c1:9d:
b5:f7:12:81:0d:7b:2e:a5:16:e1:e1:e1:fb:c6:42:
a2:76:8d:b5:5c:83:bb:21:6a:05:9f:2a:fb:f8:11:
93:a1:e2:85:a9:b3:40:50:d5:7c:bb:0a:8e:96:ef:
f0:03:db:db:a8:57:14:5e:6c:16:f4:2f:19:de:cb:
d1:9f:f8:61:b6:52:3d:f3:51:33:c6:f5:a4:57:a8:
8d:44:c7:3e:32:26:39:50:fb:b3:bd:96:ca:fd:5e:
c6:d2:63:6a:d3:33:78:6d:6e:1f:1b:34:ae:f0:5f:
18:a4:49:ff:b1:2a:14:d9:ea:68:d6:5c:29:07:ec:
9e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CA:06:96:8A:98:D5:F5:74:B8:9B:85:BB:22:91:66:55:7A:6E:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8406B2C7C3911F19F15C3C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.141.0-156.251.150.255
Signature Algorithm: sha256WithRSAEncryption
7c:87:c1:c6:73:f9:86:c1:ee:50:13:61:f7:5c:43:99:90:ae:
41:c2:dd:27:c1:14:a4:65:0f:70:de:c4:d7:31:ae:a8:38:78:
7e:33:b0:89:1c:62:dd:a5:da:8d:84:5f:83:90:ae:bf:d0:9b:
1b:26:19:38:82:97:e3:12:d0:bc:39:65:fa:a6:e2:c8:18:82:
54:24:10:63:a3:1d:bf:f9:69:68:80:b4:f3:e2:b5:c1:3c:ee:
66:f3:4c:b4:d4:0a:65:56:c1:b7:06:00:b9:d5:da:8d:37:c5:
e3:d7:a2:3d:f3:07:e4:d8:7b:27:a4:e6:d1:50:1e:ff:22:02:
7b:39:8d:f3:ab:ab:a2:11:22:ea:4e:1a:fc:14:48:7f:f7:1e:
85:85:c4:ed:80:66:75:b8:c3:ce:b8:73:f8:17:c4:21:06:d9:
eb:ed:a6:18:50:e0:bc:f0:5b:a7:97:ea:fc:45:7e:d5:3c:11:
d9:db:53:68:9b:6a:22:86:07:b2:ed:06:9a:53:2b:1e:2e:b7:
99:14:6d:1d:01:f5:e1:17:3e:53:d0:b4:f7:90:c1:4d:73:8c:
bf:cf:7c:a3:8f:ad:4b:72:2f:0b:c6:81:2a:f0:d8:2b:72:5b:
56:dd:e8:38:0b:49:b4:92:52:47:b9:49:49:25:4b:0f:23:06:
7f:e1:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:20 2026 by rpki-client