Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCA90AE7D9411F1973EBBF3CE1D38B0.roa
File: EBCA90AE7D9411F1973EBBF3CE1D38B0.roa (raw, json)
Hash identifier: uiSanNj6OD2/4Dp9Takdu0C7w2z03B5eecqunspOVU4=
Subject key identifier: ED:16:85:0E:85:69:88:2C:CE:37:16:E1:82:17:C5:80:E2:39:4B:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C49C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCA90AE7D9411F1973EBBF3CE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:56:39 +0000
ROA not before: Sun 12 Jul 2026 01:56:35 +0000
ROA not after: Tue 10 Jul 2029 01:56:35 +0000
asID: 17561
IP address blocks: 156.251.131.0/24 maxlen: 24
156.251.132.0/24 maxlen: 24
156.251.133.0/24 maxlen: 24
156.251.134.0/24 maxlen: 24
156.251.135.0/24 maxlen: 24
156.251.136.0/24 maxlen: 24
156.251.137.0/24 maxlen: 24
156.251.138.0/24 maxlen: 24
156.251.139.0/24 maxlen: 24
156.251.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115868 (0x1c49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 01:56:35 2026 GMT
Not After : Jul 10 01:56:35 2029 GMT
Subject: CN=6a52f457-46c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4a:8b:7f:cd:bb:b0:35:c3:f7:84:3b:ad:51:
b3:80:95:8c:72:5b:7b:bb:5c:b0:8c:4b:64:4f:11:
a3:06:db:e0:c0:94:66:57:0b:ef:d9:03:ab:11:4d:
e9:16:12:3d:a0:c2:12:20:3d:8e:bf:dd:72:52:39:
26:e2:54:2e:1b:fa:af:6d:88:53:3d:3b:14:d9:a6:
c1:d2:b6:1c:02:b4:a1:e9:98:40:64:24:cf:0a:88:
af:53:df:67:25:b1:e8:4d:af:ae:92:29:5b:f1:b0:
a2:4b:89:42:dc:5a:89:68:e7:98:e4:e2:bf:4e:8d:
3b:a9:cb:8e:f0:ba:43:4a:11:ad:e1:42:ca:dc:de:
7e:58:65:2a:c1:55:95:98:a8:47:fe:97:f1:02:ea:
2a:5e:d5:81:28:0e:4d:1b:f1:9e:f9:65:0f:52:6b:
3d:2f:d5:fe:1f:a8:16:a4:f5:4d:c6:da:34:de:1a:
1c:32:c0:71:ad:57:64:f0:3a:e2:65:e9:ec:58:65:
ad:fa:59:e2:13:25:1d:28:03:3d:84:16:83:0e:f4:
1e:0b:ca:98:7d:f6:df:55:00:3f:90:5e:00:e8:75:
5a:e0:d0:75:61:eb:a1:1d:88:04:1f:16:38:c6:73:
8b:83:20:6f:55:3c:81:b2:8d:60:4e:fb:7d:f1:64:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:16:85:0E:85:69:88:2C:CE:37:16:E1:82:17:C5:80:E2:39:4B:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBCA90AE7D9411F1973EBBF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.131.0-156.251.140.255
Signature Algorithm: sha256WithRSAEncryption
ab:45:3f:76:18:06:da:a8:6e:07:79:9d:ce:f2:bd:2a:25:e1:
e7:92:ec:43:9e:ad:f8:49:40:ec:e3:ba:db:15:f4:34:fc:cb:
9b:c6:a7:c0:a7:57:f3:fe:31:bc:28:b5:37:01:25:2b:eb:ba:
d6:d3:40:14:f6:dd:d9:fc:d0:3a:9c:8a:11:bf:60:8c:e2:15:
3c:61:bb:72:09:4b:52:9c:7f:a2:59:fa:70:ba:b7:a3:94:8f:
df:03:16:32:ba:33:bc:23:14:59:25:2c:5c:bb:39:28:59:4c:
db:96:d7:c8:ba:18:c4:0c:62:75:a8:af:81:08:c4:52:9f:a9:
a2:04:cc:a6:52:e6:c2:d3:6b:c3:12:99:a6:b2:77:03:13:9b:
e3:f3:88:ee:55:f6:85:a9:15:d2:42:08:9d:fe:3c:5e:d3:42:
ba:16:e2:0a:5f:c4:8c:ae:6b:af:4f:95:e8:df:2a:2e:60:64:
0f:97:9a:63:87:cd:55:8d:0b:8e:7c:d0:0c:4b:85:2e:96:db:
95:84:b6:1b:37:08:ae:c5:24:ee:13:9b:03:88:4d:52:39:58:
36:64:43:55:de:64:c8:06:fd:28:b6:59:73:29:04:27:71:b6:
de:40:7d:f8:b2:ea:cf:f8:fd:44:b1:1b:50:ae:94:67:12:3a:
31:9f:c7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:09 2026 by rpki-client