Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FACA28B1F11F190C6F7D9CE1D38B0.roa
File: EE1FACA28B1F11F190C6F7D9CE1D38B0.roa (raw, json)
Hash identifier: BArdwkUOm3EkO1PqVUZ3ULxnEYbxYJumMgDU9gciNPg=
Subject key identifier: 68:A6:DF:B9:A8:0E:34:9D:58:BA:6E:FB:61:8E:FE:CD:DB:44:63:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C875
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FACA28B1F11F190C6F7D9CE1D38B0.roa
Signing time: Wed 29 Jul 2026 07:34:28 +0000
ROA not before: Wed 29 Jul 2026 07:34:24 +0000
ROA not after: Thu 29 Oct 2026 07:34:24 +0000
asID: 37517
IP address blocks: 156.232.56.0/21 maxlen: 24
156.233.144.0/21 maxlen: 24
156.238.40.0/21 maxlen: 24
156.252.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116853 (0x1c875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 29 07:34:24 2026 GMT
Not After : Oct 29 07:34:24 2026 GMT
Subject: CN=6a69ad04-3c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9a:8a:2b:01:b7:68:2d:a7:9d:68:e7:fb:fb:
d0:85:60:77:bf:44:09:0d:bf:ff:fc:15:e1:44:79:
60:fc:60:16:8f:08:92:03:39:fd:95:94:c7:dc:38:
3a:8f:c3:bf:d3:a0:5a:44:19:f3:f0:53:b1:a4:e9:
ee:aa:9b:25:43:86:d3:1e:67:9f:a1:8e:a0:da:71:
e2:1d:83:6d:11:cb:40:81:8e:87:dd:e1:68:33:e3:
cf:a6:45:ee:3f:4a:e4:d4:28:77:7b:d8:9b:69:36:
fe:ad:a4:11:33:f9:f0:70:e2:cb:f1:64:90:8a:1b:
82:44:b1:85:a8:45:7c:43:82:aa:4a:82:51:8a:74:
d2:1f:13:0e:46:4e:55:98:1b:5e:65:30:30:aa:8f:
9f:da:c4:3a:64:6c:31:02:b5:4f:b3:70:fb:4b:c2:
3b:a4:09:c5:ae:0b:84:68:87:60:46:ae:65:4e:a0:
80:f6:7a:b9:53:ec:ad:67:fe:e5:aa:a4:af:59:5b:
d1:bb:e5:26:4a:c8:40:45:92:53:a3:56:ab:00:45:
9a:1a:86:95:9f:53:97:b5:dc:f6:c0:af:76:0a:f4:
61:73:46:b5:75:b4:b4:f4:8b:45:19:f8:5c:0f:cb:
9b:f1:3c:43:23:83:5b:64:1e:58:da:81:3e:91:16:
19:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A6:DF:B9:A8:0E:34:9D:58:BA:6E:FB:61:8E:FE:CD:DB:44:63:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1FACA28B1F11F190C6F7D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.56.0/21
156.233.144.0/21
156.238.40.0/21
156.252.136.0/21
Signature Algorithm: sha256WithRSAEncryption
52:06:b2:d3:63:c7:fb:84:5b:cf:08:a6:37:32:ab:17:11:ab:
12:d4:8e:92:f0:b0:ed:f8:af:f7:b0:58:0c:22:e5:dc:2d:ea:
1a:38:44:17:09:26:a7:ef:98:48:5b:e6:70:6b:c4:c9:2c:46:
48:74:48:2c:be:dd:6e:d1:f0:67:02:d6:cb:81:a9:1b:cb:a2:
30:4d:d4:c0:99:3c:db:e0:00:b5:e1:b9:57:64:9c:8a:06:34:
a1:f5:02:9b:1b:ce:da:df:7d:f4:0b:b2:c5:65:bc:df:f0:e1:
e4:b6:e7:0d:93:59:30:c5:e1:4f:ba:2d:16:02:c9:f3:d2:1c:
07:76:21:91:23:8d:6b:b9:14:fc:85:93:73:48:09:4a:84:44:
06:b7:a9:52:c4:88:c2:d6:71:ba:b8:d1:76:52:ca:aa:c6:d3:
08:a1:e1:44:5f:98:38:fc:0f:81:72:d7:4e:97:54:5f:e6:a2:
e2:c7:3e:25:60:d4:07:a5:b0:d1:3b:0a:9f:fb:23:95:6d:e1:
6c:a4:f9:a7:5f:47:41:be:26:f9:c6:68:25:2e:e4:94:10:b5:
ea:cd:b6:0d:86:2b:32:a4:da:d9:81:8a:8c:ec:4f:5d:b4:d3:
cb:62:c7:9b:09:5d:2d:8f:74:d1:81:9a:f8:aa:d7:6f:55:45:
56:7e:31:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:12:03 2026 by rpki-client