Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC355092779411F1937AB8CFCE1D38B0.roa
File: FC355092779411F1937AB8CFCE1D38B0.roa (raw, json)
Hash identifier: cYmGZXprtKsCYEsGnwUk93hP7e9A2GV0CRU9WoIl3eM=
Subject key identifier: E1:14:DC:0C:24:D1:11:8D:1D:EE:05:A2:80:21:A4:42:F8:72:67:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC355092779411F1937AB8CFCE1D38B0.roa
Signing time: Sat 04 Jul 2026 10:42:00 +0000
ROA not before: Sat 04 Jul 2026 10:41:55 +0000
ROA not after: Mon 10 Aug 2026 10:41:55 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115431 (0x1c2e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 10:41:55 2026 GMT
Not After : Aug 10 10:41:55 2026 GMT
Subject: CN=6a48e378-3589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:a4:af:83:41:cf:04:f0:5b:e1:4b:4e:88:
fb:0a:9d:a1:bb:65:c1:e0:da:63:b0:b0:34:b4:57:
ea:fe:86:14:e3:22:42:dc:5b:a0:97:14:04:d2:31:
e5:96:6a:e1:89:9d:8f:e2:10:16:27:37:7b:9f:08:
2b:55:cd:8f:79:63:52:19:f2:9a:99:0e:86:76:72:
cf:b6:2b:14:67:16:fd:40:bf:c4:34:c3:8b:26:12:
0b:e8:6e:10:7c:bc:57:da:db:30:f6:47:96:3c:34:
e3:ec:1f:00:1a:b6:1d:fd:56:94:b3:04:d8:a5:99:
bf:e2:c4:13:02:6c:8b:60:a7:67:d8:b5:3c:40:b3:
42:87:2e:8d:7f:29:09:c4:80:b0:0f:65:fc:11:04:
79:5e:21:13:bc:da:b5:40:d1:78:ba:a4:04:b9:02:
11:33:57:06:b5:5d:ac:40:87:0d:f8:70:2a:03:97:
09:02:82:79:c7:09:8e:d6:e6:d7:e4:f5:18:c8:ad:
72:94:7d:b9:c2:a5:c2:c2:3f:8f:de:c7:2a:14:ca:
47:48:47:92:a8:32:91:fc:7b:fa:58:f0:ef:a2:0a:
0f:53:88:c3:4e:de:d3:52:81:0a:24:c4:7d:18:a3:
fd:99:35:96:31:60:5e:dc:2c:54:80:02:1a:28:69:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:14:DC:0C:24:D1:11:8D:1D:EE:05:A2:80:21:A4:42:F8:72:67:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC355092779411F1937AB8CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:6c:c3:6c:03:81:ea:14:15:7a:f2:82:1a:e0:76:76:0c:1d:
3c:d8:56:e5:9a:61:b4:5f:a0:43:24:33:55:69:7a:1b:34:06:
99:f9:08:c1:5e:47:1c:4e:21:aa:1b:0d:a7:7a:e4:bb:10:1e:
75:6e:5a:5c:89:23:a5:64:e3:26:6a:1d:55:74:48:88:95:d8:
a1:fc:95:18:17:74:0b:6a:e9:ef:53:aa:26:1b:9c:76:8d:1b:
e5:4e:9e:0e:52:ff:1c:14:e2:09:23:7b:17:5d:e2:c5:49:01:
eb:c5:e3:a7:87:67:cf:4a:b7:86:a9:42:2d:b3:a7:d4:9e:96:
82:71:af:ff:c3:b0:fa:81:84:73:41:54:84:a8:de:06:cc:7a:
1f:1c:11:23:c5:78:94:0c:ed:03:3e:c3:bd:34:17:03:42:45:
8a:09:1b:1f:a2:7c:62:d5:3f:f7:75:5d:3d:00:e6:32:5b:ad:
b5:f5:41:ea:46:2d:b4:75:b6:fe:67:f9:68:03:24:1b:19:25:
f7:49:da:e9:08:3b:00:bd:84:b2:49:57:70:33:3c:fb:86:1d:
0e:5b:d7:92:fd:a1:b4:90:86:97:0e:4e:1e:f2:4f:02:52:da:
cc:48:84:d2:4b:92:ea:0c:e4:0c:38:3d:62:7e:15:62:02:88:
e4:61:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client