Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6E0AAE6A2811F1A06B45F1CE1D38B0.roa
File: FD6E0AAE6A2811F1A06B45F1CE1D38B0.roa (raw, json)
Hash identifier: P7AP0tnucTcgO4yIzKxveJ5YTz74MpQn3uggnhyNIKQ=
Subject key identifier: 7B:D1:E5:41:50:85:C6:F1:C0:4E:25:F9:20:65:2C:CD:3F:4B:AF:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6E0AAE6A2811F1A06B45F1CE1D38B0.roa
Signing time: Wed 17 Jun 2026 08:46:11 +0000
ROA not before: Wed 17 Jun 2026 08:46:06 +0000
ROA not after: Thu 16 Jul 2026 08:46:06 +0000
asID: 137443
IP address blocks: 156.255.2.0/23 maxlen: 24
156.255.2.0/24 maxlen: 24
156.255.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114300 (0x1be7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 08:46:06 2026 GMT
Not After : Jul 16 08:46:06 2026 GMT
Subject: CN=6a325ed3-a4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:54:33:d7:5c:ad:2f:0e:ab:25:10:26:66:4a:
42:7c:aa:7f:50:6f:c6:12:cf:05:98:91:04:35:14:
31:5c:b2:12:25:ab:01:a5:c6:51:09:c3:d1:0d:ca:
a3:c6:7c:4d:87:99:23:52:67:c8:c4:87:bb:d9:65:
08:36:f5:89:3e:aa:a4:37:f2:31:47:c7:05:de:1e:
2c:27:95:3d:31:45:c6:34:9b:1d:4d:f6:c6:b7:fb:
19:e5:80:05:47:78:e1:5f:46:54:1e:f7:ee:af:6d:
e8:84:8e:77:c3:61:53:37:2a:49:83:1a:5d:eb:16:
db:3b:43:2d:0f:67:f0:fa:06:de:38:75:52:85:56:
ca:13:79:09:54:e4:99:3c:1a:15:b1:78:6f:88:18:
54:bc:ef:e1:dc:7d:7c:52:e1:67:7c:2a:d8:83:13:
52:e0:15:46:7b:64:4e:1d:39:9b:da:d0:88:1b:c6:
b3:2c:26:71:17:f8:2c:09:24:36:78:9d:91:1a:32:
16:5a:bd:5e:e1:2d:a5:62:20:09:df:62:3d:3e:c9:
03:f9:f3:60:5e:d9:74:12:6e:9a:ae:bd:ea:ce:85:
b5:07:1c:d3:6e:1f:a0:f8:19:a9:94:58:97:19:55:
e9:4b:89:47:cc:9c:ed:23:f4:c9:d8:fc:14:72:6c:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D1:E5:41:50:85:C6:F1:C0:4E:25:F9:20:65:2C:CD:3F:4B:AF:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD6E0AAE6A2811F1A06B45F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.2.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ed:80:8c:d4:13:72:1f:82:2e:42:47:ad:67:71:01:52:f0:
b1:e6:86:3f:24:5c:2d:5c:f8:7e:6d:b2:ea:e5:04:15:3f:90:
8d:6c:d0:90:bd:cd:ae:18:4d:19:be:f3:7e:c9:2d:95:3d:7b:
b6:5b:28:02:7c:f1:17:f9:81:3b:ce:f5:bb:9e:ed:08:36:e4:
04:24:8f:98:54:4a:b4:96:8e:c1:4f:90:24:16:f2:42:c9:98:
3b:a1:4a:14:c8:88:e3:dc:4b:0f:17:72:ef:eb:a1:e3:68:b5:
75:85:21:4c:4c:45:00:e6:77:f9:90:ef:44:b7:48:93:b7:dc:
01:b9:01:fa:e1:00:88:78:6c:77:60:a4:ca:0b:d3:76:a2:0c:
62:97:44:e4:90:94:c2:5a:c4:66:fc:4b:c5:52:55:f4:97:df:
85:1f:c0:80:77:b7:1a:58:73:41:c7:22:2a:99:1c:45:b0:9b:
76:9a:08:44:f4:fe:34:ae:59:b7:2e:aa:2d:71:f8:69:2b:7f:
d0:a2:56:b7:72:1b:76:16:3f:11:10:53:12:f9:95:c3:9f:f5:
16:e7:45:bd:38:94:0b:a6:2d:6e:13:4a:f0:7a:9f:80:97:82:
3d:b1:f0:0e:2e:8c:76:d8:7f:25:fb:c5:b6:31:d8:4b:59:e7:
ee:3d:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:14 2026 by rpki-client