Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC71E633C11F19E8C5FD8CE1D38B0.roa
File: 091AC71E633C11F19E8C5FD8CE1D38B0.roa (raw, json)
Hash identifier: Co3t76WvWKOVWMYBgbA4sCzJ0DPibgWdrzHsW6gUhvQ=
Subject key identifier: 30:AA:4A:FE:5A:40:61:B0:C1:A6:42:F7:92:EE:67:37:EA:E1:93:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC71E633C11F19E8C5FD8CE1D38B0.roa
Signing time: Mon 08 Jun 2026 13:14:53 +0000
ROA not before: Mon 08 Jun 2026 13:14:48 +0000
ROA not after: Thu 08 Jul 2027 13:14:48 +0000
asID: 328608
IP address blocks: 156.225.6.0/24 maxlen: 24
156.225.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113766 (0x1bc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 13:14:48 2026 GMT
Not After : Jul 8 13:14:48 2027 GMT
Subject: CN=6a26c04d-3017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:bb:0c:3d:a1:3a:32:47:a3:07:03:83:91:
ae:e0:c0:94:68:ff:00:6a:b8:4b:b4:f3:5e:f1:54:
bf:69:6b:0f:8e:fe:67:cf:8b:d9:ef:f0:52:cd:90:
fd:f0:09:a2:8c:8a:0b:f9:1e:d7:1c:91:02:7e:fb:
b4:db:71:7b:89:ff:7c:62:cc:ff:c0:64:c7:92:fc:
5e:7e:08:b4:32:5d:48:c9:3c:13:05:74:0e:ee:a5:
4e:6d:86:ae:3a:8e:91:f4:df:1f:42:27:70:03:34:
67:f6:f2:51:c5:20:c3:28:c9:be:25:75:ee:3c:c4:
b3:85:f0:f3:00:64:86:f2:34:3e:b0:da:85:af:c9:
97:a3:a9:15:05:04:0a:85:66:52:1a:66:98:26:36:
07:f5:3b:1f:2d:e8:4d:2b:db:d0:2d:9a:5d:5d:cb:
32:00:0e:95:14:fb:58:fb:76:63:a7:df:77:6b:1c:
f1:b4:4f:e8:2c:61:cb:b8:2f:b7:e4:46:59:05:49:
1b:56:ef:19:2f:d8:82:55:4c:39:0e:75:4e:04:b9:
7f:f4:bc:15:fa:0f:ec:26:6d:6f:c0:bc:16:1f:38:
0d:3e:ac:6b:1e:de:0b:38:8a:86:21:e2:9e:3f:d2:
42:70:29:6a:35:3d:bc:35:fe:b1:18:cc:a4:11:1e:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:4A:FE:5A:40:61:B0:C1:A6:42:F7:92:EE:67:37:EA:E1:93:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091AC71E633C11F19E8C5FD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.6.0/24
156.225.32.0/24
Signature Algorithm: sha256WithRSAEncryption
40:65:3e:0f:31:bb:4d:b9:b7:e7:65:a9:d8:f9:2f:12:e9:c6:
c7:e2:98:85:17:06:0e:3a:48:4e:47:7c:32:6a:20:1b:d7:d9:
dc:c6:bd:26:8b:20:8e:48:89:37:56:51:be:5e:fe:83:dd:c2:
5f:77:58:93:69:03:a4:79:0a:bb:2c:5d:85:b9:cc:66:03:f8:
d6:15:30:f5:f2:b5:ea:1f:49:04:e8:77:78:80:a0:5a:08:db:
f4:b5:09:b7:e4:e3:66:67:47:de:68:bc:62:06:7a:3a:31:e9:
4f:d9:f6:99:24:8e:a9:4d:fc:bb:24:d3:5f:fc:c8:37:f4:b2:
98:24:63:09:d7:ec:4f:1d:25:d4:47:5b:86:b8:97:df:b4:4f:
06:3a:8b:5e:1d:b7:fb:46:97:1a:aa:14:25:c3:83:39:71:42:
29:25:c3:3e:c5:c1:83:78:99:4c:4d:a5:27:92:0a:00:7f:5a:
94:b7:c0:aa:b2:53:08:68:6f:6d:c5:20:42:13:3a:47:e3:3f:
c8:c7:21:80:8e:bf:d0:5a:a9:44:25:75:1f:60:88:d8:3e:e9:
1f:8a:d1:07:4a:70:70:84:eb:84:19:90:ee:ae:ae:e7:e8:e6:
d5:b1:3e:73:1e:a7:68:20:8f:07:74:56:87:6e:a2:ea:f2:f6:
77:7b:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:45 2026 by rpki-client