Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D19EFD2FA8811F08EB8597EDAE4EC9C.roa
File: 6D19EFD2FA8811F08EB8597EDAE4EC9C.roa (raw, json)
Hash identifier: ecIcXGqPrP5MchMMlmXrYmn263/JEV7j2m2q468faLU=
Subject key identifier: 19:1A:25:7A:8F:4E:D9:48:1B:0D:90:B7:3B:F9:7D:3D:1D:0C:CF:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D19EFD2FA8811F08EB8597EDAE4EC9C.roa
Signing time: Mon 26 Jan 2026 07:27:10 +0000
ROA not before: Mon 26 Jan 2026 07:27:06 +0000
ROA not after: Wed 04 Mar 2026 07:27:06 +0000
asID: 401903
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104928 (0x199e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 07:27:06 2026 GMT
Not After : Mar 4 07:27:06 2026 GMT
Subject: CN=6977174e-4a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:41:2d:3f:52:b1:92:8d:ea:73:e8:7c:1e:
7f:92:30:d2:64:a9:06:6e:85:ad:f6:6f:2d:2f:bc:
f1:b3:aa:99:d0:e1:07:03:fa:bf:ba:28:56:48:14:
ec:07:1d:24:f9:4d:0c:d8:ad:28:a5:19:3f:76:67:
37:59:a6:75:be:4d:b2:e2:e9:73:b1:b1:8c:59:86:
30:9b:fd:d6:8d:42:0c:91:fe:05:d4:29:c8:24:77:
5c:a7:c8:b2:dd:b5:31:28:a3:ee:4a:b5:d3:48:cd:
56:4c:7c:5c:7e:d4:2a:e6:01:95:9b:cf:c4:46:fb:
0c:4b:e0:c1:f6:a4:ec:0e:41:2c:91:00:e1:1b:3f:
eb:72:d4:db:59:bf:0d:71:2f:47:2e:04:39:96:0d:
68:0f:a0:2f:f9:e5:6e:51:a9:f8:05:54:4e:77:c5:
0b:b6:81:97:72:c0:0d:cc:07:31:26:36:48:18:c0:
77:80:ee:88:ad:04:cb:f2:ab:90:90:cc:50:dd:83:
a0:8c:4e:87:f6:77:dd:3d:7c:82:13:04:48:9e:f0:
65:b5:b9:07:cb:9b:fa:f8:7a:ec:01:a3:e1:7b:24:
4f:8d:19:c2:99:d7:c3:f4:10:43:ff:c0:24:56:55:
f0:c6:5b:3a:dc:4e:a3:8a:8e:d6:58:7c:28:b2:96:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1A:25:7A:8F:4E:D9:48:1B:0D:90:B7:3B:F9:7D:3D:1D:0C:CF:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D19EFD2FA8811F08EB8597EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
96:62:03:11:d7:80:99:49:34:88:95:af:30:56:98:a7:03:dd:
89:9b:c0:61:c0:37:e7:da:87:a8:e9:8c:73:7a:de:8a:f3:99:
ea:d6:4d:f5:1c:5d:8b:15:27:fe:48:41:c4:76:98:17:75:0c:
2f:41:80:8e:cf:39:9d:a7:ae:d1:44:34:12:df:90:67:55:1c:
26:89:7d:06:23:38:55:99:4f:51:e2:7f:9b:1a:96:ab:84:e9:
42:0f:e4:49:6a:c8:8a:5f:0e:56:05:5b:2f:1b:f8:7b:4b:72:
ca:f4:23:89:0c:5e:d6:6f:17:a2:50:b5:c2:b4:21:56:e9:c7:
a3:99:7f:d7:ba:6e:bd:0c:fa:ff:c2:ce:09:cb:8d:89:7c:a1:
3d:a4:ad:b5:5f:32:e3:38:6b:ab:99:cf:c2:4a:98:63:6c:d5:
7a:55:a0:7f:26:2f:a5:80:51:78:a7:2e:10:6c:97:e5:fe:48:
f6:2d:cf:c2:93:aa:40:e8:3d:79:08:86:82:6d:fa:f1:e1:77:
4c:a2:3e:ec:6d:53:69:c3:0b:89:5d:19:4b:b1:07:81:af:62:
d2:bd:9e:f8:04:e8:d5:44:ad:70:fd:76:94:6b:65:09:43:94:
88:6a:f7:d0:ab:4e:9f:7d:c9:ea:dc:a4:d5:f6:bd:40:47:20:
a2:2c:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:13:57 2026 by rpki-client