Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D0A938873D11F1957C7E1ECF1D38B0.roa
File: 77D0A938873D11F1957C7E1ECF1D38B0.roa (raw, json)
Hash identifier: GiH6dhu2Dg3YG/yh8VYw0Ds8NrquWM6/D8rvU8koZVM=
Subject key identifier: DB:CA:1F:7E:D8:A3:CC:5D:0A:D3:4B:CA:83:51:1E:CC:5E:C1:77:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D0A938873D11F1957C7E1ECF1D38B0.roa
Signing time: Fri 24 Jul 2026 08:55:50 +0000
ROA not before: Fri 24 Jul 2026 08:55:46 +0000
ROA not after: Tue 01 Sep 2026 08:55:46 +0000
asID: 11427
IP address blocks: 156.229.180.0/22 maxlen: 24
156.229.232.0/22 maxlen: 24
156.229.240.0/22 maxlen: 24
156.233.4.0/22 maxlen: 24
156.243.208.0/21 maxlen: 24
156.244.136.0/21 maxlen: 24
156.248.96.0/21 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116718 (0x1c7ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 24 08:55:46 2026 GMT
Not After : Sep 1 08:55:46 2026 GMT
Subject: CN=6a632896-c1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:76:69:5f:fc:83:28:d0:4b:99:25:4c:91:
05:1b:c4:f0:fd:0b:33:bc:d5:98:c7:95:f8:d3:93:
10:45:7f:c1:69:59:34:9c:d1:c7:47:46:cb:c4:de:
27:fb:06:b5:75:3e:39:0b:2f:f2:c7:20:f3:08:97:
2f:52:ca:d2:af:25:81:82:4f:01:e7:14:9c:bf:74:
66:84:dc:04:4d:f4:16:0c:a8:0b:3a:54:71:f9:45:
ca:ba:60:7f:ff:69:0c:54:2c:8f:5a:a4:8c:9a:9f:
e4:7c:c2:2f:52:2e:d1:82:93:c9:eb:5d:7d:ae:c4:
50:da:4d:b6:34:d1:ba:90:55:4c:b5:f6:40:69:e8:
58:68:cf:a8:ff:4a:0a:19:c3:f1:cd:ec:59:28:12:
62:05:9d:76:92:02:b0:84:ab:2b:0e:e3:90:58:a1:
6c:4e:0b:c2:5e:f7:1b:09:ee:6e:a9:47:8a:28:e3:
5c:03:08:06:cc:f7:2e:47:45:fc:cb:b3:0a:06:0b:
9a:58:de:c3:32:09:86:24:94:e5:f5:ca:18:03:c7:
2e:a5:37:e0:c0:68:92:22:71:84:b9:d1:bb:07:2c:
26:d9:63:3b:57:e5:97:83:67:4d:cd:23:76:06:11:
7b:c6:3c:c4:18:5b:df:e9:90:f3:27:2c:12:a5:93:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CA:1F:7E:D8:A3:CC:5D:0A:D3:4B:CA:83:51:1E:CC:5E:C1:77:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D0A938873D11F1957C7E1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.180.0/22
156.229.232.0/22
156.229.240.0/22
156.233.4.0/22
156.243.208.0/21
156.244.136.0/21
156.248.96.0/21
156.249.72.0/21
156.249.88.0/21
156.249.104.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:b7:88:36:f4:a7:c2:fa:25:6b:f4:1c:bc:7d:1c:70:cf:90:
41:c7:f5:66:8c:0f:9b:11:97:b6:83:6e:ab:8b:de:7e:49:79:
1f:4d:87:44:6d:4b:50:49:2b:27:05:f9:ca:9d:c4:88:82:ef:
8c:f5:75:52:76:12:1e:11:75:d1:42:1f:29:36:ab:76:bb:39:
34:53:06:08:6d:1f:6d:5a:63:f3:1a:ce:95:82:57:a5:bc:7b:
0a:5c:95:23:36:cb:40:0c:54:ba:fc:79:64:2d:ab:0b:e7:55:
9a:fe:75:ee:83:0e:65:d6:61:57:1b:fd:6c:8f:cf:eb:54:a2:
12:f8:3c:7e:2c:65:ca:f9:a8:7a:53:b4:57:6d:c4:28:7f:4a:
5e:93:4a:27:86:a1:43:f7:68:77:06:43:65:1b:9c:8b:77:4f:
a2:2c:ce:a4:f8:66:59:3a:8a:d2:ed:59:c6:b8:5b:3a:21:2e:
a5:32:b8:2c:c2:e0:74:fc:31:f2:ab:10:05:f5:3e:a1:f4:f6:
f3:c7:c8:68:7f:1d:61:c8:8f:7e:0f:13:c8:3c:a3:c9:88:f3:
0e:9b:a9:06:81:b4:83:b8:b6:01:bd:cb:55:d4:c3:6f:78:ab:
9d:e5:bb:1c:a8:f9:4b:6a:0f:64:05:f7:43:e6:20:0c:a7:fd:
a5:ba:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:35:05 2026 by rpki-client