Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0E5364348B11F1841FE6CBCE1D38B0.roa
File: 7D0E5364348B11F1841FE6CBCE1D38B0.roa (raw, json)
Hash identifier: B1u1LS7M+waGoG0/m218uLS9C+Jm8gXYw8Iqri6269I=
Subject key identifier: 7A:05:74:0B:67:67:73:44:A9:48:97:3B:74:83:7A:12:42:51:32:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0E5364348B11F1841FE6CBCE1D38B0.roa
Signing time: Fri 10 Apr 2026 03:15:13 +0000
ROA not before: Fri 10 Apr 2026 03:15:08 +0000
ROA not after: Sun 19 Apr 2026 03:15:08 +0000
asID: 9304
IP address blocks: 156.245.136.0/23 maxlen: 24
156.245.152.0/22 maxlen: 24
156.245.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 03:15:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109432 (0x1ab78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 03:15:08 2026 GMT
Not After : Apr 19 03:15:08 2026 GMT
Subject: CN=69d86b41-1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:45:1a:94:c9:32:83:c6:f1:97:ba:9f:7a:d6:
eb:c5:b0:d0:a6:69:7f:02:49:2c:bb:eb:4a:bf:04:
b1:d5:f3:1f:64:44:9c:da:dd:bf:4d:dd:0a:12:99:
96:1a:b9:7d:b7:ce:19:f0:d9:13:28:e0:26:93:5c:
63:91:b2:c6:18:8c:43:48:fc:3b:bc:23:2c:c9:d4:
06:ce:bc:a0:ba:88:fc:f2:0d:af:63:25:65:a3:56:
12:24:fa:5a:0a:45:5c:1c:01:c7:e0:31:e9:ac:dd:
5a:f5:d4:1c:d5:9a:ff:70:ce:3c:be:90:50:8f:65:
a4:e1:31:6a:5f:13:b0:04:57:04:fd:5e:73:2e:37:
7b:62:34:87:d2:ed:8d:aa:f6:32:2e:e5:f2:8c:53:
80:5a:5c:4a:bb:13:01:fe:22:a8:81:3b:cc:6e:b6:
14:79:a2:0b:76:ec:c2:dc:3b:36:04:a4:cd:e4:50:
08:20:94:51:01:cf:a5:7b:25:09:a4:8d:1f:45:08:
77:41:1e:8f:13:7f:de:65:f7:df:c9:1a:14:b5:b0:
dd:f7:70:55:2e:83:86:19:dc:a1:c5:68:9e:ae:42:
35:76:a0:1c:8e:1a:09:16:2c:19:19:a5:63:d4:99:
2e:76:17:2e:56:a0:1c:49:35:6e:30:b3:de:a5:dd:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:05:74:0B:67:67:73:44:A9:48:97:3B:74:83:7A:12:42:51:32:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D0E5364348B11F1841FE6CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.136.0/23
156.245.152.0/21
Signature Algorithm: sha256WithRSAEncryption
56:c7:f2:5e:e5:10:df:a4:da:f8:67:20:4d:75:83:80:a1:71:
0a:06:1f:41:78:39:45:ca:06:33:5c:9a:df:00:6d:56:d2:f2:
d4:54:12:6e:12:26:e5:ed:7d:bb:5d:50:eb:64:65:e4:2c:fb:
e3:77:c5:fa:b0:a3:1e:b1:1c:b6:13:2d:fa:fd:f4:ec:58:b9:
15:a4:eb:8a:03:5b:b4:cc:66:d2:7d:2e:74:95:2d:c2:80:a4:
41:02:b3:8a:d0:12:4b:f4:c4:77:27:42:6a:27:b5:f0:14:f0:
80:dd:c9:2b:5c:b2:db:41:c1:07:2b:42:6b:b6:8d:ec:c5:e8:
8b:0f:47:2a:87:8b:3b:f0:e4:d1:f1:32:f9:8f:fd:f7:b7:3e:
44:01:18:24:ef:dd:ca:8a:37:4b:f1:06:59:d9:6a:64:64:0a:
d5:b0:fe:8a:83:95:12:b5:d4:f0:64:55:98:d0:30:04:a0:41:
45:41:26:34:16:81:46:b8:30:20:1b:5d:1b:6e:91:4b:2d:d8:
10:fb:87:bf:33:67:56:da:32:a9:29:ce:b5:40:e0:46:b0:60:
39:8f:ef:85:4b:82:6b:7f:49:f7:c7:0c:37:60:50:59:51:02:
78:f0:fd:9a:8f:76:7e:f9:45:ae:2b:3f:6a:58:ae:4e:67:a2:
05:7b:59:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:08 2026 by rpki-client