Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D5214866E11F1A49504ACCE1D38B0.roa
File: 068D5214866E11F1A49504ACCE1D38B0.roa (raw, json)
Hash identifier: PBIvtOeHShWsp2apIwqSgbcjETklsrkWc3c844MmIlY=
Subject key identifier: E4:4D:19:0D:DC:F9:7F:34:DF:80:7B:84:D7:53:EE:69:93:0E:97:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D5214866E11F1A49504ACCE1D38B0.roa
Signing time: Thu 23 Jul 2026 08:10:54 +0000
ROA not before: Thu 23 Jul 2026 08:10:50 +0000
ROA not after: Sat 12 Sep 2026 08:10:50 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116678 (0x1c7c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 23 08:10:50 2026 GMT
Not After : Sep 12 08:10:50 2026 GMT
Subject: CN=6a61cc8e-f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:7b:bf:1a:57:68:60:7c:50:c1:ff:e9:84:
a3:99:c1:37:1f:63:2a:32:d3:07:fd:c5:3f:4d:c1:
cb:dd:e3:d6:be:9d:8a:d8:24:6e:c5:bb:b3:61:ee:
ba:e5:db:ff:69:e4:18:c4:b3:f8:0c:40:2c:c3:a3:
67:d9:a6:fb:1c:a3:3e:c3:20:7b:79:cd:41:ab:a1:
71:cd:ad:d4:e5:5c:5b:42:f6:0d:bd:fe:fc:64:e4:
00:ea:f2:7d:f1:61:47:19:cc:30:8e:85:6d:2e:f5:
15:98:a4:df:c8:04:33:f7:2c:a1:44:59:f6:fc:a3:
05:4c:01:f2:cb:72:be:86:14:11:0b:95:3b:b2:ba:
66:61:6f:a6:2b:7f:6a:82:97:8b:71:1c:b7:57:10:
4b:19:4a:17:a8:87:fe:a1:ee:7f:f0:84:98:4b:78:
55:59:5e:e2:91:bc:9a:7c:50:a6:19:64:07:98:8c:
36:d1:0e:d6:64:d4:de:a3:4e:12:7a:a8:7a:62:ea:
86:9e:f5:56:a0:47:fc:e3:48:98:c7:b0:cd:d6:4c:
b1:55:ed:f7:f0:c8:c0:37:4a:c8:49:d9:8a:ca:2b:
65:88:5d:8e:97:03:7e:78:83:da:64:57:40:72:d2:
3d:e0:53:d6:0b:29:b6:3d:fb:e8:9b:56:5d:38:3b:
f5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4D:19:0D:DC:F9:7F:34:DF:80:7B:84:D7:53:EE:69:93:0E:97:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/068D5214866E11F1A49504ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b6:4a:db:92:9a:b7:95:37:7d:f3:06:95:d1:70:f6:40:51:
18:4c:04:dc:39:0f:e7:29:55:eb:03:30:a1:7c:62:1e:d9:5e:
d5:e8:11:1f:cc:3a:9f:75:72:9c:f3:48:f6:35:db:b6:f3:79:
76:78:0d:24:cc:ac:07:2e:a1:52:a7:31:c9:ce:fe:c8:50:df:
82:7d:35:c4:f8:40:8b:7e:8c:48:52:df:77:12:d8:5c:52:35:
cd:4c:c9:44:50:f7:e6:84:ef:97:dd:30:aa:97:4a:dd:ab:8b:
aa:10:f0:aa:bd:bf:04:76:b8:54:04:16:61:e8:43:c7:5d:d9:
90:da:79:c4:8c:4c:cb:12:f9:57:6e:91:88:be:1d:11:72:bf:
ab:18:69:8a:56:87:34:a8:8e:f4:13:d4:02:4e:a6:e6:9b:4d:
53:d6:fc:62:1a:3c:06:63:5a:16:a4:6e:14:20:0e:d4:d2:97:
01:ee:0f:5c:ab:40:ff:78:ab:ba:f7:7a:27:b2:ee:c5:a5:4e:
85:c5:72:6d:17:00:ba:cc:0f:0a:09:8f:27:5d:49:53:95:d8:
21:e0:a6:4c:7a:e0:8b:9c:a5:a9:6a:7f:ab:91:fd:4a:9d:06:
89:02:af:e0:df:bf:3b:e8:39:e3:4c:e2:5c:d3:3f:50:f5:fd:
d8:19:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:45 2026 by rpki-client