Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A7404E4CE311F197D470DDCE1D38B0.roa
File: 06A7404E4CE311F197D470DDCE1D38B0.roa (raw, json)
Hash identifier: W9SDxCLq2t7+FxcKlXnl7C4b4TghdpUcTazPQIWt9Pw=
Subject key identifier: 21:E6:84:15:17:5E:F9:B9:78:05:3D:D9:AF:6E:44:99:F7:64:00:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B397
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A7404E4CE311F197D470DDCE1D38B0.roa
Signing time: Mon 11 May 2026 02:42:18 +0000
ROA not before: Mon 11 May 2026 02:42:13 +0000
ROA not after: Thu 21 May 2026 02:42:13 +0000
asID: 17497
IP address blocks: 156.245.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111511 (0x1b397)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 02:42:13 2026 GMT
Not After : May 21 02:42:13 2026 GMT
Subject: CN=6a01420a-ae8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:e0:9d:8c:4d:22:6b:c3:a7:0a:3c:e8:2c:
03:d3:8f:d0:b6:6b:b7:9d:0b:47:bb:2e:cb:39:b5:
93:4d:6e:1c:e8:47:ae:12:1a:a0:7d:05:88:c3:55:
00:40:b8:ee:5a:c8:99:53:d3:9e:d6:55:27:d1:52:
1f:55:3d:47:fc:c3:69:32:fc:af:99:e8:3e:ca:89:
6d:79:16:6a:7e:9b:9e:98:0a:b1:92:e1:ed:2d:51:
a0:2d:20:e9:15:90:3c:63:e1:5e:09:aa:42:19:b9:
b8:49:f6:03:26:99:12:d1:a3:c1:70:4e:68:7f:16:
6c:1c:bf:d7:ea:80:ef:24:57:fc:be:be:45:1f:bb:
41:3f:99:86:4b:14:1e:fb:35:31:46:4a:08:15:5b:
bf:4a:5d:d8:ac:87:1c:58:ad:9f:2c:ef:02:a6:85:
d6:1e:08:32:55:6d:b7:3e:5c:21:76:85:30:47:92:
00:5a:95:63:43:5e:54:6b:79:50:5c:71:64:43:40:
e1:17:59:b3:35:99:67:5c:21:c6:c7:c9:a5:01:a4:
60:4a:98:5c:4a:a2:c5:d9:48:98:b3:81:06:5f:80:
8d:4b:35:85:eb:6e:03:f7:37:9c:37:10:7e:02:dc:
87:06:7f:71:34:50:1e:07:23:35:69:2a:63:0f:99:
9c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E6:84:15:17:5E:F9:B9:78:05:3D:D9:AF:6E:44:99:F7:64:00:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A7404E4CE311F197D470DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/24
Signature Algorithm: sha256WithRSAEncryption
48:8e:28:63:d8:c9:6a:ad:54:fa:96:ab:ff:da:41:5c:c5:8b:
fe:3b:95:a8:d9:0c:4b:3e:b6:57:12:07:1c:46:79:15:fc:7d:
4f:23:38:78:ee:8c:8a:46:0c:ae:24:20:cc:a4:5e:6d:80:2c:
7f:bb:9b:02:b2:de:85:e2:3b:6b:f7:c3:bc:30:c6:4b:8f:a1:
41:e0:56:a6:6c:ed:d2:8d:be:a4:05:14:62:c8:bf:d6:98:26:
ff:44:34:cf:0d:9b:44:ff:6a:54:a4:61:09:0f:87:bf:ca:88:
5b:9f:7c:6d:15:b3:7c:d7:ed:3a:01:e4:bd:aa:38:d2:4c:08:
d5:6a:b1:d8:27:c6:4a:e6:ad:e8:21:4c:bb:93:ba:05:7f:c0:
7e:e0:06:a9:98:40:b6:87:dc:52:31:7a:8b:d9:39:cb:e6:28:
f9:59:4f:64:73:09:22:51:31:b8:f4:fc:ec:14:16:db:63:f3:
3b:c1:bd:fa:c8:23:94:9f:4f:10:82:8c:56:a3:0f:dc:aa:25:
39:55:b9:7a:ff:35:f0:05:17:cb:04:c1:35:cc:0b:5a:db:3c:
1b:ad:5e:bc:52:5e:e7:92:f1:6d:5a:e9:bd:7c:d7:c7:d5:6c:
63:ad:2d:3b:e6:b8:c2:f0:f0:e8:e2:f0:31:12:78:e1:c8:8c:
17:a3:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:56:43 2026 by rpki-client