Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15322F8084EB11F1B93B8DF0CE1D38B0.roa
File: 15322F8084EB11F1B93B8DF0CE1D38B0.roa (raw, json)
Hash identifier: T2VE4QlaVxFfdSdqrBZWxAsHYmKg4QumzotkWmuFfOY=
Subject key identifier: 4A:95:DB:A6:CC:FB:91:DC:D4:6C:10:CF:FA:D5:D5:9A:D6:0C:3C:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15322F8084EB11F1B93B8DF0CE1D38B0.roa
Signing time: Tue 21 Jul 2026 10:01:04 +0000
ROA not before: Tue 21 Jul 2026 10:01:00 +0000
ROA not after: Wed 28 Jul 2027 10:01:00 +0000
asID: 135293
IP address blocks: 156.227.2.0/24 maxlen: 24
156.227.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116434 (0x1c6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:01:00 2026 GMT
Not After : Jul 28 10:01:00 2027 GMT
Subject: CN=6a5f435f-b1c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:69:d3:88:0e:a8:01:b0:a8:09:e2:e0:ff:
1c:c4:59:2e:9d:4f:7b:70:9d:da:b9:d9:0d:20:0f:
82:59:08:f8:d2:bb:d0:0c:c5:3c:b0:80:cd:04:63:
c8:cb:5d:03:1a:ca:8c:f3:29:97:8a:b9:d4:60:5f:
4b:48:e1:a8:a5:8b:72:3b:c3:f4:8b:ac:cc:1b:dd:
ff:f3:05:29:12:45:83:89:30:cc:1e:42:c8:95:43:
24:b3:3a:63:af:2f:97:e4:16:b0:b6:01:7f:c5:2e:
86:a8:49:5e:48:e9:a8:ba:f3:e5:25:74:80:a7:3b:
72:49:a7:da:94:78:50:9d:b7:db:0c:a3:11:e7:26:
4e:35:e8:8d:46:fd:15:a2:b8:98:0c:03:a7:53:c4:
18:8f:c2:cd:a0:2c:07:ee:88:ee:76:db:35:d7:67:
47:c5:e0:9e:c3:1a:f4:cc:da:04:d1:89:e7:9e:33:
3f:06:eb:c7:03:ce:ea:a8:f8:5f:e1:f1:7e:10:e2:
91:d0:29:0f:45:5e:7e:03:a4:c2:33:b8:61:62:c5:
5e:43:b5:a4:b0:e6:13:89:46:7c:60:e3:e3:71:b6:
ad:f6:9d:3f:79:15:86:07:89:b7:e8:42:fc:e1:ab:
0f:22:2d:50:1e:22:e1:e3:f8:e9:d4:3e:2d:3c:21:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:DB:A6:CC:FB:91:DC:D4:6C:10:CF:FA:D5:D5:9A:D6:0C:3C:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15322F8084EB11F1B93B8DF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.2.0/23
Signature Algorithm: sha256WithRSAEncryption
36:44:8f:13:63:67:c7:cb:05:39:7b:48:3c:3e:bc:35:a0:2e:
de:c5:b2:73:99:31:23:55:26:cc:58:fa:c0:c8:f8:fb:df:a6:
ca:e4:55:e8:7c:b7:17:6c:c9:1b:69:c4:7a:19:c2:aa:a1:b3:
f1:13:75:ed:63:34:88:0d:af:ae:95:53:0a:74:2a:9d:d9:fe:
c5:b7:d8:cc:68:0e:01:fd:79:c2:84:8d:bc:32:84:b4:79:9a:
97:ea:ee:2b:f9:78:3a:75:85:1c:47:1e:09:fe:ec:52:5d:55:
ba:84:92:cf:09:8a:ac:69:87:46:7b:dd:aa:1e:94:d7:31:99:
c8:b5:fa:0a:53:bc:c4:14:df:f1:39:7f:da:93:5f:21:29:2a:
42:c6:40:80:01:57:a4:39:b3:5e:96:86:89:72:bd:79:c1:15:
6c:5b:39:e5:03:72:02:91:c4:4e:43:f4:e0:c2:3e:48:9b:a0:
5f:41:d4:ca:8f:28:68:62:9a:29:9d:40:00:fd:f6:b3:81:6a:
d5:be:22:f2:00:1d:28:1c:5a:23:fb:7c:1d:62:a4:81:9a:7e:
77:5d:ee:50:2d:d5:b1:05:8f:0e:2d:e2:c1:b8:0f:63:3a:49:
fa:6c:05:d1:1b:8b:c6:1b:27:ed:bf:ce:3c:45:72:5f:59:6e:
6e:9f:db:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:36 2026 by rpki-client