Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511ED7DA850B11F19A41A6B3CE1D38B0.roa
File: 511ED7DA850B11F19A41A6B3CE1D38B0.roa (raw, json)
Hash identifier: NrOVTPQfVx5lHw9r1bpIiWko9nGkDPa5XemU6p6KLiI=
Subject key identifier: 78:20:4E:10:50:4B:CA:D0:E0:3C:39:2D:57:FB:B8:C9:AE:E9:F5:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C72C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511ED7DA850B11F19A41A6B3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:51:48 +0000
ROA not before: Tue 21 Jul 2026 13:51:44 +0000
ROA not after: Mon 07 Sep 2026 13:51:44 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
156.249.128.0/22 maxlen: 24
156.249.189.0/24 maxlen: 24
156.249.194.0/24 maxlen: 24
156.249.195.0/24 maxlen: 24
156.249.200.0/24 maxlen: 24
156.249.201.0/24 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116524 (0x1c72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:51:44 2026 GMT
Not After : Sep 7 13:51:44 2026 GMT
Subject: CN=6a5f7974-42dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:b9:1b:b8:cd:7f:60:3d:c9:e0:f9:2e:3f:
95:39:8c:fb:b9:8a:be:81:09:6b:1a:a1:30:35:db:
30:e6:27:e1:62:31:60:93:ac:49:fd:41:34:dc:28:
4d:ce:4c:e8:d1:33:95:96:42:62:a1:66:94:54:81:
5c:b2:86:cb:02:67:5a:c2:7f:99:32:2e:64:b3:d0:
b0:0d:e3:01:0c:40:3a:c8:13:53:e7:5e:83:5c:aa:
23:48:0f:ba:dd:3e:a4:15:b6:b5:5e:c1:11:68:06:
74:4d:2b:20:c4:cb:4e:f6:e3:cc:6a:5f:50:f7:29:
0d:cb:03:b7:65:81:4f:27:59:50:05:be:d5:f0:b6:
ee:15:06:30:03:48:df:14:87:48:d3:d4:68:ba:52:
ce:47:c1:1b:4e:ff:38:60:c7:c8:2b:6e:42:84:4a:
79:97:14:98:d7:bd:ae:c8:42:2e:8c:da:81:3a:12:
17:ec:a5:77:3f:83:2d:82:7e:1e:b5:22:70:0d:2b:
3a:45:70:71:d7:7a:55:f3:ff:fb:98:f3:b7:4b:c5:
25:1a:19:85:41:21:ce:41:56:8c:0b:fc:1c:6b:82:
fe:53:44:4e:f0:3a:4f:db:d8:3f:38:63:ba:bb:54:
de:f4:ed:e3:01:51:7b:3f:89:84:fe:ba:f2:2b:93:
b6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:20:4E:10:50:4B:CA:D0:E0:3C:39:2D:57:FB:B8:C9:AE:E9:F5:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/511ED7DA850B11F19A41A6B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
156.249.128.0/22
156.249.189.0/24
156.249.194.0/23
156.249.200.0/23
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
77:b2:af:9f:2c:e0:d7:ac:36:01:c7:81:87:61:21:05:9e:7d:
1b:20:de:da:31:f1:1b:a2:21:70:bd:1d:e5:ad:e5:4a:97:ee:
16:73:fb:c4:d2:87:e3:fe:3c:07:42:54:0f:9c:f2:23:a5:f8:
dc:f5:45:b0:1c:88:c6:1f:90:6c:e2:3a:e0:e2:8a:23:4c:d0:
bb:39:f4:4c:5c:16:44:09:b1:e3:6d:86:9f:be:07:c1:db:96:
c8:b2:1d:70:a7:ae:82:f1:58:c1:d0:0a:32:6c:6b:d3:de:2e:
ee:39:2c:a6:55:fc:26:c8:9c:9c:f5:93:d0:9f:e3:48:a2:87:
2e:b5:2b:09:5f:08:c1:08:dd:f1:82:fa:a1:d0:5f:8f:38:f4:
bd:db:08:66:91:4c:ca:77:8f:0c:9e:a0:e0:73:8e:7d:ad:6a:
d6:3e:94:04:cc:74:f2:09:72:42:29:7d:b7:34:ec:14:52:0d:
8a:08:0e:9a:85:cd:c2:aa:56:cf:bf:7a:1c:e9:47:9a:75:c9:
a8:8f:53:89:86:b4:d0:d3:77:a7:74:77:00:1a:3b:94:8b:4c:
47:ee:d4:f3:ca:66:4d:64:98:79:aa:b4:40:31:28:b5:2b:5f:
b0:ff:f2:ef:dd:54:75:90:75:32:66:05:8c:c3:38:07:f7:f2:
c4:ee:f6:6a
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgIDAccsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIxMTM1MTQ0WhcNMjYwOTA3MTM1MTQ0WjAYMRYw
FAYDVQQDEw02YTVmNzk3NC00MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7d65G7jNf2A9yeD5Lj+VOYz7uYq+gQlrGqEwNdsw5ifhYjFgk6xJ/UE0
3ChNzkzo0TOVlkJioWaUVIFcsobLAmdawn+ZMi5ks9CwDeMBDEA6yBNT516DXKoj
SA+63T6kFba1XsERaAZ0TSsgxMtO9uPMal9Q9ykNywO3ZYFPJ1lQBb7V8LbuFQYw
A0jfFIdI09RoulLOR8EbTv84YMfIK25ChEp5lxSY172uyEIujNqBOhIX7KV3P4Mt
gn4etSJwDSs6RXBx13pV8//7mPO3S8UlGhmFQSHOQVaMC/wca4L+U0RO8DpP29g/
OGO6u1Te9O3jAVF7P4mE/rryK5O2HwIDAQABo4IDBzCCAwMwHQYDVR0OBBYEFHgg
ThBQS8rQ4Dw5LVf7uMmu6fVBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MTFFRDdEQTg1MEIxMUYxOUE0MUE2QjNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIGDBggrBgEFBQcBBwEB/wR0MHIwcAQCAAEwagMEApzmEAMEApzmNAMEAZzmhgME
AZzoAgMEA5zoMAMEApz5gAMEAJz5vQMEAZz5wgMEAZz5yAMEApz5zDAMAwQCnPnU
AwQFnPnAMAwDBAKc+fQDBAKc+fgDBAGc/AYDBACc/AoDBAGc/BAwDQYJKoZIhvcN
AQELBQADggEBAHeyr58s4NesNgHHgYdhIQWefRsg3tox8RuiIXC9HeWt5UqX7hZz
+8TSh+P+PAdCVA+c8iOl+Nz1RbAciMYfkGziOuDiiiNM0Ls59ExcFkQJseNthp++
B8HblsiyHXCnroLxWMHQCjJsa9PeLu45LKZV/CbInJz1k9Cf40iihy61KwlfCMEI
3fGC+qHQX4849L3bCGaRTMp3jwyeoOBzjn2tatY+lATMdPIJckIpfbc07BRSDYoI
DpqFzcKqVs+/ehzpR5p1yaiPU4mGtNDTd6d0dwAaO5SLTEfu1PPKZk1kmHmqtEAx
KLUrX7D/8u/dVHWQdTJmBYzDOAf38sTu9mo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:04 2026 by rpki-client