Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE7AD9884EA11F180B5B5EACE1D38B0.roa
File: 5BE7AD9884EA11F180B5B5EACE1D38B0.roa (raw, json)
Hash identifier: x+9MQwhktRywnD+jTd5pMm6s1KR9HK4qzSuqfZ2NaKc=
Subject key identifier: 59:18:26:39:52:19:65:EF:43:26:4E:30:8D:80:A5:BF:F4:79:8A:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE7AD9884EA11F180B5B5EACE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:55:53 +0000
ROA not before: Tue 21 Jul 2026 09:55:49 +0000
ROA not after: Fri 28 Aug 2026 09:55:49 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116430 (0x1c6ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:55:49 2026 GMT
Not After : Aug 28 09:55:49 2026 GMT
Subject: CN=6a5f4229-541f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:8a:94:f1:ba:f3:64:49:94:8b:d6:78:85:
6e:b2:f6:05:a5:e8:36:ff:bb:e7:0e:cf:9e:40:91:
05:cf:b2:8f:a8:28:4d:50:80:0b:f8:d8:c5:b5:4e:
55:c5:c9:ad:04:8b:5a:05:d8:67:9d:77:5d:8b:fd:
28:14:ea:8d:22:89:40:30:f2:21:b0:79:a8:fc:c8:
66:28:21:d3:27:1e:a7:6a:f1:d0:a0:ae:e6:26:41:
ef:09:bc:8f:57:ec:72:a2:4e:53:31:3e:9a:8c:ca:
7c:1a:a6:f1:e1:bf:3b:ce:39:f5:cd:d4:fc:fe:16:
41:cf:df:b8:24:fa:ca:aa:58:3e:c7:27:fb:d2:33:
d6:d3:cd:55:ab:44:6e:e3:20:bd:6b:49:ca:74:42:
89:e7:b6:d8:67:d7:9d:36:44:ea:01:56:cd:92:01:
d4:00:ca:a1:03:f8:8d:ad:56:0b:66:1b:12:c5:94:
c8:c3:c5:45:4b:5c:96:b1:00:a4:b4:8b:eb:4d:bf:
f1:66:1e:14:ee:c0:bf:06:f7:1a:fc:aa:ff:5f:ac:
1c:ef:8b:c1:b9:6b:ee:a6:8e:2c:2d:aa:76:0f:30:
76:3f:a4:50:d7:fd:3f:c2:17:84:1f:fd:77:e9:08:
1c:d1:e5:b8:ea:06:9b:10:83:58:f7:e0:11:d9:5f:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:26:39:52:19:65:EF:43:26:4E:30:8D:80:A5:BF:F4:79:8A:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE7AD9884EA11F180B5B5EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:49:01:73:32:4f:5a:ad:ce:12:b2:e4:8f:7d:45:9f:d7:62:
ec:65:0a:ec:88:8e:e9:31:34:83:a3:ea:72:74:e4:c6:76:71:
70:b9:54:34:d6:d7:cc:a4:a0:77:aa:e4:c3:ef:db:40:5e:44:
3c:89:b0:fa:48:5f:28:98:1c:3d:de:4d:f2:08:11:fa:27:3a:
d3:38:f6:15:cd:b9:50:48:74:35:85:f2:be:8d:4e:eb:bb:ea:
31:53:75:c8:ab:d3:bb:c6:1f:97:1d:b9:70:66:db:b4:b4:75:
5e:ae:17:90:b9:03:7c:4c:7d:b1:0e:69:2f:5a:a1:0c:a0:d9:
ca:f1:c7:81:a8:20:7a:eb:0c:5d:c4:5f:dd:4f:b9:75:a6:c9:
0a:28:a5:28:79:c3:71:da:9f:94:53:a1:5e:5b:52:3c:77:e1:
21:88:60:ef:6c:5d:d1:65:ab:d6:39:52:fe:fa:67:f6:db:59:
4d:94:e8:bb:b4:53:0d:81:b3:82:11:f2:f9:71:5d:c6:f5:27:
5c:9e:d9:f4:b6:5d:e5:e9:0d:47:eb:0a:4f:47:c0:f5:14:ed:
e1:60:a4:db:d8:4c:0f:13:0f:b5:d5:d2:d9:7d:6b:48:40:63:
0c:83:2b:87:7a:2c:f6:20:f3:c3:23:0d:9b:1f:40:d3:df:ed:
06:07:ff:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:51 2026 by rpki-client