Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622A464884FE11F19A8B8FE3CE1D38B0.roa
File: 622A464884FE11F19A8B8FE3CE1D38B0.roa (raw, json)
Hash identifier: J4Mps3xySTC7g3zukmLsqWo9k45A6Bh+NiO3z3ufVQw=
Subject key identifier: 92:03:80:58:91:88:A5:85:71:AF:18:C4:1E:C5:A2:1D:6D:C9:C9:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C712
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622A464884FE11F19A8B8FE3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:19:13 +0000
ROA not before: Tue 21 Jul 2026 12:19:09 +0000
ROA not after: Mon 17 Aug 2026 12:19:09 +0000
asID: 153671
IP address blocks: 156.231.70.0/23 maxlen: 24
156.231.88.0/22 maxlen: 24
156.231.92.0/22 maxlen: 24
156.238.12.0/23 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.60.0/22 maxlen: 24
156.242.64.0/23 maxlen: 24
156.242.100.0/22 maxlen: 24
156.242.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116498 (0x1c712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 12:19:09 2026 GMT
Not After : Aug 17 12:19:09 2026 GMT
Subject: CN=6a5f63c1-fa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:fb:30:b9:a0:55:37:02:b3:de:d3:41:dd:
7f:c4:c0:5c:61:b9:a0:42:ef:83:18:9a:a4:ea:db:
71:3e:8f:a5:d8:89:df:6c:9e:53:e0:39:e4:cd:67:
73:29:6e:f1:8e:54:7f:7c:f1:fa:29:2d:61:e7:08:
f6:ff:bf:81:53:d3:87:c4:21:f6:d5:6c:65:f9:b9:
72:bc:79:10:3a:77:d8:f9:0f:2d:f9:50:96:86:b5:
34:07:0b:30:c5:a4:a5:35:0c:e5:04:c0:60:48:2e:
50:b7:e3:1a:9b:3e:23:71:50:ef:91:1f:29:fe:36:
f3:57:b0:8d:62:6b:c1:7c:50:7e:cd:3c:fd:11:89:
28:cc:36:15:45:a7:43:81:9f:b4:ce:fb:07:c0:17:
c7:cb:7a:32:9c:2b:10:99:e6:10:c0:71:df:6b:ab:
88:9a:65:86:24:91:0c:fc:b0:8b:2c:ca:23:33:94:
a3:8a:f2:4a:df:90:f8:8e:2c:1e:fa:75:31:ab:5a:
11:33:f2:9a:17:fc:83:4d:ee:e8:0e:1f:f5:37:21:
63:79:94:df:6b:71:59:19:29:5d:ae:a8:ab:5e:00:
bd:f5:b0:58:26:e3:93:ce:ea:f2:4b:0d:da:12:fe:
7f:f5:93:46:f8:c7:3b:7a:7c:e5:e9:c5:33:bf:a2:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:03:80:58:91:88:A5:85:71:AF:18:C4:1E:C5:A2:1D:6D:C9:C9:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622A464884FE11F19A8B8FE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.70.0/23
156.231.88.0/21
156.238.12.0/23
156.238.28.0/22
156.238.60.0/22
156.242.64.0/23
156.242.100.0-156.242.107.255
Signature Algorithm: sha256WithRSAEncryption
95:51:57:c0:c3:ec:89:9a:ba:eb:8c:3d:fb:eb:89:7b:24:0c:
57:c3:ca:8a:41:0b:8a:52:28:30:26:af:9e:09:56:79:7a:1f:
36:92:6d:14:cf:4a:a5:fc:db:c4:d8:aa:34:f6:cb:4a:42:08:
1c:7f:91:fa:f7:0f:07:ed:a7:81:33:e2:de:d7:29:57:da:4b:
a1:8b:1a:de:e9:ea:da:79:93:b5:ab:71:00:80:e2:48:94:4c:
4b:70:15:b6:9a:c2:98:1e:3b:e1:82:e3:14:33:a3:e4:0d:d4:
87:9d:26:68:38:b8:6d:33:f6:71:16:f2:be:49:7c:fe:43:67:
04:32:ba:e5:7f:f4:4e:f7:c7:75:05:14:ff:7b:7e:41:4a:43:
f9:f4:bb:ec:8d:b8:29:67:8d:62:2e:cc:84:31:0d:47:97:38:
90:e6:88:36:b3:6b:77:56:f5:4a:21:92:89:2c:01:59:b6:71:
45:b7:f5:90:7a:8b:e8:5b:ed:7f:e5:86:cc:b5:9e:78:65:d9:
1a:52:ad:cd:92:d3:cc:e2:45:25:31:b0:eb:90:6d:13:13:30:
a4:f1:58:15:d7:6b:e8:99:af:2c:10:6b:e5:84:49:f5:7f:b0:
de:89:17:35:e2:0a:e2:8e:59:1f:9c:8c:77:04:28:65:46:de:
17:a9:de:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:47 2026 by rpki-client