Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426F35A850911F1AF0267A7CE1D38B0.roa
File: 6426F35A850911F1AF0267A7CE1D38B0.roa (raw, json)
Hash identifier: GgIHz3hZA3kE4T56gpfnDVMYblyJ1UqFzG/zkCbWWKs=
Subject key identifier: 34:A1:84:A1:5E:13:41:14:EC:4F:28:20:72:54:54:EE:B5:96:0F:93
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C728
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426F35A850911F1AF0267A7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:38:01 +0000
ROA not before: Tue 21 Jul 2026 13:37:57 +0000
ROA not after: Thu 13 Aug 2026 13:37:57 +0000
asID: 17497
IP address blocks: 156.245.176.0/21 maxlen: 24
156.245.176.0/24 maxlen: 24
156.245.177.0/24 maxlen: 24
156.245.178.0/24 maxlen: 24
156.245.179.0/24 maxlen: 24
156.245.180.0/24 maxlen: 24
156.245.181.0/24 maxlen: 24
156.245.182.0/24 maxlen: 24
156.255.48.0/22 maxlen: 24
156.255.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116520 (0x1c728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:37:57 2026 GMT
Not After : Aug 13 13:37:57 2026 GMT
Subject: CN=6a5f7639-bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:71:ff:49:18:3c:15:38:f7:16:bd:40:ce:
4e:f4:94:72:23:00:ee:7f:71:2c:6d:39:2f:94:9b:
18:e4:a1:17:9b:5c:4d:6d:db:50:98:49:52:4f:e6:
5c:97:c7:4b:4d:06:58:47:0d:c4:91:44:d0:c5:16:
37:13:cb:3a:07:f9:79:ad:2c:fd:73:cb:28:6b:5a:
63:6d:f8:2c:ce:7c:c4:7e:82:d7:91:fc:63:ba:1f:
a2:7e:b3:9c:49:34:50:21:27:4b:6f:8d:24:f9:ec:
13:4f:cf:f2:d0:12:9b:1d:32:e4:2a:3e:82:ec:c0:
49:08:68:b2:4d:b7:db:71:2d:ae:86:f4:6d:2e:ed:
2e:61:67:cd:60:f4:3a:c7:55:d6:ad:fa:fd:d3:ce:
10:db:36:31:25:ae:89:c4:38:96:bc:0a:dd:0a:64:
b6:5c:7e:e5:fd:23:fa:8b:b6:ed:c4:6d:51:f9:c1:
d9:69:58:36:93:30:4d:95:68:b1:34:d1:0a:5f:81:
f1:65:6a:ac:90:ec:b8:e0:c0:99:b3:4f:21:af:18:
11:66:f7:2d:64:9e:2f:1c:18:45:5b:86:5b:48:e3:
00:16:64:93:85:82:30:16:db:32:67:c6:3c:a1:e3:
7f:9a:ea:b8:d5:5d:f6:ff:af:a8:e9:7e:47:98:c5:
70:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A1:84:A1:5E:13:41:14:EC:4F:28:20:72:54:54:EE:B5:96:0F:93
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6426F35A850911F1AF0267A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/21
156.255.48.0/21
Signature Algorithm: sha256WithRSAEncryption
85:bd:9a:84:d2:36:2f:21:c8:32:ec:d5:3a:ee:d3:26:90:f9:
08:0f:aa:78:c3:ee:0a:be:82:c5:a0:80:32:06:1d:86:c4:8c:
e6:65:b9:2d:9b:f9:d7:1a:8b:e2:c4:c6:44:09:19:22:c2:da:
39:df:4d:56:05:57:86:30:2f:57:de:69:0a:86:a9:83:a0:b0:
e9:dd:97:74:27:1f:82:c4:52:a7:d7:2c:f9:98:cd:ef:02:42:
5b:38:b8:f8:1c:1c:7c:76:6a:e4:e6:9c:d6:1e:dd:70:6a:cc:
1c:6a:a5:bf:21:a6:26:cd:4c:c4:15:c6:6e:8f:c6:e8:9e:df:
4b:04:fa:f0:32:55:d0:f0:27:47:ed:0b:54:50:c9:a0:56:ad:
df:be:3e:02:4d:95:6d:5d:10:19:68:6e:50:8a:db:35:99:20:
26:25:57:a1:a7:9b:ed:dd:45:cf:fa:67:a5:16:ec:61:ec:6c:
73:0d:20:8d:4f:f4:a2:6d:da:66:46:27:96:a1:51:13:f3:32:
63:d0:56:54:e1:5d:8d:1d:67:b8:3c:38:18:ea:c2:d2:e0:97:
8e:83:40:8b:cf:db:c0:90:b2:72:79:cb:ef:02:a7:11:5f:96:
7f:75:e2:66:e5:d6:0f:3e:8c:1e:66:90:67:88:b7:10:53:e5:
c0:d4:86:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:14 2026 by rpki-client