Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84C1AC850E11F1B08328C4CE1D38B0.roa
File: 7C84C1AC850E11F1B08328C4CE1D38B0.roa (raw, json)
Hash identifier: izEcl3r2D2aQEhxbs/HHXGX7agnpmd78D9fFSTokjUo=
Subject key identifier: 35:90:FC:F9:3F:54:C6:CF:B4:8C:36:5F:6D:BE:76:19:5A:42:F9:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C73C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84C1AC850E11F1B08328C4CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:14:29 +0000
ROA not before: Tue 21 Jul 2026 14:14:25 +0000
ROA not after: Wed 02 Sep 2026 14:14:25 +0000
asID: 62563
IP address blocks: 156.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116540 (0x1c73c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 14:14:25 2026 GMT
Not After : Sep 2 14:14:25 2026 GMT
Subject: CN=6a5f7ec5-a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:6a:64:c1:05:11:97:d7:d1:59:dd:72:b5:
c1:f6:21:4e:a0:a3:29:38:ac:c3:ab:13:df:86:12:
af:93:b9:80:5b:2a:73:f1:17:71:ba:ba:66:fd:48:
73:6a:02:42:96:6a:81:96:b6:49:98:13:49:61:55:
03:63:f9:49:f9:3a:3d:4b:bd:09:6a:fe:88:c9:a9:
7e:3a:72:20:6f:9f:17:1a:c1:7a:22:2f:19:fa:de:
a9:ba:d3:e1:4f:9b:b0:37:5b:a6:4d:2c:dd:0c:86:
d6:6d:dd:49:fb:03:c2:8c:b8:75:42:af:ad:cc:68:
98:7f:19:7b:86:30:fb:dc:b6:53:57:f9:ab:25:06:
d1:7e:7f:6f:eb:d6:28:ee:4c:b3:50:3c:d7:05:17:
3c:3c:f7:cb:21:7a:77:c5:a1:33:d4:44:bb:b3:58:
25:ce:95:3a:89:f0:f5:52:0b:ae:59:98:94:8d:83:
a8:3c:e0:34:3d:da:e6:db:6f:91:f6:7c:87:d5:79:
10:4f:60:67:fb:39:c4:af:cf:ec:a5:4a:bf:02:52:
3d:bb:15:18:a7:44:25:53:9e:92:1d:d5:52:c5:12:
f4:6d:e0:05:ef:0e:06:da:ab:ec:29:25:e3:46:7a:
ee:2e:0c:09:7c:ca:a6:cf:73:d6:98:69:d5:dc:45:
81:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:FC:F9:3F:54:C6:CF:B4:8C:36:5F:6D:BE:76:19:5A:42:F9:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C84C1AC850E11F1B08328C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a3:7f:0f:f4:fb:da:70:07:c5:82:ac:62:fd:fd:dc:25:f2:
76:21:86:71:93:10:a9:7e:f2:5e:2a:6f:a0:33:cc:f4:54:da:
dd:77:27:0a:26:98:7c:32:c1:e6:c9:d2:22:a8:b1:04:17:d7:
0a:81:69:2c:ad:1e:f8:27:84:5e:d7:ca:63:9a:8a:48:57:08:
f0:b7:1b:05:6d:3b:a2:84:b3:c5:1d:e1:ab:72:33:eb:54:31:
3c:2f:a2:b6:2d:66:0f:3d:d5:c1:c5:79:66:b4:e5:85:39:ae:
73:c4:3d:d2:b0:69:28:c2:86:41:f2:5c:5c:25:e9:03:d2:a9:
e1:f0:3a:ec:58:9a:ef:28:b6:19:84:95:10:5d:9d:7c:ae:a4:
2b:73:9a:37:30:5a:9b:3a:d5:45:5b:61:ff:bf:8e:ba:2c:59:
3f:ec:c1:06:8f:52:04:95:55:76:ca:e9:b4:d4:2c:db:72:27:
8b:c6:e9:2f:8e:4d:8c:bc:69:c8:80:09:92:45:9f:dc:1d:99:
ac:61:65:f5:63:89:4e:a0:5f:c9:25:a8:09:ce:08:5a:f6:6a:
02:c8:24:07:6f:c4:16:f3:e7:a6:67:3f:ba:c4:f5:a0:8a:39:
48:0e:ab:23:bf:e3:e3:16:c6:7e:b6:c8:7d:2d:85:3f:fc:d9:
72:68:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:19:52 2026 by rpki-client