Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8776569A4A5B11F1817A86F8CE1D38B0.roa
File: 8776569A4A5B11F1817A86F8CE1D38B0.roa (raw, json)
Hash identifier: QoVNkUgpKiior3ICQA15MEqfV1Tgdde3NkuZePZiw34=
Subject key identifier: 7C:2D:93:AC:7A:8C:08:C8:53:56:EA:6D:3E:AD:9F:BE:3A:4E:FD:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B276
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8776569A4A5B11F1817A86F8CE1D38B0.roa
Signing time: Thu 07 May 2026 21:27:20 +0000
ROA not before: Thu 07 May 2026 21:27:15 +0000
ROA not after: Mon 08 Jun 2026 21:27:15 +0000
asID: 274065
IP address blocks: 156.238.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111222 (0x1b276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 21:27:15 2026 GMT
Not After : Jun 8 21:27:15 2026 GMT
Subject: CN=69fd03b8-5d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:ba:75:49:b8:59:8b:7c:20:dd:3d:43:df:
0d:61:5b:92:d4:2f:3e:a2:bb:b1:a6:96:3b:dc:88:
20:1d:89:cd:1f:3a:f2:ea:91:00:fd:59:24:e5:2b:
59:4c:84:cc:17:4f:03:31:4f:35:60:fe:e2:33:2b:
be:18:ee:a7:5c:52:51:39:7e:80:09:22:83:76:27:
c7:0b:27:30:ac:17:b0:a5:a3:c9:08:f9:07:ee:68:
ab:84:53:61:46:33:4e:9d:98:81:7b:95:b2:2f:4d:
0c:51:55:8e:b1:05:0b:ca:f7:af:48:2e:34:c3:7d:
f8:9c:fe:ee:33:a5:9f:5d:10:28:7e:72:ca:99:c1:
57:c8:08:cc:77:d8:e8:72:61:19:d3:5f:b0:3a:7b:
a2:68:dc:45:cd:3d:a8:67:69:48:8f:1c:56:b2:ea:
4c:c0:3c:70:24:a1:f2:43:f1:bd:cf:0a:e0:ff:6d:
03:e2:65:83:3c:9a:47:d2:b1:c7:c1:04:8e:af:b9:
6b:5d:ab:ca:ea:b4:f1:57:73:42:7c:7c:36:01:9b:
4e:75:4d:2e:61:27:05:dc:df:3b:fc:1f:3d:22:eb:
3b:52:d7:3a:75:91:3c:0a:04:b1:a7:de:61:53:2f:
5d:ce:f8:52:7e:b9:0a:a0:a4:58:6e:d1:47:ab:77:
12:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:2D:93:AC:7A:8C:08:C8:53:56:EA:6D:3E:AD:9F:BE:3A:4E:FD:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8776569A4A5B11F1817A86F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.81.0/24
Signature Algorithm: sha256WithRSAEncryption
42:0a:7d:04:b4:dc:e8:5a:0c:cd:61:df:17:59:a9:9d:b4:7b:
f4:d9:70:5a:ff:60:78:6e:bb:7d:09:b5:1a:c6:98:c0:70:0c:
46:14:22:c5:83:6e:4d:2c:d2:6e:3c:c0:66:71:92:3c:67:9b:
33:30:42:d9:bc:ce:79:d7:0e:29:e3:17:b2:a2:b7:b9:2f:f1:
11:d8:d2:6d:7c:2b:bb:02:07:b5:e7:f6:78:73:69:a4:00:01:
09:61:fa:96:80:84:06:35:6c:5d:e1:8e:f8:73:3c:00:a8:b4:
5f:48:14:c0:1e:3a:90:59:42:f3:13:e9:26:57:c4:fb:51:8b:
be:52:f6:4b:42:34:b0:c4:b8:ee:6a:a7:b8:98:82:9a:95:da:
ca:1c:3e:28:6d:9a:22:f0:1d:69:f9:60:75:e9:9e:a3:08:ea:
83:24:cc:02:a1:c1:74:80:a7:23:13:56:18:a3:f2:00:70:cb:
25:62:6c:cd:6b:62:73:8a:6a:10:a6:24:b5:82:5a:bd:4d:a7:
b4:cc:90:7c:87:40:a6:cc:3c:da:b0:cd:b9:ce:4a:21:f2:a0:
76:3a:91:b8:28:83:be:9c:fa:84:90:bb:74:47:3a:a1:93:1c:
6e:29:23:27:57:bd:bd:b2:18:0f:4e:a0:7e:b8:b7:d5:e2:18:
9d:7a:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:03 2026 by rpki-client