Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8875D652854711F198EDFE17CF1D38B0.roa
File: 8875D652854711F198EDFE17CF1D38B0.roa (raw, json)
Hash identifier: aa06UCnELUDQ40jdi1rPedZ+Smsk0SJZFF0z+yOXfUE=
Subject key identifier: 90:3B:D7:A9:BE:9B:DA:D1:7A:0C:63:F6:63:4E:18:19:53:8F:1B:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C746
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8875D652854711F198EDFE17CF1D38B0.roa
Signing time: Tue 21 Jul 2026 21:02:51 +0000
ROA not before: Tue 21 Jul 2026 21:02:46 +0000
ROA not after: Sun 16 Aug 2026 21:02:46 +0000
asID: 154321
IP address blocks: 156.226.176.0/22 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116550 (0x1c746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 21:02:46 2026 GMT
Not After : Aug 16 21:02:46 2026 GMT
Subject: CN=6a5fde7b-3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:bd:7d:25:fa:02:80:49:9d:79:19:db:ce:
ae:6b:64:0f:93:35:87:46:96:2e:64:a4:2d:73:07:
0e:40:5c:f0:88:23:79:06:c2:f2:05:a4:38:79:83:
33:29:3a:bf:c1:5a:68:27:4b:9b:19:8a:3d:1f:e6:
d8:f3:50:f0:73:63:38:fd:4e:d4:d5:15:47:da:eb:
d1:b5:71:21:74:7d:25:84:c2:e6:a4:04:1d:fb:9f:
84:9b:fa:e9:90:6a:20:e1:4f:ee:52:df:e8:01:88:
98:07:06:f8:ff:39:ce:d6:24:ad:1f:28:e9:4e:e9:
28:89:3c:4d:09:93:f6:d6:91:13:6a:7f:18:be:5e:
e4:0d:01:3e:7e:f7:ab:7a:ac:13:36:62:47:84:47:
c9:d0:8c:8b:92:e2:e1:92:04:a3:d1:57:eb:82:ac:
1f:d8:bb:cf:c3:d6:ed:1e:b5:de:8e:95:08:f6:56:
98:9f:92:1f:11:ae:d8:5b:46:fd:57:63:39:6c:d7:
3d:0d:e5:d3:24:31:66:0a:1a:be:e2:fe:d1:16:72:
94:50:95:bc:b0:d7:40:07:03:e3:3f:dd:07:e8:2c:
1f:da:e2:96:de:f9:17:c3:e9:86:63:2f:49:f9:a8:
b7:26:56:2a:0e:35:71:47:00:64:20:5f:e9:ea:ca:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:D7:A9:BE:9B:DA:D1:7A:0C:63:F6:63:4E:18:19:53:8F:1B:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8875D652854711F198EDFE17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:00:9f:f7:97:46:14:72:c1:bc:6d:1b:5b:fe:33:a6:12:91:
07:a8:d2:37:5a:47:86:87:5b:eb:49:7b:99:db:c9:b1:67:ac:
3d:0f:db:fe:0b:33:29:d4:b2:4a:85:8c:15:f0:66:3f:26:b4:
45:5a:8a:79:9f:c2:64:72:9d:6d:38:5c:44:4e:d6:d5:5e:34:
28:7f:96:e8:6a:40:43:21:cf:94:85:8c:2b:78:3f:8e:ab:48:
f8:34:07:d0:76:37:1c:ad:9a:99:43:d7:10:c9:9b:23:9c:b8:
7e:d4:98:44:bb:f3:72:e0:73:06:f9:82:c0:17:a4:e3:e9:4e:
e0:f4:78:8f:81:6d:2c:7f:b3:07:fb:2f:6a:4f:47:a9:14:ec:
14:14:81:81:52:9c:90:15:39:59:42:93:fa:fc:bd:f9:33:8d:
74:b8:37:f0:49:c7:a2:a7:bd:cb:12:d5:a3:15:79:02:0a:e0:
f4:2c:55:11:15:b6:7c:96:bf:98:1b:aa:e5:81:d4:53:d1:3a:
2e:71:63:b4:0b:1f:bf:9e:7f:4a:39:21:7f:e9:17:19:14:29:
7e:a0:4e:9d:38:f1:7a:ca:16:a7:b2:04:78:69:b4:7c:5b:ee:
19:54:82:59:2c:40:c4:c7:ab:ce:6f:ea:e5:03:88:cc:55:ff:
ec:13:e6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:41 2026 by rpki-client