Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943187A0830F11F1AE5EBB0DCF1D38B0.roa
File: 943187A0830F11F1AE5EBB0DCF1D38B0.roa (raw, json)
Hash identifier: +MMfe+iztW9faDqzVKudxwMIkil1qfj/bwn0p7C1Ev8=
Subject key identifier: DE:C8:AE:99:8B:70:A2:50:BD:7E:5E:42:04:E7:78:2A:7F:CC:16:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C60D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943187A0830F11F1AE5EBB0DCF1D38B0.roa
Signing time: Sun 19 Jul 2026 01:17:16 +0000
ROA not before: Sun 19 Jul 2026 01:17:12 +0000
ROA not after: Sun 26 Jul 2026 01:17:12 +0000
asID: 17497
IP address blocks: 156.245.176.0/21 maxlen: 24
156.245.176.0/22 maxlen: 24
156.245.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116237 (0x1c60d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 01:17:12 2026 GMT
Not After : Jul 26 01:17:12 2026 GMT
Subject: CN=6a5c259c-87a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2f:b5:64:2a:08:da:03:91:14:8b:4b:f8:4c:
e7:82:50:f6:0b:bd:51:c7:95:fb:98:ad:6a:30:83:
44:f9:43:45:9a:6a:82:eb:4a:c3:86:34:f3:3e:36:
d7:4c:15:2d:4a:ee:05:8e:33:ab:e3:ea:0c:5b:32:
35:f3:ff:fe:5f:56:25:4a:36:be:aa:cd:61:25:29:
6c:ee:6d:88:b0:25:c4:56:9e:d3:f8:d8:d6:42:8c:
b8:f6:0b:ad:e6:b0:7a:09:80:4a:18:2c:d4:1e:90:
a3:12:bb:ae:f5:85:d3:47:68:a3:14:68:e4:17:65:
aa:8b:f0:76:63:16:ba:fe:79:3b:63:02:6c:1c:bb:
59:3d:c8:4a:ab:ca:00:6e:34:4d:fe:4a:b2:09:03:
59:ac:c1:d2:d0:2b:f0:af:19:1d:88:91:38:4f:14:
79:78:46:02:8b:cb:a6:98:47:a5:be:4b:d0:63:fe:
99:06:48:53:ae:b5:f3:b5:1d:2b:70:df:b4:09:69:
12:e0:df:f5:4f:90:3e:ce:81:97:1e:6c:86:93:08:
e4:d1:33:a8:f5:ff:23:59:56:8d:ed:38:46:06:8d:
09:a0:d3:de:9c:0e:7e:93:81:37:ca:ab:9f:21:c2:
a0:ec:4b:83:e9:dc:3d:c5:4d:c5:a3:b4:ac:f8:e0:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C8:AE:99:8B:70:A2:50:BD:7E:5E:42:04:E7:78:2A:7F:CC:16:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/943187A0830F11F1AE5EBB0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:b8:04:fc:a3:b6:4a:4a:27:d3:09:4c:57:15:61:68:9b:cf:
56:1e:94:21:86:15:11:c1:4f:76:ef:cd:39:78:d9:e1:9b:98:
0c:ec:fb:4a:13:d2:7b:96:5f:bf:df:74:0f:9b:ad:5b:95:36:
9b:3e:4e:f3:0e:fe:88:3d:86:eb:95:1d:a1:db:b9:13:88:8c:
5e:50:b9:fc:07:a4:30:4d:78:70:e1:a6:9c:db:26:2e:6c:16:
00:25:16:ae:6b:4a:5d:d6:4d:2a:0e:03:61:1a:e6:82:b6:d3:
5a:ca:1c:ce:d7:3e:c1:4c:c7:e9:4b:9f:e1:68:1a:ec:d6:50:
e6:2f:4d:ac:8f:51:bd:36:68:42:a6:db:3f:36:c3:c2:c6:6a:
25:9e:34:e1:02:23:73:39:1b:42:ac:79:24:4e:cc:49:66:39:
77:d3:e8:b2:fc:81:a1:ad:6f:73:27:99:8b:c0:e3:eb:83:da:
d1:f7:56:17:85:f6:bc:3e:cc:67:eb:32:50:ab:1e:95:fc:b7:
6d:59:df:b5:fe:2a:44:dd:1c:c2:8a:33:a9:c3:14:f6:ed:c0:
fc:0f:00:5d:3c:c4:5c:17:4a:9b:a5:97:b5:30:66:1b:aa:a7:
1b:14:c6:d8:5a:1f:ff:96:f6:04:ad:31:c0:23:eb:03:34:29:
b9:fc:23:b2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcYNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE5MDExNzEyWhcNMjYwNzI2MDExNzEyWjAYMRYw
FAYDVQQDEw02YTVjMjU5Yy04N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4i+1ZCoI2gORFItL+EznglD2C71Rx5X7mK1qMINE+UNFmmqC60rDhjTz
PjbXTBUtSu4FjjOr4+oMWzI18//+X1YlSja+qs1hJSls7m2IsCXEVp7T+NjWQoy4
9gut5rB6CYBKGCzUHpCjEruu9YXTR2ijFGjkF2Wqi/B2Yxa6/nk7YwJsHLtZPchK
q8oAbjRN/kqyCQNZrMHS0CvwrxkdiJE4TxR5eEYCi8ummEelvkvQY/6ZBkhTrrXz
tR0rcN+0CWkS4N/1T5A+zoGXHmyGkwjk0TOo9f8jWVaN7ThGBo0JoNPenA5+k4E3
yqufIcKg7EuD6dw9xU3Fo7Ss+OAOvQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN7I
rpmLcKJQvX5eQgTneCp/zBa9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDMxODdBMDgzMEYxMUYxQUU1RUJCMERDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPWwMA0GCSqGSIb3DQEBCwUA
A4IBAQBquAT8o7ZKSifTCUxXFWFom89WHpQhhhURwU927805eNnhm5gM7PtKE9J7
ll+/33QPm61blTabPk7zDv6IPYbrlR2h27kTiIxeULn8B6QwTXhw4aac2yYubBYA
JRaua0pd1k0qDgNhGuaCttNayhzO1z7BTMfpS5/haBrs1lDmL02sj1G9NmhCpts/
NsPCxmolnjThAiNzORtCrHkkTsxJZjl30+iy/IGhrW9zJ5mLwOPrg9rR91YXhfa8
Psxn6zJQqx6V/LdtWd+1/ipE3RzCijOpwxT27cD8DwBdPMRcF0qbpZe1MGYbqqcb
FMbYWh//lvYErTHAI+sDNCm5/COy
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:25 2026 by rpki-client