Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4562818823611F189DF36E6CE1D38B0.roa
File: A4562818823611F189DF36E6CE1D38B0.roa (raw, json)
Hash identifier: kpWwz6i1r9+Dd+jw7cr2Hs+fhjsIAnY0nssTM0AuwK0=
Subject key identifier: 2F:E0:02:D9:29:ED:02:D8:E3:5B:BF:19:75:FF:B4:D4:2B:37:3D:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4562818823611F189DF36E6CE1D38B0.roa
Signing time: Fri 17 Jul 2026 23:24:23 +0000
ROA not before: Sat 18 Jul 2026 23:24:17 +0000
ROA not after: Fri 14 Aug 2026 23:24:17 +0000
asID: 2914
IP address blocks: 156.225.8.0/24 maxlen: 24
156.225.9.0/24 maxlen: 24
156.225.10.0/24 maxlen: 24
156.225.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116211 (0x1c5f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 23:24:17 2026 GMT
Not After : Aug 14 23:24:17 2026 GMT
Subject: CN=6a5ab9a6-3d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:a9:9d:dc:76:4f:ec:11:c8:10:30:61:b9:
52:17:4d:23:0f:22:aa:84:b8:70:f5:da:74:df:62:
6d:86:06:d2:b7:d1:cd:5d:fd:5b:1c:aa:c2:9d:1c:
86:d8:4d:dd:da:5e:6b:c8:60:33:26:c3:9b:bd:8a:
76:57:f5:94:72:d6:eb:d8:25:f5:7d:d6:7b:6f:6a:
ca:04:9c:b2:33:f1:62:3b:8c:f4:0d:14:f9:db:1c:
ad:35:7d:17:62:d1:70:50:5f:88:6a:42:a8:e3:68:
fa:11:7f:4a:f2:5e:b1:ec:91:f8:31:35:1d:8e:93:
57:a5:a9:47:8f:d9:2a:d4:33:41:5c:37:c7:a5:64:
51:85:f4:5d:61:01:05:16:05:3c:ca:9f:59:b6:c4:
77:f7:b6:b8:19:9d:48:ba:20:21:0e:21:a0:56:17:
66:62:4a:d5:b1:b8:5f:80:62:15:3a:ac:f4:ce:1a:
51:d1:2d:d2:2e:16:e4:4e:55:1e:78:c4:90:f1:88:
30:2d:fe:d1:ca:4f:8e:8b:b2:42:a1:45:30:ac:bf:
d1:ef:8c:fd:71:fd:08:3d:ef:02:a6:10:a6:d5:7c:
eb:50:33:c2:4e:e3:26:63:c7:d6:87:6e:a0:c0:75:
6c:b9:3f:78:0d:a7:4d:3e:db:e4:a1:ef:a5:cd:bb:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E0:02:D9:29:ED:02:D8:E3:5B:BF:19:75:FF:B4:D4:2B:37:3D:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4562818823611F189DF36E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a4:3a:9c:55:a4:a8:23:92:69:8b:2a:1d:e6:d6:00:68:f1:
6e:1f:92:df:a7:a4:75:61:c2:36:8e:10:bd:88:63:73:a1:d4:
f0:d7:7b:56:2b:5a:4e:de:47:ab:b7:77:8f:cf:6c:40:52:4f:
bc:19:b2:af:b3:45:69:6e:32:ba:45:d0:0b:97:3f:b0:62:49:
33:1a:bf:10:09:5b:22:81:f7:02:b3:65:2d:0f:f8:f0:8a:1d:
27:1d:6d:22:0a:23:98:af:f3:f9:68:4d:00:ea:bc:11:f0:cf:
59:21:a3:82:cd:c3:29:0f:17:66:0a:64:e8:c2:7d:9d:9a:42:
56:d0:bb:e4:86:ef:ba:72:ba:87:7a:0e:51:9c:ae:f4:ca:93:
03:fa:c6:6a:77:56:6b:54:3e:98:ee:44:6f:f4:49:ad:20:70:
9c:c0:70:ab:a4:ee:28:d1:07:22:08:44:96:8a:48:d3:73:74:
d0:40:10:47:71:ee:3c:a4:22:00:cf:08:e5:25:10:56:90:65:
af:f1:e2:cb:9c:93:25:d1:14:33:35:71:32:2d:f3:4a:75:1b:
cc:ce:7f:ed:4b:74:51:bb:5a:66:3e:77:35:dc:b8:58:ce:ae:
75:cb:8a:60:cc:8e:b8:ad:1a:ff:3f:8d:c2:7f:f5:4f:cf:46:
74:bc:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:37 2026 by rpki-client