Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25FAA68835A11F1AE1BEAE6CE1D38B0.roa
File: B25FAA68835A11F1AE1BEAE6CE1D38B0.roa (raw, json)
Hash identifier: Va0sF78uOAZ0tIDAi4357IdJE5Wf3Q0y+jJWS9cKmE0=
Subject key identifier: 15:6B:66:E2:63:89:76:3E:09:EF:74:D0:CD:5B:7C:4F:8A:44:5C:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C62F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25FAA68835A11F1AE1BEAE6CE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:14:59 +0000
ROA not before: Sun 19 Jul 2026 10:14:55 +0000
ROA not after: Sun 16 Aug 2026 10:14:55 +0000
asID: 154321
IP address blocks: 156.226.176.0/22 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116271 (0x1c62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 10:14:55 2026 GMT
Not After : Aug 16 10:14:55 2026 GMT
Subject: CN=6a5ca3a3-b43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a0:10:ee:86:d6:83:3b:84:f8:f4:7a:46:4f:
56:ff:64:6c:10:87:6d:e0:4e:87:b3:f0:56:bb:53:
96:1c:80:ef:1b:01:21:15:93:86:80:85:c1:7d:73:
95:25:a0:4c:44:3a:45:62:42:04:da:2c:21:2b:a9:
64:b2:55:1a:e1:64:af:01:44:58:28:67:13:d3:c2:
49:b1:3b:75:13:87:5d:0d:53:36:76:f7:df:7f:26:
3c:bf:39:46:b9:c8:89:9f:fb:a3:b2:55:cb:38:47:
47:7c:45:d4:25:de:60:1d:6d:41:b6:81:ff:0b:51:
4d:c4:cb:ee:f4:36:15:b1:30:b1:3d:0e:34:4b:eb:
76:de:82:36:b4:2a:ba:d5:54:79:c2:db:39:84:e4:
61:ee:7b:3c:43:88:f6:79:66:e1:0a:89:ab:05:85:
e1:76:f5:ea:ef:6c:33:b7:c1:b5:2d:66:e3:98:57:
99:00:dd:cc:da:7c:f8:ab:60:22:76:05:6b:11:52:
b6:d9:68:bb:6d:0b:f8:f9:46:d9:68:4e:5b:e0:a3:
86:14:a3:36:ff:a3:d6:8a:41:3c:22:04:94:a2:b2:
ae:89:17:27:99:32:6c:9a:bf:aa:5c:12:47:a8:4d:
1e:68:a7:5d:fc:2e:43:22:31:0e:04:cb:0a:d6:cc:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6B:66:E2:63:89:76:3E:09:EF:74:D0:CD:5B:7C:4F:8A:44:5C:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B25FAA68835A11F1AE1BEAE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:0e:61:df:3f:e0:96:43:fe:66:29:58:b8:9a:99:66:84:4d:
ee:30:58:cf:a9:4f:83:4d:59:cf:0a:38:3d:18:2b:7e:70:3f:
8e:b3:14:a8:3d:eb:c2:2a:a8:32:25:1c:db:e9:28:c2:d8:fe:
29:87:e0:a4:bd:f5:ba:67:82:28:6e:63:38:5d:e0:f1:7b:ba:
f3:7d:e8:72:35:97:2e:7d:82:a5:d4:3b:11:c8:4b:d1:ee:ce:
00:85:a2:87:92:b2:12:30:51:bd:52:7d:db:49:35:90:c5:d2:
db:26:7b:80:bf:d2:b3:63:37:a2:5e:5c:de:dd:71:a2:fa:54:
eb:57:4b:f0:fe:e3:30:0c:5a:3a:b9:6f:b2:ee:ff:81:c3:23:
3b:b4:c5:38:9b:9b:e2:0d:4e:c8:01:51:62:3b:c9:41:f3:2c:
9b:d3:71:dc:28:9a:3d:dc:fa:2d:64:b3:26:b1:8c:5a:8e:78:
16:5a:ec:41:0c:cf:80:59:f5:b3:73:51:a1:29:ee:ff:f5:d4:
56:81:98:84:f1:c9:4e:61:c4:a9:44:5b:8c:ed:b0:be:8e:10:
d4:b8:df:09:ae:e3:81:65:e9:02:b0:48:d9:ef:33:00:1b:45:
31:b8:8e:3f:28:17:a3:d0:16:18:25:e7:3f:ae:0b:6b:82:1b:
a3:be:4f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:48 2026 by rpki-client