Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE456EEE861511F188227DFFCE1D38B0.roa
File: CE456EEE861511F188227DFFCE1D38B0.roa (raw, json)
Hash identifier: dtH/ohZO/rcrq+2zH7WfrLo3CFIWA7SeEooD3gBA1lI=
Subject key identifier: 87:57:48:53:94:F6:FC:F7:FD:A7:7E:FC:14:5E:22:D8:69:22:BB:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE456EEE861511F188227DFFCE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:39:24 +0000
ROA not before: Wed 22 Jul 2026 21:39:20 +0000
ROA not after: Wed 09 Sep 2026 21:39:20 +0000
asID: 395793
IP address blocks: 156.243.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116667 (0x1c7bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 21:39:20 2026 GMT
Not After : Sep 9 21:39:20 2026 GMT
Subject: CN=6a61388c-e250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:3e:80:35:ef:80:80:42:99:c0:cb:87:10:
79:91:42:4f:70:32:fa:7e:2d:be:57:2c:4b:49:2c:
fb:4c:e0:1b:56:03:78:9b:1b:3b:f7:a1:f4:d4:68:
04:2a:de:67:14:9e:f2:27:7b:81:32:f5:3f:35:f0:
b9:74:4f:e6:ee:15:ae:f1:ab:de:0d:0c:a2:f4:57:
b9:96:9b:ed:aa:62:0b:7a:08:74:56:b3:10:09:c2:
24:cb:17:ee:fe:e0:a8:31:a5:b5:36:5f:22:0d:f5:
76:76:97:f8:06:d8:2f:0a:06:e8:14:0a:9d:2b:64:
64:95:14:79:b3:bb:11:8e:a3:ea:77:66:82:da:c7:
1c:49:ab:3a:4d:c9:69:0c:26:29:d7:5a:c3:3e:2b:
a2:f5:16:f8:31:d2:b4:83:53:91:8c:89:eb:fd:b2:
38:10:7d:07:c5:b3:d0:02:de:21:11:68:77:51:88:
23:85:9d:ff:d6:90:a1:04:76:9b:96:24:85:01:27:
4c:97:1a:c9:ef:d4:c7:6b:f2:5c:2d:22:4d:41:e4:
63:b8:f7:a9:90:6f:20:f1:02:b4:ed:bc:5e:c4:c4:
43:9e:63:2f:5b:da:a5:b0:ac:0a:3b:6d:3d:8a:26:
b2:56:b2:de:40:69:d4:59:f8:cf:b8:e6:85:ae:22:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:48:53:94:F6:FC:F7:FD:A7:7E:FC:14:5E:22:D8:69:22:BB:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE456EEE861511F188227DFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ef:ec:ff:30:5e:33:85:b6:5b:7a:d2:c4:1e:d6:10:86:67:
b9:4e:3d:25:5a:93:83:38:5f:cd:09:aa:9e:16:ea:2e:4d:4c:
36:98:63:3b:9f:62:a4:a2:80:cf:cd:a5:4b:55:de:08:81:bf:
16:2a:25:3d:b4:ae:59:94:52:5a:cf:f0:92:a0:d3:1d:ca:07:
ef:f2:24:2d:07:89:20:9e:ad:45:8a:a1:a9:76:0c:ee:0c:80:
28:fa:24:49:20:ef:36:61:e4:ee:38:5f:13:a0:aa:18:ef:11:
ff:31:fa:c1:f7:35:7f:ae:c9:66:9d:10:59:66:65:12:30:d2:
cf:63:b3:05:dc:a4:c3:45:65:0a:be:5a:93:b1:72:d3:4d:7f:
e3:24:f2:16:f6:29:dc:03:31:12:3b:68:2d:30:3b:63:f8:2d:
ef:ee:a4:b1:52:07:69:3e:8e:6e:fb:a9:a6:f9:6c:7b:00:08:
00:d9:6c:55:c7:e6:1e:1c:22:b3:51:fe:04:e2:e0:31:f6:0b:
f5:60:0b:c6:6e:67:09:52:19:ae:3d:a7:e5:68:3b:83:b0:a6:
4b:38:09:09:79:bc:50:7a:f5:f9:51:f5:5d:e7:92:57:ce:3f:
8f:ed:25:53:68:ba:82:6d:f5:06:90:44:15:f0:7a:5a:12:b2:
6e:1b:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:20 2026 by rpki-client