Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D663EEFE45A911F18BFFFAECCE1D38B0.roa
File: D663EEFE45A911F18BFFFAECCE1D38B0.roa (raw, json)
Hash identifier: Cck1g565T4PDqGkJFgiDUng74AxA04g0dmGg+TRJSug=
Subject key identifier: FC:43:5D:1E:3E:F4:BF:BE:48:8A:E3:DE:F8:98:25:5F:05:7C:3C:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B10A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D663EEFE45A911F18BFFFAECCE1D38B0.roa
Signing time: Fri 01 May 2026 22:05:18 +0000
ROA not before: Fri 01 May 2026 22:05:13 +0000
ROA not after: Sun 05 Jul 2026 22:05:13 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110858 (0x1b10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 22:05:13 2026 GMT
Not After : Jul 5 22:05:13 2026 GMT
Subject: CN=69f5239e-75e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0a:77:c5:06:13:7a:fe:4f:88:53:bc:c9:a5:
c9:9c:4f:b2:ac:6e:3d:b3:dd:ed:36:e7:2e:41:22:
d1:ff:3c:f4:75:a7:84:9a:16:ef:ab:90:07:9a:8d:
1a:b1:9b:27:5b:0c:59:d4:e7:52:53:bc:72:0c:f6:
22:69:ab:2d:9a:2f:6d:11:5d:7c:c3:10:3d:14:1f:
fd:a0:cb:28:69:e6:c1:94:c1:ba:10:b9:ac:27:21:
ca:44:65:9d:b6:e7:04:42:dd:40:69:0f:2f:a2:b3:
71:73:a0:42:1a:42:30:5d:3a:d3:1c:12:c0:53:4c:
8e:f3:df:bb:4f:62:18:77:ad:e8:4d:ec:6b:83:fd:
da:76:da:49:ad:0e:b8:bb:20:a4:42:d1:ef:64:2a:
78:23:2a:33:24:13:e5:33:5a:ef:18:3d:a4:17:d0:
fd:82:a2:c9:b3:92:4e:19:91:87:be:e1:7a:43:ae:
d2:f9:76:06:12:cd:70:5e:f9:df:96:04:fc:1a:af:
4a:ef:8c:86:4c:51:d5:4e:bd:0e:b7:0b:e9:74:e0:
fc:d5:34:a5:71:68:42:ba:f8:b4:a4:e5:ab:20:a5:
30:6e:5b:bc:a2:ce:f6:11:93:f7:97:ed:36:bd:f3:
a5:ca:ff:a7:0d:b0:df:35:4b:25:a2:9a:06:82:d9:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:43:5D:1E:3E:F4:BF:BE:48:8A:E3:DE:F8:98:25:5F:05:7C:3C:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D663EEFE45A911F18BFFFAECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f7:94:83:bd:c8:7c:20:40:65:3b:86:96:11:4d:6e:0f:51:
7a:d0:1b:e1:49:65:d8:ee:b9:25:92:a0:00:8f:6c:db:3e:32:
94:61:7e:23:ce:08:32:d7:0a:93:85:f3:41:2b:8b:95:d1:3a:
25:2d:6f:cb:da:22:15:3b:ce:51:85:a8:07:4e:a1:2a:68:f5:
f3:b8:10:3e:88:bf:d1:7b:3e:29:57:cf:d0:72:98:25:2e:2e:
74:a7:b2:e3:57:9d:ca:96:52:c0:35:8d:8a:f3:f7:17:fb:bf:
04:e6:33:93:4a:89:1f:25:01:d1:dd:0a:5f:19:65:09:2e:7a:
e0:86:fb:97:7b:c5:9b:b0:b9:6e:00:0c:af:2b:e9:c9:c0:da:
65:43:7a:20:d8:67:a5:c5:e5:9c:14:f0:2d:94:b7:9e:39:9e:
e8:c4:46:e9:12:c3:77:22:5d:00:56:b7:a6:1c:93:12:a7:ee:
7f:ee:23:00:5c:f4:b5:32:27:e4:08:1c:2e:27:aa:91:f4:94:
93:da:11:70:db:28:cb:40:43:64:d4:ed:d5:09:be:b6:48:0b:
27:21:03:d2:1d:ac:e3:e9:3b:ed:7d:29:00:d7:22:b7:36:f0:
a9:f5:9d:58:a6:cc:15:bd:fa:7f:71:6c:5e:a7:3d:57:ec:8c:
d9:0d:b1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:27:12 2026 by rpki-client