Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D95C975E84ED11F199D91DFFCE1D38B0.roa
File: D95C975E84ED11F199D91DFFCE1D38B0.roa (raw, json)
Hash identifier: JacbbaJso6cse+x9WnLtYTQwnO00EcOfJ2y8HpsfirY=
Subject key identifier: F8:B8:1C:78:AE:3A:31:8A:21:1C:AE:58:B5:C4:5C:16:F6:DB:55:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D95C975E84ED11F199D91DFFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 10:20:52 +0000
ROA not before: Tue 21 Jul 2026 10:20:48 +0000
ROA not after: Sat 29 Aug 2026 10:20:48 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116442 (0x1c6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 10:20:48 2026 GMT
Not After : Aug 29 10:20:48 2026 GMT
Subject: CN=6a5f4804-2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:ee:6b:7a:54:3a:54:ed:d5:44:dc:e3:1f:
30:fb:26:63:eb:70:af:41:1b:15:2f:06:e7:31:ec:
89:93:9a:05:5b:82:e5:03:fa:b4:78:e0:d7:2b:97:
86:94:cf:e7:e4:27:c5:4b:7e:90:c3:b1:3f:3d:7a:
93:84:5e:26:a6:4e:39:93:20:e5:72:11:12:c5:e5:
22:e4:94:51:ca:3c:b8:41:43:1f:27:d5:76:c5:d2:
1c:06:02:32:c2:8e:21:35:41:bb:c8:30:e0:26:e9:
b5:fa:fe:13:26:32:8c:7e:5f:e3:0b:75:31:00:f3:
8b:56:b0:d2:c5:74:82:90:c9:b1:f1:17:89:98:6e:
36:03:e1:b8:e3:d0:c6:33:a0:59:5f:a7:49:47:74:
35:8f:24:1f:d0:71:e6:2f:07:12:21:3b:49:a6:d7:
af:e9:05:cd:ed:b0:02:0c:55:c0:46:33:37:f9:47:
d0:3d:52:8a:57:6f:74:f2:d2:30:67:e4:a6:fa:9f:
d9:66:41:08:e4:eb:d5:7e:9d:8a:b8:bc:58:0c:b0:
ed:49:f2:73:1b:91:58:fa:5f:7e:5f:98:3a:e2:61:
77:f4:91:c8:f2:d7:48:d4:c1:d4:38:d9:de:99:8c:
2e:be:3e:36:e6:1b:a6:44:53:b9:e8:70:6c:50:35:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B8:1C:78:AE:3A:31:8A:21:1C:AE:58:B5:C4:5C:16:F6:DB:55:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D95C975E84ED11F199D91DFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.137.255
Signature Algorithm: sha256WithRSAEncryption
38:e2:eb:ff:9a:2a:8c:dc:36:d6:a3:11:80:7b:11:fc:fc:d3:
4d:47:ae:39:30:e1:e0:f7:01:17:12:6a:6f:e3:59:c2:84:17:
62:37:37:28:6b:bf:ab:66:44:63:51:4e:07:7e:58:60:d8:fa:
5d:77:1a:d4:fa:aa:61:b2:49:b3:c0:99:2f:69:42:67:07:25:
4b:4c:bc:88:f5:48:3a:84:8a:33:3c:ae:3c:49:75:a9:d3:e0:
65:09:aa:65:2c:3f:35:20:a7:0f:b8:e4:c7:be:78:6e:b1:52:
cd:44:e9:99:c1:2f:06:9a:fd:5c:ec:c9:57:61:2a:df:e4:28:
ce:65:fe:c2:38:fd:eb:e1:98:fb:da:e3:16:98:72:b8:f0:66:
2a:e2:21:25:75:ee:d2:01:90:09:d3:38:8e:ae:10:ac:ca:c6:
79:80:4e:75:d7:16:5e:df:27:3e:91:8c:5b:e6:ec:ab:32:72:
c1:d3:23:43:14:08:71:1f:fd:fb:40:8d:a0:9a:7e:86:84:87:
94:91:78:25:a5:1c:2b:da:08:55:7f:37:5e:6f:84:e7:46:9f:
8b:39:07:dd:9b:5d:48:74:35:da:55:6b:45:2e:1d:7f:21:81:
b6:4b:e2:98:53:74:1d:db:94:8f:5f:b1:e7:5a:64:2e:ec:31:
31:2d:f4:18
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcbaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIxMTAyMDQ4WhcNMjYwODI5MTAyMDQ4WjAYMRYw
FAYDVQQDEw02YTVmNDgwNC0yZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvsHua3pUOlTt1UTc4x8w+yZj63CvQRsVLwbnMeyJk5oFW4LlA/q0eODX
K5eGlM/n5CfFS36Qw7E/PXqThF4mpk45kyDlchESxeUi5JRRyjy4QUMfJ9V2xdIc
BgIywo4hNUG7yDDgJum1+v4TJjKMfl/jC3UxAPOLVrDSxXSCkMmx8ReJmG42A+G4
49DGM6BZX6dJR3Q1jyQf0HHmLwcSITtJptev6QXN7bACDFXARjM3+UfQPVKKV290
8tIwZ+Sm+p/ZZkEI5OvVfp2KuLxYDLDtSfJzG5FY+l9+X5g64mF39JHI8tdI1MHU
ONnemYwuvj425humRFO56HBsUDVTPwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPi4
HHiuOjGKIRyuWLXEXBb221X/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTVDOTc1RTg0RUQxMUYxOTlEOTFERkZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec9oADBAGc9ogwDQYJKoZI
hvcNAQELBQADggEBADji6/+aKozcNtajEYB7Efz8001Hrjkw4eD3ARcSam/jWcKE
F2I3Nyhrv6tmRGNRTgd+WGDY+l13GtT6qmGySbPAmS9pQmcHJUtMvIj1SDqEijM8
rjxJdanT4GUJqmUsPzUgpw+45Me+eG6xUs1E6ZnBLwaa/VzsyVdhKt/kKM5l/sI4
/evhmPva4xaYcrjwZiriISV17tIBkAnTOI6uEKzKxnmATnXXFl7fJz6RjFvm7Ksy
csHTI0MUCHEf/ftAjaCafoaEh5SReCWlHCvaCFV/N15vhOdGn4s5B92bXUh0NdpV
a0UuHX8hgbZL4phTdB3blI9fsedaZC7sMTEt9Bg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:16 2026 by rpki-client