Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93EE19A835211F1B17939BACE1D38B0.roa
File: F93EE19A835211F1B17939BACE1D38B0.roa (raw, json)
Hash identifier: wxuHrJu3PVzMJDLLgOoBpVzVyq/2cPigQrTjUkVHDqs=
Subject key identifier: 4E:BA:42:7A:20:7D:6C:9C:8F:D9:1E:1C:06:FE:34:99:49:1A:97:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C61F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93EE19A835211F1B17939BACE1D38B0.roa
Signing time: Sun 19 Jul 2026 09:19:42 +0000
ROA not before: Sun 19 Jul 2026 09:19:38 +0000
ROA not after: Sun 16 Aug 2026 09:19:38 +0000
asID: 17497
IP address blocks: 156.245.8.0/22 maxlen: 24
156.245.8.0/24 maxlen: 24
156.245.9.0/24 maxlen: 24
156.245.10.0/24 maxlen: 24
156.245.11.0/24 maxlen: 24
156.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116255 (0x1c61f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:19:38 2026 GMT
Not After : Aug 16 09:19:38 2026 GMT
Subject: CN=6a5c96ae-6f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:d0:25:52:da:a7:3b:9b:2f:51:f4:78:20:
fb:7d:47:4e:7d:79:7b:7d:17:42:74:a1:11:cf:ec:
ee:a0:29:48:b1:58:a1:4c:67:02:21:ea:4f:66:4b:
be:db:5d:77:15:1b:b2:0c:36:12:48:94:80:11:57:
b8:cb:5d:fc:89:18:ea:3e:07:ec:ea:6c:8b:50:26:
94:e9:03:2c:83:b4:40:98:dc:36:3c:58:4e:45:fa:
51:08:72:2d:ec:c4:18:82:1f:39:97:2a:59:64:30:
ef:99:bb:4d:e0:81:d2:d2:7c:79:51:59:06:c1:ac:
0b:f1:ab:7b:b5:e1:44:ec:90:65:22:30:cd:87:13:
8f:c7:a2:99:00:04:d0:c8:af:e1:8e:77:14:93:79:
5a:5e:92:46:30:75:d6:0d:08:38:21:70:dc:d0:a4:
27:78:bd:5d:cb:09:86:ed:f6:f1:60:40:41:55:ba:
c9:80:67:a5:b9:29:d9:ad:d8:d0:a2:1c:b8:3c:8c:
88:75:f4:ca:87:26:2c:66:5e:a7:8b:c0:27:35:5e:
d3:78:50:34:14:97:54:7f:d1:a5:18:98:c9:d3:82:
c9:a4:ab:2d:a4:eb:f9:1f:7a:ee:be:09:f7:60:14:
cf:5f:51:0a:4b:68:dc:f6:03:de:b0:cf:f4:5a:e8:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:42:7A:20:7D:6C:9C:8F:D9:1E:1C:06:FE:34:99:49:1A:97:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F93EE19A835211F1B17939BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/22
156.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
49:6d:c9:10:f8:d4:9a:ff:7a:8a:59:30:7b:3f:45:6f:bc:d1:
ed:17:b5:c7:30:ec:cd:da:ac:ed:2f:32:7b:7a:9a:ef:2a:92:
6f:82:1a:f1:b2:5c:45:03:7d:de:24:c3:4f:18:0f:b9:81:74:
bf:c7:e6:0e:b9:32:a7:6b:15:06:37:90:7d:41:69:06:62:59:
a2:4b:ba:84:8a:4b:b4:e6:c8:b9:3e:b9:7d:88:85:f0:51:da:
81:55:cb:0a:ef:85:ff:c4:6d:56:5f:d8:58:ac:57:37:5d:29:
1f:66:f9:c1:5c:b4:43:b6:e5:0a:63:d7:0b:a0:ad:60:e5:75:
4d:1e:92:cc:52:c6:c1:64:b8:16:60:d1:2c:c9:b6:92:44:08:
e2:a6:cc:18:ba:56:a0:ea:65:c3:f5:83:4a:d2:3a:f1:9c:f0:
b6:ea:e5:16:9d:ae:80:3a:c0:a0:9e:d4:f9:da:c0:bc:68:fd:
f3:90:24:d9:94:3e:ed:90:be:09:32:45:08:6f:42:a8:f5:1c:
15:94:11:52:96:4f:c2:af:86:08:ba:b3:47:e3:76:6d:95:7e:
89:57:e3:44:f5:c4:f5:e6:c1:b8:06:0b:bb:96:58:da:8e:be:
2c:ea:9d:60:7a:23:e5:35:f9:5e:e2:ef:0e:64:31:3b:a5:bb:
dd:8d:0f:47
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcYfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE5MDkxOTM4WhcNMjYwODE2MDkxOTM4WjAYMRYw
FAYDVQQDEw02YTVjOTZhZS02ZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2XbQJVLapzubL1H0eCD7fUdOfXl7fRdCdKERz+zuoClIsVihTGcCIepP
Zku+2113FRuyDDYSSJSAEVe4y138iRjqPgfs6myLUCaU6QMsg7RAmNw2PFhORfpR
CHIt7MQYgh85lypZZDDvmbtN4IHS0nx5UVkGwawL8at7teFE7JBlIjDNhxOPx6KZ
AATQyK/hjncUk3laXpJGMHXWDQg4IXDc0KQneL1dywmG7fbxYEBBVbrJgGeluSnZ
rdjQohy4PIyIdfTKhyYsZl6ni8AnNV7TeFA0FJdUf9GlGJjJ04LJpKstpOv5H3ru
vgn3YBTPX1EKS2jc9gPesM/0WujmxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE66
QnogfWycj9keHAb+NJlJGpeoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOTNFRTE5QTgzNTIxMUYxQjE3OTM5QkFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnPUIAwQAnPW3MA0GCSqGSIb3
DQEBCwUAA4IBAQBJbckQ+NSa/3qKWTB7P0VvvNHtF7XHMOzN2qztLzJ7eprvKpJv
ghrxslxFA33eJMNPGA+5gXS/x+YOuTKnaxUGN5B9QWkGYlmiS7qEiku05si5Prl9
iIXwUdqBVcsK74X/xG1WX9hYrFc3XSkfZvnBXLRDtuUKY9cLoK1g5XVNHpLMUsbB
ZLgWYNEsybaSRAjipswYulag6mXD9YNK0jrxnPC26uUWna6AOsCgntT52sC8aP3z
kCTZlD7tkL4JMkUIb0Ko9RwVlBFSlk/Cr4YIurNH43ZtlX6JV+NE9cT15sG4Bgu7
lljajr4s6p1geiPlNfle4u8OZDE7pbvdjQ9H
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:00 2026 by rpki-client