Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B615A77C2F2F11F1AA56F4B0DAE4EC9C.roa
File: B615A77C2F2F11F1AA56F4B0DAE4EC9C.roa (raw, json)
Hash identifier: zJI2ixQ1D1QKGFj9LQxe3Z4amcphh+F0y7NJcm9TLCg=
Subject key identifier: 41:76:25:EB:3E:65:E6:40:4E:93:BF:EE:FA:20:0F:CB:7F:8A:B1:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A994
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B615A77C2F2F11F1AA56F4B0DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 07:35:39 +0000
ROA not before: Fri 03 Apr 2026 07:35:35 +0000
ROA not after: Fri 10 Jul 2026 07:35:35 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108948 (0x1a994)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 07:35:35 2026 GMT
Not After : Jul 10 07:35:35 2026 GMT
Subject: CN=69cf6dcb-d8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:bb:04:b3:23:44:5d:e8:11:1d:b2:a3:7e:
4f:30:ae:c0:1b:fd:c0:7a:af:a6:56:39:55:83:61:
72:3a:fa:7a:4d:22:3a:de:7f:73:ef:36:a1:4f:cf:
74:08:ac:c3:17:51:4e:bf:c8:cf:cb:56:94:14:8f:
56:b7:7e:d8:67:3f:d1:12:03:24:8e:1c:7f:af:98:
ac:a4:9c:98:bf:1e:36:6e:b0:f3:8a:e8:83:48:13:
c6:d3:5c:28:49:d7:6f:88:f5:eb:9d:e4:01:a2:10:
c8:b1:bf:88:aa:b6:a0:19:6c:71:af:97:06:1d:72:
b7:e8:87:09:f6:1a:f5:00:07:97:d8:79:fe:e4:ad:
c7:5f:56:2d:92:81:62:ce:32:2b:c2:9c:d1:32:59:
4a:58:11:34:61:e2:3b:35:2e:48:2c:15:20:9f:92:
d3:50:25:8d:df:b9:bd:32:88:6a:90:65:5c:85:4a:
b0:1d:00:04:69:77:ef:0b:f5:25:9b:2b:e1:58:f6:
75:e6:97:c7:90:fe:62:34:66:0b:af:e5:29:69:19:
92:f5:f5:be:7d:af:21:6f:77:e1:c2:e7:36:0e:88:
17:65:70:13:35:4e:1e:fb:12:c6:46:88:28:c2:4f:
10:3e:ed:ac:24:10:06:ed:f4:d8:a4:76:e7:ca:d2:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:25:EB:3E:65:E6:40:4E:93:BF:EE:FA:20:0F:CB:7F:8A:B1:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B615A77C2F2F11F1AA56F4B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
07:db:26:7f:85:01:a0:0b:34:22:6e:97:62:a1:a8:40:23:90:
33:27:e9:92:04:c3:a3:93:ec:92:04:c2:cd:27:b4:3f:a6:fb:
f2:a0:29:a8:fb:f1:77:dd:40:ae:64:f9:43:9e:b9:f9:27:5e:
12:22:a4:29:f5:10:3a:1d:14:fa:ab:2b:39:ef:86:a4:e5:18:
18:18:46:8b:97:d0:ca:60:a1:b8:8d:01:67:f2:12:48:63:9e:
01:b8:04:7c:f5:8b:dc:1f:7f:64:0d:55:16:c8:2b:eb:34:92:
aa:df:09:0f:e0:d6:4a:48:69:03:2d:59:50:12:02:5d:d6:bb:
fd:e4:45:d9:59:0b:5e:b0:42:9c:91:bc:32:9e:0c:6e:bf:2c:
34:d9:f4:67:bb:1c:72:03:51:7b:9a:df:33:c0:d1:d2:c9:9b:
97:15:4f:97:0a:ce:af:22:d5:e9:02:a6:50:f0:00:99:01:3c:
0a:de:ac:96:5b:db:ba:50:79:fe:e4:b3:c9:a5:6b:51:ef:29:
76:af:a1:ad:71:d8:d1:df:9e:68:1e:d6:53:4e:88:4a:c2:ad:
67:08:ce:f2:6f:14:33:ba:a1:34:a4:bb:a3:d8:25:19:32:1f:
b0:25:aa:dc:4c:03:00:ba:39:20:6a:ed:c1:be:04:00:69:2e:
7b:af:15:3d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAamUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDAzMDczNTM1WhcNMjYwNzEwMDczNTM1WjAYMRYw
FAYDVQQDEw02OWNmNmRjYi1kOGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApX67BLMjRF3oER2yo35PMK7AG/3Aeq+mVjlVg2FyOvp6TSI63n9z7zah
T890CKzDF1FOv8jPy1aUFI9Wt37YZz/REgMkjhx/r5ispJyYvx42brDziuiDSBPG
01woSddviPXrneQBohDIsb+IqragGWxxr5cGHXK36IcJ9hr1AAeX2Hn+5K3HX1Yt
koFizjIrwpzRMllKWBE0YeI7NS5ILBUgn5LTUCWN37m9MohqkGVchUqwHQAEaXfv
C/UlmyvhWPZ15pfHkP5iNGYLr+UpaRmS9fW+fa8hb3fhwuc2DogXZXATNU4e+xLG
Rogowk8QPu2sJBAG7fTYpHbnytLp+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEF2
Jes+ZeZATpO/7vogD8t/irH+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNjE1QTc3QzJGMkYxMUYxQUE1NkY0QjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOtaMA0GCSqGSIb3DQEBCwUA
A4IBAQAH2yZ/hQGgCzQibpdioahAI5AzJ+mSBMOjk+ySBMLNJ7Q/pvvyoCmo+/F3
3UCuZPlDnrn5J14SIqQp9RA6HRT6qys574ak5RgYGEaLl9DKYKG4jQFn8hJIY54B
uAR89YvcH39kDVUWyCvrNJKq3wkP4NZKSGkDLVlQEgJd1rv95EXZWQtesEKckbwy
ngxuvyw02fRnuxxyA1F7mt8zwNHSyZuXFU+XCs6vItXpAqZQ8ACZATwK3qyWW9u6
UHn+5LPJpWtR7yl2r6GtcdjR355oHtZTTohKwq1nCM7ybxQzuqE0pLuj2CUZMh+w
JarcTAMAujkgau3BvgQAaS57rxU9
-----END CERTIFICATE-----
Generated at Wed Apr 8 07:39:55 2026 by rpki-client