Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86447485A6611F18D8370ADCE1D38B0.roa
File: F86447485A6611F18D8370ADCE1D38B0.roa (raw, json)
Hash identifier: egqaBKP2oICg+eCdMgaJbAOjDcvSmypr1vo0Qmnk5XI=
Subject key identifier: E5:30:65:EB:B5:2C:23:A1:F3:81:F4:04:95:4F:72:01:D3:FC:A0:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86447485A6611F18D8370ADCE1D38B0.roa
Signing time: Thu 28 May 2026 07:29:33 +0000
ROA not before: Thu 28 May 2026 07:29:28 +0000
ROA not after: Mon 29 Jun 2026 07:29:28 +0000
asID: 61461
IP address blocks: 156.231.192.0/18 maxlen: 24
156.236.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113240 (0x1ba58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 07:29:28 2026 GMT
Not After : Jun 29 07:29:28 2026 GMT
Subject: CN=6a17eedd-17f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:66:82:26:53:7f:08:23:1f:96:fc:2b:29:
15:e5:f9:9b:19:0e:a5:3b:08:14:ea:4d:53:eb:3a:
04:9e:1c:56:78:d2:8f:2f:65:ea:d0:a5:1a:87:d2:
0a:0f:a0:09:4e:b5:04:84:45:14:4b:92:2b:ae:f1:
dd:24:c4:8f:64:97:2b:b7:60:da:d7:6f:ba:4b:28:
cc:e0:51:22:2b:80:1a:3f:c8:24:a1:48:a9:26:ee:
6e:a4:e1:5c:b7:3e:9a:e0:b8:e7:ad:fb:8e:34:0e:
0d:a8:63:a4:15:47:fa:16:2c:9b:cc:96:ff:be:93:
91:42:d3:0e:67:b2:54:74:b6:42:9e:e3:1c:84:1f:
99:83:00:03:4e:10:b3:b2:4c:60:da:a3:05:00:4e:
eb:3f:d1:0e:cb:53:37:99:cc:97:a5:2c:3d:5e:61:
22:c2:59:f3:57:ba:63:40:db:ff:cc:d2:2a:4b:15:
37:1f:39:2b:fb:bb:bd:50:ef:aa:78:7c:ba:31:e6:
bb:0f:29:11:78:98:79:b3:ba:d3:e9:e1:0d:70:22:
ae:70:f2:45:53:30:2a:7b:c3:88:15:44:ec:41:9c:
47:12:fc:f2:5e:fe:1f:14:7e:c3:c6:34:ae:c3:0f:
7e:0f:b5:43:05:13:53:4d:7e:4f:03:03:67:fd:1a:
75:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:30:65:EB:B5:2C:23:A1:F3:81:F4:04:95:4F:72:01:D3:FC:A0:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86447485A6611F18D8370ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.192.0/18
156.236.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:9e:d7:30:31:cd:ca:5d:8c:f7:97:8e:cf:7d:f1:10:96:db:
4c:5b:e2:92:f6:b8:90:b6:89:2a:73:5a:9c:62:a6:4e:48:11:
b8:26:2c:0e:d2:f9:5a:b7:cc:2a:78:82:13:d7:20:12:b5:7c:
8d:97:ed:f4:7a:b9:17:fd:ce:23:89:50:4e:86:17:1c:61:8a:
3c:9e:10:72:76:73:09:af:bf:db:58:5a:24:56:83:fd:8a:80:
9c:50:d0:51:0b:d6:4f:63:f4:ac:6b:df:d3:34:ab:0e:51:e3:
25:6b:df:b6:10:3a:82:1d:bd:dc:9c:33:20:2f:2c:ae:a5:85:
c8:12:f4:51:3c:9a:86:86:19:55:8f:93:e6:1a:1d:cb:a5:2b:
eb:fd:dd:0a:ce:25:65:1d:5f:88:55:6d:93:37:17:1b:af:7d:
d0:87:0f:f7:10:42:a6:41:c1:12:2b:37:08:53:fb:54:4c:5a:
51:66:39:7d:43:94:6d:58:59:a3:09:54:45:b8:2a:e1:55:15:
a9:6d:08:9b:3f:42:80:5b:7d:ae:b6:12:e4:77:aa:80:2d:ee:
a1:33:60:dc:4f:01:4d:40:4f:55:ea:a2:d9:d2:a2:02:e0:0b:
82:50:b3:9d:7d:99:37:92:61:44:9e:0f:81:b7:d2:a7:31:04:
4f:fc:b3:38
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbpYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDcyOTI4WhcNMjYwNjI5MDcyOTI4WjAYMRYw
FAYDVQQDEw02YTE3ZWVkZC0xN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAte9mgiZTfwgjH5b8KykV5fmbGQ6lOwgU6k1T6zoEnhxWeNKPL2Xq0KUa
h9IKD6AJTrUEhEUUS5IrrvHdJMSPZJcrt2Da12+6SyjM4FEiK4AaP8gkoUipJu5u
pOFctz6a4LjnrfuONA4NqGOkFUf6FiybzJb/vpORQtMOZ7JUdLZCnuMchB+ZgwAD
ThCzskxg2qMFAE7rP9EOy1M3mcyXpSw9XmEiwlnzV7pjQNv/zNIqSxU3Hzkr+7u9
UO+qeHy6Mea7DykReJh5s7rT6eENcCKucPJFUzAqe8OIFUTsQZxHEvzyXv4fFH7D
xjSuww9+D7VDBRNTTX5PAwNn/Rp1JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUw
Zeu1LCOh84H0BJVPcgHT/KBUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GODY0NDc0ODVBNjYxMUYxOEQ4MzcwQURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGnOfAAwQGnOyAMA0GCSqGSIb3
DQEBCwUAA4IBAQAbntcwMc3KXYz3l47PffEQlttMW+KS9riQtokqc1qcYqZOSBG4
JiwO0vlat8wqeIIT1yAStXyNl+30erkX/c4jiVBOhhccYYo8nhBydnMJr7/bWFok
VoP9ioCcUNBRC9ZPY/Ssa9/TNKsOUeMla9+2EDqCHb3cnDMgLyyupYXIEvRRPJqG
hhlVj5PmGh3LpSvr/d0KziVlHV+IVW2TNxcbr33Qhw/3EEKmQcESKzcIU/tUTFpR
Zjl9Q5RtWFmjCVRFuCrhVRWpbQibP0KAW32uthLkd6qALe6hM2DcTwFNQE9V6qLZ
0qIC4AuCULOdfZk3kmFEng+Bt9KnMQRP/LM4
-----END CERTIFICATE-----
Generated at Fri May 29 23:15:40 2026 by rpki-client