Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00676316720011F1B7930BDFCE1D38B0.roa
File: 00676316720011F1B7930BDFCE1D38B0.roa (raw, json)
Hash identifier: DqZ7tZ0q5vbWeKDovPlN8mjoPZK7420KjqUKttj+EUo=
Subject key identifier: CB:34:B5:CB:BF:3C:8D:8B:71:C2:E9:12:BE:57:E9:94:55:9D:A4:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0D2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00676316720011F1B7930BDFCE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:12:56 +0000
ROA not before: Sat 27 Jun 2026 08:12:51 +0000
ROA not after: Mon 31 Aug 2026 08:12:51 +0000
asID: 399077
IP address blocks: 156.240.241.0/24 maxlen: 24
156.240.242.0/24 maxlen: 24
156.240.243.0/24 maxlen: 24
156.240.245.0/24 maxlen: 24
156.240.246.0/24 maxlen: 24
156.240.247.0/24 maxlen: 24
156.240.248.0/24 maxlen: 24
156.240.249.0/24 maxlen: 24
156.240.250.0/24 maxlen: 24
156.240.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114898 (0x1c0d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 08:12:51 2026 GMT
Not After : Aug 31 08:12:51 2026 GMT
Subject: CN=6a3f8608-d2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:21:aa:82:6f:de:24:cd:7d:0e:09:26:36:
d1:3c:32:a7:66:ff:6b:e2:ed:a5:ac:e6:bb:f5:ed:
a3:dc:24:89:84:3f:65:e4:b4:fb:09:98:65:6f:a9:
17:e9:ad:32:67:30:2b:27:ab:2c:9a:3a:f2:e1:cb:
5a:be:29:ee:a6:2a:a4:bb:ca:17:cc:07:39:b2:f2:
27:e0:27:28:ed:f7:42:7c:69:9e:73:ca:ef:03:24:
27:a3:34:50:40:ad:ff:ee:12:eb:07:05:7a:94:5a:
cd:59:81:ad:b1:44:f3:c8:92:61:d3:ee:81:e0:28:
19:b4:2a:a7:cc:17:08:51:99:21:54:1c:19:a5:8d:
ad:4e:7d:f8:e2:70:b6:28:82:10:47:31:1e:59:ac:
21:a6:ef:15:6a:58:c7:55:1c:b2:f4:bb:2f:39:da:
14:dd:b3:93:e4:6a:b2:0e:ec:85:5c:5c:9b:64:a1:
09:94:ba:bb:b3:51:88:d5:73:dc:39:a4:0c:b5:17:
c2:40:d1:a6:a6:1e:ed:db:81:40:6a:78:39:e0:ae:
d7:89:69:2e:5c:8b:04:73:d6:86:df:91:7b:9a:2a:
b1:02:8d:68:86:f3:13:fa:fc:03:25:27:37:6c:ec:
91:a9:45:92:83:a9:a3:cd:bf:4d:16:f2:27:89:c3:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:B5:CB:BF:3C:8D:8B:71:C2:E9:12:BE:57:E9:94:55:9D:A4:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00676316720011F1B7930BDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.241.0-156.240.243.255
156.240.245.0-156.240.251.255
Signature Algorithm: sha256WithRSAEncryption
31:af:c5:de:07:1b:01:21:5d:4a:14:1e:1f:8d:32:3e:1e:0f:
b2:9c:14:d6:32:99:5a:35:62:80:66:d9:ef:21:7d:50:04:cb:
d1:d5:ec:39:58:e2:5e:d2:e3:a0:a5:6b:4e:ac:3b:89:e0:c7:
8f:54:66:d9:0e:2d:71:29:58:a3:8a:3a:d5:6d:2d:de:84:b4:
fc:aa:ee:59:e6:84:a6:b9:64:d6:92:61:01:e6:41:4f:1d:00:
7a:18:09:23:77:5d:82:12:d3:cd:59:9d:ce:24:ae:4b:01:41:
9c:ec:ff:6d:85:e4:71:6a:42:c8:ff:05:dd:c4:7b:ef:f4:85:
ad:f7:14:ac:8f:c5:a4:85:4a:0e:05:75:df:e7:41:8e:9e:ea:
66:54:74:14:50:2d:78:76:47:d7:55:70:46:ab:7e:5e:a2:cd:
6e:61:94:2f:4e:54:83:a4:01:13:17:c2:28:ed:43:47:d8:30:
48:4e:f6:3e:cb:0c:9b:f1:49:14:8a:46:c4:7d:6c:80:e8:30:
b9:de:48:d9:1e:86:03:40:ea:7e:2c:ca:46:6e:b5:95:5a:9b:
76:7e:4e:c9:2a:aa:63:43:c5:ef:a2:af:d2:e2:81:66:72:db:
0e:70:bc:62:f7:9e:bf:61:55:90:5c:d7:3e:74:28:46:6a:6d:
e1:fa:d3:6d
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAcDSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI3MDgxMjUxWhcNMjYwODMxMDgxMjUxWjAYMRYw
FAYDVQQDEw02YTNmODYwOC1kMmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtsYhqoJv3iTNfQ4JJjbRPDKnZv9r4u2lrOa79e2j3CSJhD9l5LT7CZhl
b6kX6a0yZzArJ6ssmjry4ctavinupiqku8oXzAc5svIn4Cco7fdCfGmec8rvAyQn
ozRQQK3/7hLrBwV6lFrNWYGtsUTzyJJh0+6B4CgZtCqnzBcIUZkhVBwZpY2tTn34
4nC2KIIQRzEeWawhpu8ValjHVRyy9LsvOdoU3bOT5GqyDuyFXFybZKEJlLq7s1GI
1XPcOaQMtRfCQNGmph7t24FAang54K7XiWkuXIsEc9aG35F7miqxAo1ohvMT+vwD
JSc3bOyRqUWSg6mjzb9NFvInicN4sQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFMs0
tcu/PI2LccLpEr5X6ZRVnaRfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDY3NjMxNjcyMDAxMUYxQjc5MzBCREZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACc8PEDBAKc8PAwDAMEAJzw
9QMEApzw+DANBgkqhkiG9w0BAQsFAAOCAQEAMa/F3gcbASFdShQeH40yPh4PspwU
1jKZWjVigGbZ7yF9UATL0dXsOVjiXtLjoKVrTqw7ieDHj1Rm2Q4tcSlYo4o61W0t
3oS0/KruWeaEprlk1pJhAeZBTx0AehgJI3ddghLTzVmdziSuSwFBnOz/bYXkcWpC
yP8F3cR77/SFrfcUrI/FpIVKDgV13+dBjp7qZlR0FFAteHZH11VwRqt+XqLNbmGU
L05Ug6QBExfCKO1DR9gwSE72PssMm/FJFIpGxH1sgOgwud5I2R6GA0DqfizKRm61
lVqbdn5OySqqY0PF76Kv0uKBZnLbDnC8Yveev2FVkFzXPnQoRmpt4frTbQ==
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:18 2026 by rpki-client