Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AE777B6455C11F18EC7741CCF1D38B0.roa
File: 0AE777B6455C11F18EC7741CCF1D38B0.roa (raw, json)
Hash identifier: CYE2lLRheumtprvaXycOyZoG60b3DY287smiLqgb1Vs=
Subject key identifier: 5D:36:98:70:FD:8B:4A:F0:93:64:55:AB:DA:FF:D5:13:6E:4D:FA:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B09C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AE777B6455C11F18EC7741CCF1D38B0.roa
Signing time: Fri 01 May 2026 12:48:25 +0000
ROA not before: Fri 01 May 2026 12:48:20 +0000
ROA not after: Fri 07 May 2027 12:48:20 +0000
asID: 212238
IP address blocks: 156.232.0.0/24 maxlen: 24
156.232.1.0/24 maxlen: 24
156.239.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110748 (0x1b09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 12:48:20 2026 GMT
Not After : May 7 12:48:20 2027 GMT
Subject: CN=69f4a119-77dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9b:2b:c3:75:b5:ff:b7:ff:06:fc:04:ec:2f:
7b:98:a3:c2:58:d1:1c:dd:d3:c2:c2:b4:25:df:f4:
f1:1e:26:1e:37:2a:57:48:19:d5:1e:cb:06:46:5a:
49:f1:77:6e:77:6d:f4:d5:ef:27:14:73:9c:c2:0f:
63:8f:9b:24:55:14:36:e4:70:4f:95:ff:7a:54:fc:
8f:6a:7f:ca:56:40:8f:8c:e0:25:92:41:8f:73:da:
28:70:f3:43:64:3a:a7:00:46:9c:d6:07:07:86:67:
2f:cc:69:bf:b5:86:07:69:94:81:d2:ac:d7:77:ab:
29:d0:a9:dd:da:61:ce:df:c2:cd:22:cc:75:10:f8:
e6:30:18:3e:2b:1d:02:ca:66:3d:4c:8c:5e:a9:f0:
7d:29:f1:65:15:a0:d2:bb:28:07:d0:8e:c1:6a:d3:
79:28:10:7a:6d:4b:59:93:d4:40:82:16:d0:22:cd:
9a:4a:1b:69:95:6a:37:29:28:cc:d3:a8:af:85:39:
54:aa:93:2e:bb:7a:99:da:0b:45:e2:bd:f7:51:0a:
fd:f5:50:12:29:76:b5:ce:47:cb:0f:0c:01:af:60:
57:31:46:c1:55:e9:76:82:c8:31:3a:9a:fb:ba:d8:
fd:94:68:d6:26:f9:41:60:6b:1f:89:a6:de:6c:86:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:36:98:70:FD:8B:4A:F0:93:64:55:AB:DA:FF:D5:13:6E:4D:FA:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AE777B6455C11F18EC7741CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.0.0/23
156.239.18.0/24
Signature Algorithm: sha256WithRSAEncryption
37:67:17:8f:ed:fd:44:9c:39:99:a3:a5:76:a4:39:42:96:18:
72:57:82:fa:17:0b:aa:98:56:67:9a:30:a8:31:de:34:b7:6a:
73:b1:13:85:e1:10:ae:31:9d:1d:45:8e:86:4e:72:78:66:da:
d7:00:86:a3:66:a3:40:11:05:63:be:3c:98:80:e1:63:72:3a:
d3:f9:02:c4:da:83:6a:37:08:d3:b1:62:4a:87:0b:f4:56:96:
1f:89:85:ba:bb:5c:cb:a5:e0:a9:43:96:0d:da:6f:f1:99:e4:
4c:74:36:a6:6f:6f:74:79:c7:fa:2b:05:0e:47:f4:2e:3b:a7:
d8:91:f7:0a:51:20:3e:29:ab:1f:f3:2a:85:98:36:1a:a7:d2:
3e:77:26:14:8d:b4:a2:90:54:b9:23:2a:7b:8d:56:3a:c5:b0:
85:ec:4d:08:f9:0b:c6:3e:67:8a:3d:e1:32:1e:6c:b1:36:31:
ac:24:4d:e2:da:3c:7d:d3:da:2d:cd:18:a2:55:53:c0:47:43:
76:02:b2:6a:81:39:72:e8:9a:f4:d0:a1:8b:e5:70:a5:35:34:
d4:97:16:f8:44:2d:ef:fb:6e:40:72:00:cf:99:c7:91:67:57:
e9:15:dd:ee:81:fe:0c:d1:3a:df:a3:33:33:d9:11:89:f8:36:
a6:a1:84:20
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbCcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMTI0ODIwWhcNMjcwNTA3MTI0ODIwWjAYMRYw
FAYDVQQDEw02OWY0YTExOS03N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs5srw3W1/7f/BvwE7C97mKPCWNEc3dPCwrQl3/TxHiYeNypXSBnVHssG
RlpJ8Xdud2301e8nFHOcwg9jj5skVRQ25HBPlf96VPyPan/KVkCPjOAlkkGPc9oo
cPNDZDqnAEac1gcHhmcvzGm/tYYHaZSB0qzXd6sp0Knd2mHO38LNIsx1EPjmMBg+
Kx0CymY9TIxeqfB9KfFlFaDSuygH0I7BatN5KBB6bUtZk9RAghbQIs2aShtplWo3
KSjM06ivhTlUqpMuu3qZ2gtF4r33UQr99VASKXa1zkfLDwwBr2BXMUbBVel2gsgx
Opr7utj9lGjWJvlBYGsfiabebIYoxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF02
mHD9i0rwk2RVq9r/1RNuTfp1MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQUU3NzdCNjQ1NUMxMUYxOEVDNzc0MUNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnOgAAwQAnO8SMA0GCSqGSIb3
DQEBCwUAA4IBAQA3ZxeP7f1EnDmZo6V2pDlClhhyV4L6FwuqmFZnmjCoMd40t2pz
sROF4RCuMZ0dRY6GTnJ4ZtrXAIajZqNAEQVjvjyYgOFjcjrT+QLE2oNqNwjTsWJK
hwv0VpYfiYW6u1zLpeCpQ5YN2m/xmeRMdDamb290ecf6KwUOR/QuO6fYkfcKUSA+
Kasf8yqFmDYap9I+dyYUjbSikFS5Iyp7jVY6xbCF7E0I+QvGPmeKPeEyHmyxNjGs
JE3i2jx909otzRiiVVPAR0N2ArJqgTly6Jr00KGL5XClNTTUlxb4RC3v+25AcgDP
mceRZ1fpFd3ugf4M0TrfozMz2RGJ+DamoYQg
-----END CERTIFICATE-----
Generated at Tue May 5 23:15:54 2026 by rpki-client