Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B56C3FA760311F1A411A6C2CE1D38B0.roa
File: 0B56C3FA760311F1A411A6C2CE1D38B0.roa (raw, json)
Hash identifier: Sixrmj0rMZLaH9F2OCRqWw9YU/Su2OJ4GbTZBbL0YA0=
Subject key identifier: FF:D9:AA:18:22:7D:C6:1D:2D:4A:68:93:57:91:4F:F4:15:26:91:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C260
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B56C3FA760311F1A411A6C2CE1D38B0.roa
Signing time: Thu 02 Jul 2026 10:44:48 +0000
ROA not before: Thu 02 Jul 2026 10:44:43 +0000
ROA not after: Sat 25 Jul 2026 10:44:43 +0000
asID: 32043
IP address blocks: 156.230.16.0/22 maxlen: 24
156.230.52.0/22 maxlen: 24
156.230.134.0/23 maxlen: 24
156.232.2.0/23 maxlen: 24
156.232.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115296 (0x1c260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 10:44:43 2026 GMT
Not After : Jul 25 10:44:43 2026 GMT
Subject: CN=6a46411f-ffb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:72:d8:40:f5:31:2d:2d:01:15:29:bd:c0:
9b:aa:f9:15:7a:53:35:cf:48:48:ed:09:53:bc:be:
d4:b6:6e:51:59:fa:5c:e1:c2:d8:42:6b:f2:7e:9b:
81:00:e0:28:f9:52:3b:cc:3c:dc:bc:47:55:84:b9:
a5:40:f7:c8:a6:3a:bc:61:25:bf:1b:1c:5e:2c:f1:
70:e4:21:c7:09:59:fb:d9:4a:5c:da:1c:e5:bb:95:
34:a0:df:52:01:7b:48:8e:58:44:bb:96:65:2d:cb:
c3:b9:03:80:fa:4d:5b:17:62:ee:f5:df:82:7e:7a:
fb:7a:db:ed:46:5a:f5:0e:59:d4:32:d6:85:4f:1a:
61:70:86:51:ff:0e:63:f8:19:55:12:ba:60:0e:30:
d3:6a:ab:88:c6:39:1b:61:94:29:f7:9c:a4:b2:04:
09:24:19:15:a2:d8:74:ad:f1:d9:29:a5:aa:26:a1:
b2:a2:3f:3a:c2:db:fe:13:3d:0e:c9:3d:f5:6e:20:
8a:75:84:b5:70:96:cc:b0:0a:79:bf:cb:fd:ae:fe:
33:7c:33:39:9e:a6:40:6a:a4:06:40:01:ed:4c:de:
6f:18:d4:c2:2b:5c:3b:d2:69:d5:95:30:6e:70:d1:
a2:76:11:9d:fb:76:ed:cc:80:f2:c1:87:ea:62:9d:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:AA:18:22:7D:C6:1D:2D:4A:68:93:57:91:4F:F4:15:26:91:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B56C3FA760311F1A411A6C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.16.0/22
156.230.52.0/22
156.230.134.0/23
156.232.2.0/23
156.232.48.0/21
Signature Algorithm: sha256WithRSAEncryption
62:91:b7:7d:d3:e1:b0:44:d8:f4:6e:82:34:e8:8b:d3:02:28:
3b:23:47:00:9a:3e:c1:d4:73:f0:f5:2b:9c:38:de:da:19:c2:
45:07:6a:c1:77:c5:d9:48:e3:c1:2b:ae:ea:13:b6:f9:68:19:
ba:c0:96:9f:9a:ae:ae:a1:6c:41:2e:f7:e3:02:06:d3:c3:ea:
83:f8:21:aa:e1:8b:72:0f:ad:0d:5d:fc:98:0a:2d:cf:61:0f:
49:9c:25:1a:01:3e:83:cf:ac:07:b4:95:84:52:2a:a7:f4:b2:
33:84:ab:45:83:3a:2f:1a:05:e9:d9:75:e9:72:5c:56:c5:91:
8a:20:90:01:a2:0e:64:c5:fa:4c:3c:de:cc:fe:92:c9:83:7c:
42:7a:a0:d6:64:74:64:b7:71:c7:be:d2:5f:92:9a:36:f7:14:
1f:4a:6d:7f:41:35:69:87:55:98:36:7e:06:5d:e2:80:bd:91:
2e:f6:f3:bf:46:84:30:04:ef:d9:6e:86:5d:84:b9:b9:fa:cb:
69:d1:c8:81:c4:ef:87:a9:5b:aa:1f:ec:7d:4e:bd:3e:80:de:
55:d4:fc:22:e5:a9:70:a0:45:bc:e4:8b:54:0f:1e:70:92:c4:
7a:b2:9f:7d:46:90:c6:20:dd:87:10:bb:bd:ec:4f:2d:96:cf:
70:7e:04:85
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAcJgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAyMTA0NDQzWhcNMjYwNzI1MTA0NDQzWjAYMRYw
FAYDVQQDEw02YTQ2NDExZi1mZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzxpy2ED1MS0tARUpvcCbqvkVelM1z0hI7QlTvL7Utm5RWfpc4cLYQmvy
fpuBAOAo+VI7zDzcvEdVhLmlQPfIpjq8YSW/GxxeLPFw5CHHCVn72Upc2hzlu5U0
oN9SAXtIjlhEu5ZlLcvDuQOA+k1bF2Lu9d+Cfnr7etvtRlr1DlnUMtaFTxphcIZR
/w5j+BlVErpgDjDTaquIxjkbYZQp95yksgQJJBkVoth0rfHZKaWqJqGyoj86wtv+
Ez0OyT31biCKdYS1cJbMsAp5v8v9rv4zfDM5nqZAaqQGQAHtTN5vGNTCK1w70mnV
lTBucNGidhGd+3btzIDywYfqYp2GhQIDAQABo4ICujCCArYwHQYDVR0OBBYEFP/Z
qhgifcYdLUpok1eRT/QVJpFdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQjU2QzNGQTc2MDMxMUYxQTQxMUE2QzJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCnOYQAwQCnOY0AwQBnOaGAwQB
nOgCAwQDnOgwMA0GCSqGSIb3DQEBCwUAA4IBAQBikbd90+GwRNj0boI06IvTAig7
I0cAmj7B1HPw9SucON7aGcJFB2rBd8XZSOPBK67qE7b5aBm6wJafmq6uoWxBLvfj
AgbTw+qD+CGq4YtyD60NXfyYCi3PYQ9JnCUaAT6Dz6wHtJWEUiqn9LIzhKtFgzov
GgXp2XXpclxWxZGKIJABog5kxfpMPN7M/pLJg3xCeqDWZHRkt3HHvtJfkpo29xQf
Sm1/QTVph1WYNn4GXeKAvZEu9vO/RoQwBO/ZboZdhLm5+stp0ciBxO+HqVuqH+x9
Tr0+gN5V1Pwi5alwoEW85ItUDx5wksR6sp99RpDGIN2HELu97E8tls9wfgSF
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:41 2026 by rpki-client