Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D487A4865AD11F1AC02D2A9CE1D38B0.roa
File: 0D487A4865AD11F1AC02D2A9CE1D38B0.roa (raw, json)
Hash identifier: d5WsEeZX6q4BF46k1YN5G6q6/fWaFy9Tv0xGWNb6Dh0=
Subject key identifier: 31:4A:22:37:70:A1:7E:F1:2C:5A:2D:12:5D:88:A5:A0:6B:05:65:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCF1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D487A4865AD11F1AC02D2A9CE1D38B0.roa
Signing time: Thu 11 Jun 2026 15:48:55 +0000
ROA not before: Thu 11 Jun 2026 15:48:50 +0000
ROA not after: Sat 20 Jun 2026 15:48:50 +0000
asID: 139880
IP address blocks: 156.249.224.0/20 maxlen: 24
156.253.32.0/20 maxlen: 24
156.253.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 19:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113905 (0x1bcf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 11 15:48:50 2026 GMT
Not After : Jun 20 15:48:50 2026 GMT
Subject: CN=6a2ad8e7-89ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:13:d6:df:e6:2c:ee:97:7a:11:4a:a4:c3:35:
8e:10:5b:83:6f:12:e1:2a:14:65:f7:5f:4c:a5:ab:
d4:32:73:f0:a7:59:9a:24:1e:0e:7b:54:ed:d1:b1:
14:48:9a:08:ff:14:65:0e:ea:c9:13:94:a7:5b:8e:
c5:3b:56:97:d6:86:20:8d:96:f6:21:3e:75:ba:2c:
af:81:1a:2c:ce:83:89:ed:0b:e6:2b:01:f7:f2:af:
51:aa:16:7e:db:f4:5c:7f:f2:ba:84:2f:a0:21:a5:
b8:d2:1f:04:44:ca:b5:5f:dc:36:13:87:ac:1f:80:
e5:da:23:8d:ab:6b:7c:37:96:ab:bd:84:a8:f9:2e:
e9:59:60:75:e7:01:ad:42:e9:60:62:00:29:67:46:
6a:a3:12:a0:08:c3:4f:6d:bd:40:f2:46:d5:e3:f7:
a1:cc:f7:c6:0b:1b:82:10:aa:1a:49:d0:ef:c7:67:
00:c3:12:d2:49:2d:9d:ea:d2:79:6a:9f:2f:65:d3:
0b:bd:90:c9:00:16:4a:b8:17:66:1b:d1:23:ea:ce:
7d:57:97:1f:25:11:02:1c:e5:26:34:b0:67:84:13:
a0:a3:b8:66:67:93:5d:04:4c:ee:01:50:0c:54:f2:
49:60:f3:4c:cc:78:94:23:19:af:a1:55:eb:ab:b2:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:22:37:70:A1:7E:F1:2C:5A:2D:12:5D:88:A5:A0:6B:05:65:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D487A4865AD11F1AC02D2A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.224.0/20
156.253.32.0/20
156.253.144.0/20
Signature Algorithm: sha256WithRSAEncryption
04:cc:51:b5:96:de:4d:56:e4:47:b1:48:7b:5b:32:e7:6d:6a:
e4:8f:65:8a:c9:63:ce:08:2a:de:39:f9:32:29:d8:e6:26:17:
a8:50:b2:1c:8b:35:de:69:7a:d6:fe:1c:d3:2b:08:4f:45:48:
86:a6:8d:1e:ff:d4:1b:0c:4c:e8:d9:a9:91:39:cd:4a:4d:50:
1a:bb:06:19:01:41:88:f8:ad:86:ec:ae:e7:5d:26:93:98:72:
b9:a5:e7:49:f4:58:83:1b:d3:16:32:27:72:4a:2a:8d:f8:07:
67:ad:2a:0f:f1:fa:0b:d3:d7:06:31:b8:bc:9c:d0:59:7c:c5:
14:a0:8c:af:40:81:5e:f0:1b:09:5d:e1:48:03:a3:3d:a9:33:
dc:0a:13:5b:19:69:33:04:f6:78:ba:82:a0:eb:65:cd:fa:4f:
21:f7:05:40:5f:bb:c6:79:08:e6:e5:9c:0d:c6:4d:69:8d:ce:
79:4c:d6:f3:7a:74:ab:54:21:6e:70:7a:a5:e4:cd:cc:74:71:
0f:f7:56:e7:ec:4b:bd:a2:18:18:03:3b:cd:32:d6:c2:18:a0:
7a:00:cc:7a:82:f1:b5:02:d9:48:0c:5f:fd:34:d9:a5:f1:a5:
a0:9c:28:46:89:e8:42:42:e9:2c:a3:d1:4d:05:e9:61:fa:93:
81:8c:b5:e5
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAbzxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjExMTU0ODUwWhcNMjYwNjIwMTU0ODUwWjAYMRYw
FAYDVQQDEw02YTJhZDhlNy04OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9hPW3+Ys7pd6EUqkwzWOEFuDbxLhKhRl919MpavUMnPwp1maJB4Oe1Tt
0bEUSJoI/xRlDurJE5SnW47FO1aX1oYgjZb2IT51uiyvgRoszoOJ7QvmKwH38q9R
qhZ+2/Rcf/K6hC+gIaW40h8ERMq1X9w2E4esH4Dl2iONq2t8N5arvYSo+S7pWWB1
5wGtQulgYgApZ0ZqoxKgCMNPbb1A8kbV4/ehzPfGCxuCEKoaSdDvx2cAwxLSSS2d
6tJ5ap8vZdMLvZDJABZKuBdmG9Ej6s59V5cfJRECHOUmNLBnhBOgo7hmZ5NdBEzu
AVAMVPJJYPNMzHiUIxmvoVXrq7JVGQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFDFK
IjdwoX7xLFotEl2IpaBrBWXuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRDQ4N0E0ODY1QUQxMUYxQUMwMkQyQTlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEnPngAwQEnP0gAwQEnP2QMA0G
CSqGSIb3DQEBCwUAA4IBAQAEzFG1lt5NVuRHsUh7WzLnbWrkj2WKyWPOCCreOfky
KdjmJheoULIcizXeaXrW/hzTKwhPRUiGpo0e/9QbDEzo2amROc1KTVAauwYZAUGI
+K2G7K7nXSaTmHK5pedJ9FiDG9MWMidySiqN+AdnrSoP8foL09cGMbi8nNBZfMUU
oIyvQIFe8BsJXeFIA6M9qTPcChNbGWkzBPZ4uoKg62XN+k8h9wVAX7vGeQjm5ZwN
xk1pjc55TNbzenSrVCFucHql5M3MdHEP91bn7Eu9ohgYAzvNMtbCGKB6AMx6gvG1
AtlIDF/9NNml8aWgnChGiehCQukso9FNBelh+pOBjLXl
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:47 2026 by rpki-client