Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA134DC7B6B11F1AE16D0D7CE1D38B0.roa
File: 0FA134DC7B6B11F1AE16D0D7CE1D38B0.roa (raw, json)
Hash identifier: XOPD9tPuPIJ6sB0COEDof16WijAfTAZft4erlx/zmWM=
Subject key identifier: E1:AA:21:B1:EF:F7:B7:5B:64:F0:D6:DB:EF:5B:10:C9:A4:74:84:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA134DC7B6B11F1AE16D0D7CE1D38B0.roa
Signing time: Thu 09 Jul 2026 07:51:58 +0000
ROA not before: Thu 09 Jul 2026 07:51:53 +0000
ROA not after: Sun 16 Aug 2026 07:51:53 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115693 (0x1c3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 07:51:53 2026 GMT
Not After : Aug 16 07:51:53 2026 GMT
Subject: CN=6a4f531e-f043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:a3:53:e8:4f:44:48:3c:b2:b7:4c:8d:b7:
ae:83:19:f3:89:07:11:f7:78:89:25:4e:e2:65:8a:
39:d4:36:39:25:a3:f8:1d:c9:b2:e8:db:0c:e7:cf:
47:30:33:5a:0e:c3:74:05:f7:0d:76:b7:84:62:53:
43:fd:32:68:b5:9c:ea:ef:cc:b8:7f:9f:ec:3e:6c:
4a:8f:0d:b1:8b:df:6b:11:5e:5b:33:19:25:1a:f9:
53:0f:18:b5:08:3c:bb:cd:96:8d:65:35:95:5b:97:
53:4c:6f:26:3e:13:85:49:13:e3:c3:f0:81:7c:d1:
e5:94:47:7c:ff:89:c9:db:f8:b9:98:ea:db:b9:7b:
3b:e7:05:0a:32:0a:f7:3d:c3:e1:05:fe:7e:fe:9a:
cb:f7:61:f4:fd:fe:07:2c:71:dd:3b:49:4f:80:e0:
a5:2d:7e:6b:68:74:83:a4:f8:10:e4:3e:6a:01:bd:
49:49:00:b0:ad:1d:5a:72:1c:cf:3c:f9:12:49:e0:
4d:30:e8:6f:1c:1f:2f:09:0e:ed:41:49:96:ff:99:
ca:59:8d:7f:b5:30:53:36:d4:e9:96:38:99:e4:5d:
1a:d0:b1:ad:cd:49:7b:01:51:b3:14:aa:c9:b9:24:
e8:1a:72:7b:e5:4c:e2:a7:e9:6a:c2:88:d6:82:6f:
77:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:21:B1:EF:F7:B7:5B:64:F0:D6:DB:EF:5B:10:C9:A4:74:84:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FA134DC7B6B11F1AE16D0D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
69:79:8e:93:96:bf:ed:62:55:63:36:c0:b4:ec:da:e3:05:65:
b4:1d:3e:dd:71:7e:94:f0:42:36:9b:bc:8e:d6:f7:51:42:f6:
af:0f:26:47:72:bf:bf:04:c8:3e:31:38:a9:87:20:b4:f8:51:
06:e3:db:36:d6:d3:0d:c4:cd:f9:bc:45:c6:6b:6a:a3:57:59:
43:b6:0a:e1:1a:a0:b1:7c:0a:d5:0c:d3:78:fd:71:c1:b9:94:
2b:d5:3e:cd:97:b2:85:06:20:03:7c:3f:40:1b:29:c6:18:33:
ad:b3:42:3b:fc:02:f9:13:4b:49:2b:7d:23:27:91:da:ad:94:
09:36:a2:90:ac:21:63:33:99:c1:8f:5a:34:8d:8f:99:c3:86:
dc:6a:21:2f:8c:d1:a9:a9:e7:7f:71:c9:e7:66:bd:b6:bb:5e:
2b:5d:56:0c:57:7f:34:f9:b7:28:63:ce:b8:7f:ef:48:ca:d4:
1f:43:6f:9f:1e:d5:8c:fc:a5:53:83:3f:6a:e8:ad:64:a6:f8:
5c:78:1e:73:a5:16:0e:58:46:7d:84:f8:92:25:e1:26:04:56:
3f:57:a9:10:82:e1:86:ad:1f:21:6d:aa:e8:41:a9:68:7b:e7:
04:94:1d:9b:dd:fc:98:6c:f3:e0:b7:f7:5c:39:6c:14:71:13:
e0:70:38:40
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcPtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA5MDc1MTUzWhcNMjYwODE2MDc1MTUzWjAYMRYw
FAYDVQQDEw02YTRmNTMxZS1mMDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxTKjU+hPREg8srdMjbeugxnziQcR93iJJU7iZYo51DY5JaP4Hcmy6NsM
589HMDNaDsN0BfcNdreEYlND/TJotZzq78y4f5/sPmxKjw2xi99rEV5bMxklGvlT
Dxi1CDy7zZaNZTWVW5dTTG8mPhOFSRPjw/CBfNHllEd8/4nJ2/i5mOrbuXs75wUK
Mgr3PcPhBf5+/prL92H0/f4HLHHdO0lPgOClLX5raHSDpPgQ5D5qAb1JSQCwrR1a
chzPPPkSSeBNMOhvHB8vCQ7tQUmW/5nKWY1/tTBTNtTpljiZ5F0a0LGtzUl7AVGz
FKrJuSToGnJ75Uzip+lqwojWgm93yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGq
IbHv97dbZPDW2+9bEMmkdIS4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRkExMzREQzdCNkIxMUYxQUUxNkQwRDdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOeLAwQDnPZYMA0GCSqGSIb3
DQEBCwUAA4IBAQBpeY6Tlr/tYlVjNsC07NrjBWW0HT7dcX6U8EI2m7yO1vdRQvav
DyZHcr+/BMg+MTiphyC0+FEG49s21tMNxM35vEXGa2qjV1lDtgrhGqCxfArVDNN4
/XHBuZQr1T7Nl7KFBiADfD9AGynGGDOts0I7/AL5E0tJK30jJ5HarZQJNqKQrCFj
M5nBj1o0jY+Zw4bcaiEvjNGpqed/ccnnZr22u14rXVYMV380+bcoY864f+9IytQf
Q2+fHtWM/KVTgz9q6K1kpvhceB5zpRYOWEZ9hPiSJeEmBFY/V6kQguGGrR8hbaro
Qaloe+cElB2b3fyYbPPgt/dcOWwUcRPgcDhA
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:39 2026 by rpki-client