Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C13B0E51EF11F186569914CF1D38B0.roa
File: 11C13B0E51EF11F186569914CF1D38B0.roa (raw, json)
Hash identifier: IZNPAj+JwhbCk7dW7ZyZ1cC+eXJ5CaSD3Epp5i1p49U=
Subject key identifier: 01:29:3D:F4:4C:B1:DD:48:50:5C:21:61:F0:BB:74:1B:1B:20:0F:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B565
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C13B0E51EF11F186569914CF1D38B0.roa
Signing time: Sun 17 May 2026 12:51:06 +0000
ROA not before: Sun 17 May 2026 12:51:02 +0000
ROA not after: Wed 24 Jun 2026 12:51:02 +0000
asID: 134365
IP address blocks: 156.239.52.0/23 maxlen: 24
156.239.52.0/24 maxlen: 24
156.239.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111973 (0x1b565)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 17 12:51:02 2026 GMT
Not After : Jun 24 12:51:02 2026 GMT
Subject: CN=6a09b9ba-412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:4c:f6:98:a1:53:35:ec:61:9a:b2:62:f1:
9a:76:47:42:13:c8:a1:1f:a8:94:ae:b0:17:bd:83:
9e:21:7b:f6:a8:e3:ac:a4:59:33:d1:45:5a:78:79:
91:4d:f9:76:cc:2a:a6:df:13:76:53:24:6b:90:fc:
df:c3:87:b0:4c:c3:94:82:bd:7e:96:fa:26:69:f1:
b1:80:e5:d5:88:bd:67:fa:9e:c2:2f:e4:b3:7d:7f:
f0:31:60:37:53:ef:0b:f0:db:09:c0:2e:8d:3c:6d:
4b:67:1f:01:ed:56:dd:1c:4b:b7:94:19:a7:ce:db:
53:8f:34:fa:78:53:75:0d:26:d1:cf:a2:39:1f:e7:
36:62:ef:36:b0:1c:37:ce:66:e2:85:e0:ff:52:f0:
25:c0:8b:47:8e:cb:43:64:ec:05:5a:ca:48:21:e3:
98:a0:2b:a7:b7:35:70:9a:26:58:38:ac:4b:b6:31:
e6:df:b0:43:f3:bd:a0:d5:69:cb:23:ad:24:ec:5c:
d7:b1:e9:c6:37:5f:f2:db:f4:32:7c:ea:d2:4f:c4:
22:14:3e:60:f3:18:47:7f:3c:f6:ef:aa:62:f6:3a:
3a:4d:f9:57:b1:81:86:48:e0:a8:99:50:ae:9e:c6:
53:a8:e9:a8:0b:5a:b9:76:2e:a8:f0:17:ff:b9:43:
55:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:29:3D:F4:4C:B1:DD:48:50:5C:21:61:F0:BB:74:1B:1B:20:0F:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11C13B0E51EF11F186569914CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.52.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:37:00:e3:bb:c1:85:14:fa:3e:60:06:11:50:5e:43:4c:94:
22:0b:76:4c:91:65:11:74:51:48:88:30:b9:0d:33:31:79:ce:
03:1a:5e:18:d9:90:ce:b8:04:83:45:d1:7a:96:95:0e:f0:d7:
bc:af:e4:50:6b:53:f9:1b:8b:24:14:d5:ff:18:ee:12:e7:3a:
13:ac:50:db:f4:1e:55:85:8b:f8:69:8e:84:c3:c2:14:98:e4:
f9:c9:25:c3:b4:44:5d:9c:53:0e:c2:4b:54:00:d3:f2:0b:58:
bf:42:4d:71:4a:26:0f:5d:17:c4:f4:1c:53:76:6c:b3:4d:ee:
e8:13:81:ba:f7:49:b9:f7:10:52:ef:3b:b9:fe:4c:53:12:5e:
dc:a8:65:0a:5c:e0:d9:6c:3f:e0:5f:27:1e:71:85:be:2a:d3:
17:1a:a9:ba:16:72:3d:46:e5:10:43:14:aa:0a:b2:81:da:39:
79:c9:9d:af:28:b0:8d:f6:c2:a1:9b:33:fb:34:b8:48:2f:cc:
63:bf:fb:e1:c3:c9:63:c9:dd:49:ac:f5:5d:b7:fe:ab:16:7c:
53:fc:da:06:91:fa:a8:22:41:38:48:39:3c:de:74:3e:e2:cf:
27:7d:55:e4:ce:5c:02:b8:55:22:24:4a:22:24:35:cb:2c:10:
a4:8e:8e:34
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbVlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE3MTI1MTAyWhcNMjYwNjI0MTI1MTAyWjAYMRYw
FAYDVQQDEw02YTA5YjliYS00MTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArs5M9pihUzXsYZqyYvGadkdCE8ihH6iUrrAXvYOeIXv2qOOspFkz0UVa
eHmRTfl2zCqm3xN2UyRrkPzfw4ewTMOUgr1+lvomafGxgOXViL1n+p7CL+SzfX/w
MWA3U+8L8NsJwC6NPG1LZx8B7VbdHEu3lBmnzttTjzT6eFN1DSbRz6I5H+c2Yu82
sBw3zmbiheD/UvAlwItHjstDZOwFWspIIeOYoCuntzVwmiZYOKxLtjHm37BD872g
1WnLI60k7FzXsenGN1/y2/QyfOrST8QiFD5g8xhHfzz276pi9jo6TflXsYGGSOCo
mVCunsZTqOmoC1q5di6o8Bf/uUNVlwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAEp
PfRMsd1IUFwhYfC7dBsbIA8tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUMxM0IwRTUxRUYxMUYxODY1Njk5MTRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnO80MA0GCSqGSIb3DQEBCwUA
A4IBAQBcNwDju8GFFPo+YAYRUF5DTJQiC3ZMkWURdFFIiDC5DTMxec4DGl4Y2ZDO
uASDRdF6lpUO8Ne8r+RQa1P5G4skFNX/GO4S5zoTrFDb9B5VhYv4aY6Ew8IUmOT5
ySXDtERdnFMOwktUANPyC1i/Qk1xSiYPXRfE9BxTdmyzTe7oE4G690m59xBS7zu5
/kxTEl7cqGUKXODZbD/gXycecYW+KtMXGqm6FnI9RuUQQxSqCrKB2jl5yZ2vKLCN
9sKhmzP7NLhIL8xjv/vhw8ljyd1JrPVdt/6rFnxT/NoGkfqoIkE4SDk83nQ+4s8n
fVXkzlwCuFUiJEoiJDXLLBCkjo40
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:17 2026 by rpki-client