Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C941B65F2311F1BE51C2F1CE1D38B0.roa
File: 14C941B65F2311F1BE51C2F1CE1D38B0.roa (raw, json)
Hash identifier: hUnAFya1O2gkCL6prRqDUqZ0/Ld9JWTBovAc2gQBtNU=
Subject key identifier: CA:8F:10:58:42:DE:C7:62:A8:91:C1:79:95:18:09:23:99:07:34:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C941B65F2311F1BE51C2F1CE1D38B0.roa
Signing time: Wed 03 Jun 2026 08:06:11 +0000
ROA not before: Wed 03 Jun 2026 08:06:06 +0000
ROA not after: Wed 08 Jul 2026 08:06:06 +0000
asID: 198247
IP address blocks: 156.238.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113545 (0x1bb89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:06:06 2026 GMT
Not After : Jul 8 08:06:06 2026 GMT
Subject: CN=6a1fe072-4b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:e3:bd:61:5c:f4:8e:16:0a:7e:fd:06:a2:
55:4f:0f:bb:d0:54:bb:3a:e8:4d:d6:9e:05:ed:8c:
d7:65:e6:6f:29:ba:fb:06:28:43:d4:07:c2:51:59:
46:07:f3:45:c6:2a:36:ed:6b:2c:f7:a0:d7:98:56:
6c:db:5a:48:b0:31:b2:2a:35:44:59:cb:24:c6:ac:
6b:67:68:ad:55:09:21:8b:86:13:91:05:c4:36:56:
21:c5:94:75:0b:22:e1:1b:9d:92:f0:77:f5:ed:22:
dd:42:e9:66:51:fd:18:ff:ed:53:cc:5d:a9:d9:63:
f8:0b:41:9e:af:8d:e8:32:f2:0b:5a:0e:25:55:f5:
fa:2a:e8:93:c7:5f:ba:40:37:f4:36:e2:05:79:36:
5f:17:05:fa:28:de:eb:5e:6c:89:a6:62:ac:bf:06:
1e:58:d3:d4:56:33:80:a7:5a:a0:fb:c6:00:23:82:
5d:e2:9c:8c:a9:e2:7d:0f:b7:f4:bc:ca:f1:e3:9b:
dc:7d:3e:58:33:49:71:12:24:fa:6a:24:3b:a8:3e:
1a:71:a9:99:6b:13:ed:c1:82:b4:cd:96:0b:73:5a:
bb:80:01:6d:47:bf:4c:b4:07:bb:ad:95:5c:3b:e1:
e9:86:9a:41:cb:c7:fa:a4:81:08:f3:c9:43:0a:34:
3b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8F:10:58:42:DE:C7:62:A8:91:C1:79:95:18:09:23:99:07:34:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14C941B65F2311F1BE51C2F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.84.0/24
Signature Algorithm: sha256WithRSAEncryption
61:47:47:66:a4:81:7a:06:19:d0:d0:10:bb:0e:97:c0:73:5c:
50:b5:d1:ba:d9:49:df:fb:8b:b9:34:4e:ab:b4:6d:78:41:0b:
de:96:27:9d:44:f5:03:3b:8a:9b:b7:28:a9:48:73:69:cf:6b:
b8:5b:4b:e8:02:2b:f8:35:b4:17:41:33:b1:58:9c:af:af:75:
bf:bd:5b:b0:0d:78:4c:8f:80:b5:07:77:f5:c6:ec:26:6b:72:
3a:e0:52:bc:96:7e:3a:07:93:4e:08:ac:28:62:4d:68:94:c4:
93:e6:b4:92:e5:0e:9c:44:eb:7e:6e:bf:01:2d:c7:17:cb:50:
36:30:8d:04:3d:64:07:ad:0b:11:d8:69:d8:5a:f8:b3:2e:7f:
22:e6:d9:52:32:09:47:5c:b5:d7:a4:0c:12:a2:d0:48:20:a2:
82:8a:d0:68:c3:8c:31:23:a5:45:20:2c:1b:6c:f6:1e:be:95:
a5:ca:83:cc:e7:77:de:f1:b4:31:4b:54:cf:4e:53:8c:28:40:
ab:0a:c0:84:67:62:b7:ff:1f:7a:7b:06:84:88:55:6c:e4:9a:
f0:c0:e8:c1:28:97:dc:44:c0:3c:c1:18:af:10:b3:57:b0:ef:
84:e0:82:f6:a2:eb:13:71:0d:ff:63:28:99:85:eb:f9:06:60:
61:a6:8f:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbuJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjAzMDgwNjA2WhcNMjYwNzA4MDgwNjA2WjAYMRYw
FAYDVQQDEw02YTFmZTA3Mi00YjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzdPjvWFc9I4WCn79BqJVTw+70FS7OuhN1p4F7YzXZeZvKbr7BihD1AfC
UVlGB/NFxio27Wss96DXmFZs21pIsDGyKjVEWcskxqxrZ2itVQkhi4YTkQXENlYh
xZR1CyLhG52S8Hf17SLdQulmUf0Y/+1TzF2p2WP4C0Ger43oMvILWg4lVfX6KuiT
x1+6QDf0NuIFeTZfFwX6KN7rXmyJpmKsvwYeWNPUVjOAp1qg+8YAI4Jd4pyMqeJ9
D7f0vMrx45vcfT5YM0lxEiT6aiQ7qD4acamZaxPtwYK0zZYLc1q7gAFtR79MtAe7
rZVcO+HphppBy8f6pIEI88lDCjQ7vQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMqP
EFhC3sdiqJHBeZUYCSOZBzTTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEM5NDFCNjVGMjMxMUYxQkU1MUMyRjFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5UMA0GCSqGSIb3DQEBCwUA
A4IBAQBhR0dmpIF6BhnQ0BC7DpfAc1xQtdG62Unf+4u5NE6rtG14QQveliedRPUD
O4qbtyipSHNpz2u4W0voAiv4NbQXQTOxWJyvr3W/vVuwDXhMj4C1B3f1xuwma3I6
4FK8ln46B5NOCKwoYk1olMST5rSS5Q6cROt+br8BLccXy1A2MI0EPWQHrQsR2GnY
WvizLn8i5tlSMglHXLXXpAwSotBIIKKCitBow4wxI6VFICwbbPYevpWlyoPM53fe
8bQxS1TPTlOMKECrCsCEZ2K3/x96ewaEiFVs5JrwwOjBKJfcRMA8wRivELNXsO+E
4IL2ousTcQ3/YyiZhev5BmBhpo9+
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:36 2026 by rpki-client