Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E9C5127E1811F18157F513CF1D38B0.roa
File: 14E9C5127E1811F18157F513CF1D38B0.roa (raw, json)
Hash identifier: R/IwENHnY134XWfLzVgCHclRidip/sW654M1/UuP1KU=
Subject key identifier: EC:EA:9B:0A:D6:67:73:CF:82:64:79:53:61:80:23:46:D7:76:3E:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E9C5127E1811F18157F513CF1D38B0.roa
Signing time: Sun 12 Jul 2026 17:35:32 +0000
ROA not before: Sun 12 Jul 2026 17:35:28 +0000
ROA not after: Tue 06 Oct 2026 17:35:28 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115907 (0x1c4c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 17:35:28 2026 GMT
Not After : Oct 6 17:35:28 2026 GMT
Subject: CN=6a53d064-832f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:77:0b:1a:e1:94:b9:c5:0c:3a:4f:44:bc:
08:a4:b7:5d:2c:8b:ee:93:30:48:29:c4:98:be:80:
22:f7:20:43:b3:ca:9a:95:bd:5e:d3:26:83:f3:34:
3b:0c:ca:f0:69:11:cc:a5:1e:f0:d1:02:27:e7:19:
e9:00:24:b9:fa:1b:64:ee:e8:e2:2b:09:2f:a5:2c:
ac:d2:fb:41:8e:c3:32:3e:8a:9f:fe:d2:7e:1d:92:
51:35:14:99:d7:13:6f:65:0c:80:e4:98:72:59:3a:
1b:af:01:83:34:a8:9e:a6:a2:bb:de:96:12:9f:d1:
63:64:61:b2:1d:1a:3c:7e:cd:d5:42:bd:9d:23:8f:
9c:65:2f:75:c8:3c:59:05:30:e2:44:91:e9:1f:12:
e6:a7:0c:69:49:ed:c9:8c:06:6d:19:bf:6f:3a:22:
e3:95:4d:70:d3:4b:c6:80:79:1d:d0:34:bf:10:68:
86:c8:12:2c:3d:6e:f4:de:11:3d:e3:72:87:6b:b0:
7c:fe:7c:65:a2:65:9c:f1:0b:4d:9d:ad:7b:e5:e6:
8a:92:62:61:d0:33:d9:6e:7c:01:bc:e1:34:be:98:
da:eb:51:9e:ac:51:96:18:7d:6d:52:b5:f9:3b:55:
71:80:87:ef:a2:1a:be:f4:0d:7f:22:85:97:6e:af:
a9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EA:9B:0A:D6:67:73:CF:82:64:79:53:61:80:23:46:D7:76:3E:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14E9C5127E1811F18157F513CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
24:58:38:06:e5:05:22:49:a1:37:4b:66:a1:bf:14:e2:a2:5f:
cc:8c:f7:54:96:fc:ee:a1:32:fa:b4:16:e9:e9:c0:e4:2b:44:
b3:3e:7a:d5:23:b3:7b:6d:ff:2c:4c:92:e3:a9:70:df:a5:df:
fe:5a:71:31:7c:06:28:c6:21:ab:99:72:09:c8:25:77:f2:c7:
42:05:25:d4:e2:49:c9:3f:39:ac:3e:7f:fb:f1:9e:69:73:42:
78:8b:c3:e5:5e:70:1d:8e:1e:75:9f:13:33:0c:cb:19:57:1e:
59:3f:ee:5d:0f:b3:27:78:77:cb:77:a7:0f:66:37:1e:ca:fa:
9b:7b:aa:f3:00:a5:0b:0a:f0:e9:8b:a6:b1:8e:ce:3e:cb:a7:
f7:80:e4:f8:94:ee:3d:81:54:80:38:fd:6d:ab:79:1b:6e:2b:
3c:75:8e:2a:36:a3:3b:95:40:e9:04:d4:24:9c:88:05:0f:80:
41:1e:04:d4:fa:91:0f:56:ae:36:bb:77:e0:64:70:b1:d6:18:
6e:c6:7d:62:77:6b:ea:fd:8e:fe:25:39:e5:ef:79:4c:b4:91:
ee:91:0e:df:bd:9d:9b:56:bc:f2:c9:41:8c:0c:fd:bf:86:be:
1f:8b:4f:d8:97:9d:a7:79:42:2b:a2:d3:e7:2a:6f:69:99:a9:
38:2f:8a:94
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcTDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzEyMTczNTI4WhcNMjYxMDA2MTczNTI4WjAYMRYw
FAYDVQQDEw02YTUzZDA2NC04MzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvad3CxrhlLnFDDpPRLwIpLddLIvukzBIKcSYvoAi9yBDs8qalb1e0yaD
8zQ7DMrwaRHMpR7w0QIn5xnpACS5+htk7ujiKwkvpSys0vtBjsMyPoqf/tJ+HZJR
NRSZ1xNvZQyA5JhyWTobrwGDNKiepqK73pYSn9FjZGGyHRo8fs3VQr2dI4+cZS91
yDxZBTDiRJHpHxLmpwxpSe3JjAZtGb9vOiLjlU1w00vGgHkd0DS/EGiGyBIsPW70
3hE943KHa7B8/nxlomWc8QtNna175eaKkmJh0DPZbnwBvOE0vpja61GerFGWGH1t
UrX5O1VxgIfvohq+9A1/IoWXbq+pdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOzq
mwrWZ3PPgmR5U2GAI0bXdj7tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEU5QzUxMjdFMTgxMUYxODE1N0Y1MTNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOMAAwQAnOxMMA0GCSqGSIb3
DQEBCwUAA4IBAQAkWDgG5QUiSaE3S2ahvxTiol/MjPdUlvzuoTL6tBbp6cDkK0Sz
PnrVI7N7bf8sTJLjqXDfpd/+WnExfAYoxiGrmXIJyCV38sdCBSXU4knJPzmsPn/7
8Z5pc0J4i8PlXnAdjh51nxMzDMsZVx5ZP+5dD7MneHfLd6cPZjceyvqbe6rzAKUL
CvDpi6axjs4+y6f3gOT4lO49gVSAOP1tq3kbbis8dY4qNqM7lUDpBNQknIgFD4BB
HgTU+pEPVq42u3fgZHCx1hhuxn1id2vq/Y7+JTnl73lMtJHukQ7fvZ2bVrzyyUGM
DP2/hr4fi0/Yl52neUIrotPnKm9pmak4L4qU
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:20 2026 by rpki-client