Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BE4D1AC716311F19B6FAB1BCF1D38B0.roa
File: 1BE4D1AC716311F19B6FAB1BCF1D38B0.roa (raw, json)
Hash identifier: myd7WsxxHIL2vz//YcFZWEx0eOnVPwV37qwoUPxHGuQ=
Subject key identifier: 4D:A9:0F:FC:67:F9:08:10:3F:DB:0F:DD:A6:B8:DA:23:D8:E9:20:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C09D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BE4D1AC716311F19B6FAB1BCF1D38B0.roa
Signing time: Fri 26 Jun 2026 13:29:51 +0000
ROA not before: Fri 26 Jun 2026 13:29:46 +0000
ROA not after: Mon 31 Aug 2026 13:29:46 +0000
asID: 399077
IP address blocks: 156.240.252.0/24 maxlen: 24
156.240.253.0/24 maxlen: 24
156.240.254.0/24 maxlen: 24
156.240.255.0/24 maxlen: 24
156.251.0.0/24 maxlen: 24
156.251.1.0/24 maxlen: 24
156.251.2.0/24 maxlen: 24
156.251.3.0/24 maxlen: 24
156.251.4.0/24 maxlen: 24
156.251.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114845 (0x1c09d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 13:29:46 2026 GMT
Not After : Aug 31 13:29:46 2026 GMT
Subject: CN=6a3e7ecf-251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:be:33:9d:19:8d:83:1a:e4:a3:79:d5:e8:
0d:a0:5d:7c:f6:ca:46:af:e5:f3:ea:9c:c9:0c:74:
28:32:65:e3:00:c4:f4:eb:8b:34:a6:9f:ba:31:50:
a0:d0:1c:bc:56:66:6a:6e:ef:35:26:38:54:ea:dd:
a7:4f:70:27:30:75:ca:b1:22:e8:b8:eb:b0:18:0a:
eb:ab:7a:62:fb:20:23:13:ed:35:f6:23:a1:08:e4:
c4:4a:0d:be:b2:95:3f:0c:8f:76:1a:a5:1c:e8:d6:
15:9b:9f:95:80:8d:1d:f5:1d:68:bf:f7:c5:0a:95:
c3:48:f4:d2:70:a0:24:12:88:81:b0:ef:e0:d6:14:
0d:1e:9a:63:f4:5d:9b:ba:23:a5:7f:48:c3:70:f3:
6a:d1:57:9c:8a:c7:80:07:91:87:2a:f2:12:34:87:
4f:77:21:42:ae:16:ed:92:bd:2b:15:71:38:05:38:
f3:bd:d5:e5:76:2c:79:3a:09:71:28:21:80:e7:b8:
e6:1d:1f:9c:be:e5:80:af:84:ea:4f:31:75:af:1f:
91:25:16:9c:5a:d4:66:1f:5a:fe:2e:08:22:6e:b8:
e5:d1:3c:58:01:7c:80:cb:30:2f:66:3d:46:00:69:
6e:6d:ab:c9:3a:2c:d1:41:e1:81:a8:70:de:4c:3b:
a2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A9:0F:FC:67:F9:08:10:3F:DB:0F:DD:A6:B8:DA:23:D8:E9:20:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BE4D1AC716311F19B6FAB1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.252.0/22
156.251.0.0-156.251.4.255
156.251.6.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d4:f9:d4:40:c9:68:84:f8:9a:82:32:10:fa:9f:00:9a:96:
dc:6a:39:82:9a:a7:e0:4f:ff:23:34:14:f9:2e:b0:52:0f:b2:
1f:d2:dd:4b:aa:54:ce:a6:ec:b0:ec:a3:c9:91:ab:90:0b:fe:
c3:45:61:0f:a8:5e:b3:8b:c5:1b:4d:f1:c1:6c:0b:ba:ac:cc:
a9:80:60:b0:b5:77:15:87:fd:4f:95:4d:10:ce:d9:e5:22:d7:
fc:d3:50:41:1f:32:65:f6:d2:12:f3:e4:4b:ce:67:08:3c:1c:
dd:d6:f1:84:d4:6e:d8:e9:9e:be:c6:39:d3:7f:0f:6b:c5:9e:
36:5f:0c:ea:8e:e3:eb:94:38:82:fc:c2:db:be:cb:29:65:a7:
59:ba:f8:3f:f9:b2:bf:94:84:ce:ac:9f:f6:ef:79:2d:a4:67:
97:00:91:c0:28:8a:dc:85:a4:ab:a9:87:6b:52:fd:40:c6:4c:
17:0f:d6:2c:ee:0b:0c:fa:e4:c1:17:51:e8:57:e0:a9:7e:b4:
c9:c6:16:a0:51:09:6c:63:0c:b1:23:58:1e:60:81:86:d5:3c:
b2:d3:87:c0:74:9e:e9:4c:7c:06:0d:fa:74:5e:98:81:0e:46:
9e:92:f5:b8:47:12:c7:53:58:75:75:f9:03:87:0e:0b:83:2e:
35:bf:4b:66
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgIDAcCdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI2MTMyOTQ2WhcNMjYwODMxMTMyOTQ2WjAYMRYw
FAYDVQQDEw02YTNlN2VjZi0yNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAski+M50ZjYMa5KN51egNoF189spGr+Xz6pzJDHQoMmXjAMT064s0pp+6
MVCg0By8VmZqbu81JjhU6t2nT3AnMHXKsSLouOuwGArrq3pi+yAjE+019iOhCOTE
Sg2+spU/DI92GqUc6NYVm5+VgI0d9R1ov/fFCpXDSPTScKAkEoiBsO/g1hQNHppj
9F2buiOlf0jDcPNq0VeciseAB5GHKvISNIdPdyFCrhbtkr0rFXE4BTjzvdXldix5
OglxKCGA57jmHR+cvuWAr4TqTzF1rx+RJRacWtRmH1r+Lggibrjl0TxYAXyAyzAv
Zj1GAGlubavJOizRQeGBqHDeTDui/QIDAQABo4ICtTCCArEwHQYDVR0OBBYEFE2p
D/xn+QgQP9sP3aa42iPY6SAzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQkU0RDFBQzcxNjMxMUYxOUI2RkFCMUJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAATAZAwQCnPD8MAsDAwCc+wMEAJz7BAME
AJz7BjANBgkqhkiG9w0BAQsFAAOCAQEANNT51EDJaIT4moIyEPqfAJqW3Go5gpqn
4E//IzQU+S6wUg+yH9LdS6pUzqbssOyjyZGrkAv+w0VhD6hes4vFG03xwWwLuqzM
qYBgsLV3FYf9T5VNEM7Z5SLX/NNQQR8yZfbSEvPkS85nCDwc3dbxhNRu2OmevsY5
038Pa8WeNl8M6o7j65Q4gvzC277LKWWnWbr4P/myv5SEzqyf9u95LaRnlwCRwCiK
3IWkq6mHa1L9QMZMFw/WLO4LDPrkwRdR6FfgqX60ycYWoFEJbGMMsSNYHmCBhtU8
stOHwHSe6Ux8Bg36dF6YgQ5GnpL1uEcSx1NYdXX5A4cOC4MuNb9LZg==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:18 2026 by rpki-client