Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C64A19C5C0B11F19FD199A3CE1D38B0.roa
File: 1C64A19C5C0B11F19FD199A3CE1D38B0.roa (raw, json)
Hash identifier: QmjqLPYhgfoB2wicrRfS/gjFt33l/LTXLbZXUG1QGVI=
Subject key identifier: 87:69:2A:C9:1F:AD:5F:D5:C4:AA:2E:9F:7A:27:CB:FD:16:F7:8D:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C64A19C5C0B11F19FD199A3CE1D38B0.roa
Signing time: Sat 30 May 2026 09:37:02 +0000
ROA not before: Sat 30 May 2026 09:36:57 +0000
ROA not after: Sat 06 Jun 2026 09:36:57 +0000
asID: 137263
IP address blocks: 156.250.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113363 (0x1bad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 09:36:57 2026 GMT
Not After : Jun 6 09:36:57 2026 GMT
Subject: CN=6a1aafbe-f880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:94:4e:0d:8c:7a:63:ca:e5:07:01:af:ce:
4c:d3:aa:3b:91:67:8f:c5:0a:99:bf:b3:8c:59:96:
e3:85:6d:0f:72:09:20:c1:3c:20:c6:71:35:e1:4f:
9a:50:7c:ad:ea:20:37:70:3e:00:7f:1b:a7:f3:4c:
7c:da:ce:55:8b:f2:7e:23:c9:f9:8b:21:e1:5c:55:
a1:87:3e:f2:52:c0:3c:aa:09:9b:b1:3d:91:e9:17:
81:66:dc:27:a3:c3:a5:d6:eb:a8:bf:95:5b:46:99:
64:46:91:1f:b8:20:e7:92:f3:00:b8:e7:fa:0a:04:
0c:05:0e:02:d0:93:6c:65:ab:29:03:1b:0f:d5:2d:
55:d4:52:43:32:ae:03:5a:ca:7a:76:40:13:a1:42:
e2:33:82:a7:65:1f:84:68:12:43:37:49:48:e8:5a:
e4:ed:26:33:cf:9e:a3:d7:d5:cc:62:af:ea:25:f9:
aa:d7:11:52:ce:7e:67:60:28:6e:32:d5:4d:88:c5:
fb:e0:e1:7a:2e:d3:f5:37:d7:56:fb:9c:32:79:26:
6c:0a:df:50:ef:3b:19:a4:d5:e7:19:ac:62:89:0b:
d6:a9:75:0f:6d:ea:02:da:69:2e:69:66:b2:a7:c8:
8d:79:af:27:77:ad:7b:cc:b5:65:86:81:a4:ff:3f:
fb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:69:2A:C9:1F:AD:5F:D5:C4:AA:2E:9F:7A:27:CB:FD:16:F7:8D:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1C64A19C5C0B11F19FD199A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.250.2.0/24
Signature Algorithm: sha256WithRSAEncryption
10:40:ba:fc:9d:1c:00:46:8d:09:60:92:64:28:ac:87:bf:a3:
d5:0c:c3:84:b5:08:d9:be:5a:7f:4a:41:6a:22:e5:f9:16:77:
1f:80:30:74:e9:ce:8d:38:7f:8f:62:f7:b4:55:22:7d:f7:04:
fc:96:2d:61:46:77:ba:77:a1:99:ba:51:62:47:ad:44:1e:81:
2e:95:32:4b:9d:53:ab:fa:81:f3:b4:cc:93:aa:7c:a7:d2:42:
3a:2c:b0:fb:26:ab:c5:fe:d7:fd:36:25:ee:a8:d4:8c:9e:b6:
c5:1e:1e:d2:2a:86:c9:cb:dc:98:97:b8:1b:31:2e:34:0f:60:
5b:51:8d:89:51:93:02:e2:26:a1:90:4b:00:25:04:2d:0a:fc:
86:89:e6:6e:4c:84:74:4f:12:e6:5d:d9:d9:67:99:42:bd:58:
92:96:95:02:7a:b2:f8:1c:ae:fa:65:93:3c:26:3e:97:c5:45:
04:ca:f7:29:94:93:58:07:62:52:d1:f5:25:de:16:84:cb:1d:
ba:85:48:e9:25:33:87:b9:b8:a8:75:4d:5b:10:ab:3b:b1:f2:
1c:43:fb:9a:26:04:9e:8a:76:e0:4c:9e:87:ef:7a:e5:ad:af:
db:31:d6:9f:58:24:05:ac:18:e3:0c:e2:28:12:b8:26:16:d6:
f1:92:da:40
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbrTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTMwMDkzNjU3WhcNMjYwNjA2MDkzNjU3WjAYMRYw
FAYDVQQDEw02YTFhYWZiZS1mODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4u+UTg2MemPK5QcBr85M06o7kWePxQqZv7OMWZbjhW0PcgkgwTwgxnE1
4U+aUHyt6iA3cD4Afxun80x82s5Vi/J+I8n5iyHhXFWhhz7yUsA8qgmbsT2R6ReB
Ztwno8Ol1uuov5VbRplkRpEfuCDnkvMAuOf6CgQMBQ4C0JNsZaspAxsP1S1V1FJD
Mq4DWsp6dkAToULiM4KnZR+EaBJDN0lI6Frk7SYzz56j19XMYq/qJfmq1xFSzn5n
YChuMtVNiMX74OF6LtP1N9dW+5wyeSZsCt9Q7zsZpNXnGaxiiQvWqXUPbeoC2mku
aWayp8iNea8nd617zLVlhoGk/z/7zQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIdp
KskfrV/VxKoun3ony/0W942BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQzY0QTE5QzVDMEIxMUYxOUZEMTk5QTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPoCMA0GCSqGSIb3DQEBCwUA
A4IBAQAQQLr8nRwARo0JYJJkKKyHv6PVDMOEtQjZvlp/SkFqIuX5FncfgDB06c6N
OH+PYve0VSJ99wT8li1hRne6d6GZulFiR61EHoEulTJLnVOr+oHztMyTqnyn0kI6
LLD7JqvF/tf9NiXuqNSMnrbFHh7SKobJy9yYl7gbMS40D2BbUY2JUZMC4iahkEsA
JQQtCvyGieZuTIR0TxLmXdnZZ5lCvViSlpUCerL4HK76ZZM8Jj6XxUUEyvcplJNY
B2JS0fUl3haEyx26hUjpJTOHubiodU1bEKs7sfIcQ/uaJgSeinbgTJ6H73rlra/b
MdafWCQFrBjjDOIoErgmFtbxktpA
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:01 2026 by rpki-client