Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2579B32A5D9711F183F32D0BCF1D38B0.roa
File: 2579B32A5D9711F183F32D0BCF1D38B0.roa (raw, json)
Hash identifier: 4ZzYn0B+7IJAdkICU8O4TyMxz/SWoJ6NHrEJXTKLsSw=
Subject key identifier: 43:52:EC:14:A7:E2:F1:3E:00:B0:DB:E2:5F:75:A4:C9:23:40:30:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2579B32A5D9711F183F32D0BCF1D38B0.roa
Signing time: Mon 01 Jun 2026 08:51:58 +0000
ROA not before: Mon 01 Jun 2026 08:51:53 +0000
ROA not after: Tue 04 Aug 2026 08:51:53 +0000
asID: 13335
IP address blocks: 156.224.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113449 (0x1bb29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 08:51:53 2026 GMT
Not After : Aug 4 08:51:53 2026 GMT
Subject: CN=6a1d482e-b379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:ff:26:07:19:26:9d:8f:eb:3f:e2:ec:a2:
54:27:da:d3:6e:f7:41:7d:6f:2c:a2:11:0b:88:cb:
7e:7f:85:4f:d2:68:a5:a3:f5:73:8d:67:55:30:18:
fd:33:61:00:c0:36:fb:1f:d5:93:c5:f1:7c:8f:8a:
97:23:bb:3e:ce:5b:6b:50:c0:3a:b2:2e:e3:f4:ca:
88:a8:38:ae:e7:6a:51:e2:fa:58:f6:04:02:ed:c3:
2d:03:82:e7:0e:d8:19:6a:ca:0d:b6:6a:53:84:ba:
51:07:4a:63:74:67:aa:9c:e1:c3:4d:ba:c3:20:9a:
6d:37:fb:ab:c0:92:f3:dd:29:17:84:ca:1e:d0:12:
52:aa:b2:76:3c:15:75:a9:cf:2b:4d:a0:2d:85:e2:
46:6d:56:00:d8:4e:3a:6e:d5:06:da:a1:31:65:47:
d2:a3:43:55:43:08:e0:a1:00:b3:b0:2f:21:44:41:
aa:f2:56:13:95:90:0c:a0:e4:d2:e1:4e:32:68:db:
ae:6b:6e:ed:1c:e9:54:8b:8e:d0:08:81:ae:12:ef:
79:77:9f:af:b6:be:d8:ce:50:1b:c8:49:8c:e9:62:
d5:dd:0f:54:fe:08:19:df:4e:5a:9c:40:2d:c6:83:
1a:cd:ae:92:04:b1:d4:65:6b:62:f3:5f:92:60:4d:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:52:EC:14:A7:E2:F1:3E:00:B0:DB:E2:5F:75:A4:C9:23:40:30:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2579B32A5D9711F183F32D0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a6:00:27:c5:35:5e:26:cf:c4:c7:50:26:e0:c1:1e:26:ea:
ce:88:63:a3:52:23:4b:f4:49:11:3e:8f:4c:0c:2a:84:56:3a:
f0:42:0c:ed:2d:20:11:2e:16:13:28:3a:76:16:44:52:c2:5e:
16:f9:81:f3:bb:d9:4f:66:62:93:13:8d:9d:e0:58:c1:c4:62:
6a:30:1b:8c:54:5a:c2:da:f1:43:ff:04:e3:b7:4a:ad:52:0a:
aa:bb:03:20:7b:06:6b:b4:b1:d6:b1:6c:da:7c:f5:ba:06:b7:
ce:a8:6e:60:61:78:f5:96:a1:45:52:b9:57:14:b1:72:97:c5:
c5:6a:0d:a6:0b:be:85:d0:6a:d8:12:cd:2a:a3:1f:70:38:67:
7c:76:8b:af:7f:57:40:fc:fe:56:8f:b9:f8:b0:4d:65:78:ef:
bd:57:10:5e:20:1b:75:4e:47:2b:46:3a:b5:6c:18:83:b1:25:
fe:ff:f6:4b:10:8c:30:78:6d:a9:bf:ec:3e:96:0b:ce:55:0e:
46:0d:5e:8f:9f:e0:1a:1f:41:4a:2b:31:55:df:16:54:66:0f:
db:a0:7d:f6:44:e8:55:ad:89:d8:2f:62:1d:c4:22:5d:23:04:
51:f6:c3:03:f3:2b:c3:28:3e:ea:e7:e5:a9:b9:b0:64:4c:ce:
d3:cf:f0:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbspMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjAxMDg1MTUzWhcNMjYwODA0MDg1MTUzWjAYMRYw
FAYDVQQDEw02YTFkNDgyZS1iMzc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3Kj/JgcZJp2P6z/i7KJUJ9rTbvdBfW8sohELiMt+f4VP0milo/VzjWdV
MBj9M2EAwDb7H9WTxfF8j4qXI7s+zltrUMA6si7j9MqIqDiu52pR4vpY9gQC7cMt
A4LnDtgZasoNtmpThLpRB0pjdGeqnOHDTbrDIJptN/urwJLz3SkXhMoe0BJSqrJ2
PBV1qc8rTaAtheJGbVYA2E46btUG2qExZUfSo0NVQwjgoQCzsC8hREGq8lYTlZAM
oOTS4U4yaNuua27tHOlUi47QCIGuEu95d5+vtr7YzlAbyEmM6WLV3Q9U/ggZ305a
nEAtxoMaza6SBLHUZWti81+SYE1ycQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFENS
7BSn4vE+ALDb4l91pMkjQDCQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNTc5QjMyQTVEOTcxMUYxODNGMzJEMEJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOBJMA0GCSqGSIb3DQEBCwUA
A4IBAQBapgAnxTVeJs/Ex1Am4MEeJurOiGOjUiNL9EkRPo9MDCqEVjrwQgztLSAR
LhYTKDp2FkRSwl4W+YHzu9lPZmKTE42d4FjBxGJqMBuMVFrC2vFD/wTjt0qtUgqq
uwMgewZrtLHWsWzafPW6BrfOqG5gYXj1lqFFUrlXFLFyl8XFag2mC76F0GrYEs0q
ox9wOGd8douvf1dA/P5Wj7n4sE1leO+9VxBeIBt1TkcrRjq1bBiDsSX+//ZLEIww
eG2pv+w+lgvOVQ5GDV6Pn+AaH0FKKzFV3xZUZg/boH32ROhVrYnYL2IdxCJdIwRR
9sMD8yvDKD7q5+WpubBkTM7Tz/CD
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:56 2026 by rpki-client