Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CBB4810582911F1A1F16F08CF1D38B0.roa
File: 2CBB4810582911F1A1F16F08CF1D38B0.roa (raw, json)
Hash identifier: RjjCmIoEBpwUSJFIEb8JdpGkHHm0uxMTlt70KTLKhvc=
Subject key identifier: D0:7A:15:6F:C5:D8:9A:BF:EC:EB:2C:A6:2A:83:02:04:0A:4E:14:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B986
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CBB4810582911F1A1F16F08CF1D38B0.roa
Signing time: Mon 25 May 2026 11:02:10 +0000
ROA not before: Mon 25 May 2026 11:02:04 +0000
ROA not after: Fri 25 May 2029 11:02:04 +0000
asID: 17561
IP address blocks: 156.225.72.0/24 maxlen: 24
156.229.0.0/24 maxlen: 24
156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
156.245.164.0/24 maxlen: 24
156.245.165.0/24 maxlen: 24
156.245.166.0/24 maxlen: 24
156.245.167.0/24 maxlen: 24
156.245.172.0/24 maxlen: 24
156.245.173.0/24 maxlen: 24
156.245.174.0/24 maxlen: 24
156.245.175.0/24 maxlen: 24
156.249.124.0/24 maxlen: 24
156.249.125.0/24 maxlen: 24
156.249.126.0/24 maxlen: 24
156.249.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113030 (0x1b986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 11:02:04 2026 GMT
Not After : May 25 11:02:04 2029 GMT
Subject: CN=6a142c31-f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:50:6f:fd:20:4b:bd:d2:a8:1d:18:70:f5:76:
14:f6:20:5a:3d:1f:b1:47:a7:57:20:e5:ca:47:a1:
72:06:59:09:bd:fa:7f:e5:41:97:b8:b3:58:17:7e:
4a:0d:e0:51:b7:dc:10:25:b1:ee:37:fe:d9:2c:00:
c7:25:1a:21:ce:50:96:8e:11:fc:b6:35:69:9e:22:
10:42:f3:9f:2a:97:b0:bc:cc:f2:00:d4:a4:56:65:
17:86:4a:f3:1b:ef:4f:d9:10:65:20:64:35:97:a4:
3a:2e:db:5a:f4:96:02:43:82:4c:9b:55:77:85:a0:
a4:cd:91:4b:1f:3c:a7:f7:96:ea:3d:a1:49:f4:97:
76:04:3d:61:ef:0c:6d:fb:3f:c3:80:2d:e6:b4:20:
31:fb:50:fd:6d:ac:2c:45:d9:de:fa:cd:32:be:72:
a1:ab:f3:8f:b6:f3:78:b5:b9:45:31:39:f3:bf:1a:
22:58:ed:3e:f1:c2:3c:ce:8e:ed:1a:e1:b2:bb:02:
aa:ce:31:aa:47:19:1d:d9:c1:9f:d9:37:39:db:8b:
3c:22:15:be:69:18:49:19:d1:32:00:5f:58:eb:37:
6f:77:67:67:5b:23:99:97:55:fa:68:5f:45:14:fc:
4a:7f:3d:89:62:e6:56:78:11:48:03:88:c1:12:30:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:15:6F:C5:D8:9A:BF:EC:EB:2C:A6:2A:83:02:04:0A:4E:14:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CBB4810582911F1A1F16F08CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.72.0/24
156.229.0.0/24
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
156.245.164.0/22
156.245.172.0/22
156.249.124.0/22
Signature Algorithm: sha256WithRSAEncryption
58:0f:2f:85:4d:b3:d7:12:d8:c1:5e:fa:bf:b0:38:6b:11:ea:
ed:9b:61:03:c9:57:e3:8d:4b:9e:64:61:24:94:9c:b1:f3:2c:
8c:1b:84:f1:a3:cd:98:46:13:97:05:87:08:44:77:d5:24:ea:
1e:56:6a:66:e2:04:20:cf:4c:b4:8d:bd:3e:5f:55:4c:33:42:
a1:52:a4:fe:f2:10:52:29:ba:94:31:93:17:0b:aa:32:7d:ae:
69:88:41:7f:3c:a0:77:6e:22:f6:be:9e:13:b8:87:e8:21:e2:
53:90:f5:5b:db:00:54:6d:a4:d0:1a:ec:26:e8:cf:d0:ac:a3:
61:6d:47:eb:45:8a:d1:66:e8:f0:26:56:00:72:88:15:73:68:
e5:72:5b:d3:c6:ce:0f:49:04:04:be:39:94:1c:da:65:13:7e:
a2:7a:ec:8c:b7:30:82:3e:33:22:43:31:7e:a5:37:0c:50:c5:
d3:b1:48:dc:4b:67:c5:b2:9b:ea:ba:bd:3e:57:47:45:62:06:
71:f3:0e:fc:80:dd:95:ab:fb:d5:4d:28:ea:76:54:3a:99:91:
f6:db:59:7a:65:98:f3:02:9d:8d:8c:e4:b6:f8:ed:bf:bd:40:
fe:35:b2:a8:28:24:a4:d2:00:2a:ee:ff:e3:d2:d5:e1:a4:6f:
01:a1:5f:e4
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAbmGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI1MTEwMjA0WhcNMjkwNTI1MTEwMjA0WjAYMRYw
FAYDVQQDEw02YTE0MmMzMS1mMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5FBv/SBLvdKoHRhw9XYU9iBaPR+xR6dXIOXKR6FyBlkJvfp/5UGXuLNY
F35KDeBRt9wQJbHuN/7ZLADHJRohzlCWjhH8tjVpniIQQvOfKpewvMzyANSkVmUX
hkrzG+9P2RBlIGQ1l6Q6Ltta9JYCQ4JMm1V3haCkzZFLHzyn95bqPaFJ9Jd2BD1h
7wxt+z/DgC3mtCAx+1D9bawsRdne+s0yvnKhq/OPtvN4tblFMTnzvxoiWO0+8cI8
zo7tGuGyuwKqzjGqRxkd2cGf2Tc524s8IhW+aRhJGdEyAF9Y6zdvd2dnWyOZl1X6
aF9FFPxKfz2JYuZWeBFIA4jBEjDfFwIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFNB6
FW/F2Jq/7OsspiqDAgQKThTYMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQ0JCNDgxMDU4MjkxMUYxQTFGMTZGMDhDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAnOFIAwQAnOUAAwQAnOkwAwQA
nO6iAwQAnO+GAwQCnPWkAwQCnPWsAwQCnPl8MA0GCSqGSIb3DQEBCwUAA4IBAQBY
Dy+FTbPXEtjBXvq/sDhrEertm2EDyVfjjUueZGEklJyx8yyMG4Txo82YRhOXBYcI
RHfVJOoeVmpm4gQgz0y0jb0+X1VMM0KhUqT+8hBSKbqUMZMXC6oyfa5piEF/PKB3
biL2vp4TuIfoIeJTkPVb2wBUbaTQGuwm6M/QrKNhbUfrRYrRZujwJlYAcogVc2jl
clvTxs4PSQQEvjmUHNplE36ieuyMtzCCPjMiQzF+pTcMUMXTsUjcS2fFspvqur0+
V0dFYgZx8w78gN2Vq/vVTSjqdlQ6mZH221l6ZZjzAp2NjOS2+O2/vUD+NbKoKCSk
0gAq7v/j0tXhpG8BoV/k
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:01 2026 by rpki-client