Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356954B659BE11F1824ADEA7CE1D38B0.roa
File: 356954B659BE11F1824ADEA7CE1D38B0.roa (raw, json)
Hash identifier: d2m6A8valVIv/VVyREAwrbQOmKaQBEkeBMe6Z9thqZI=
Subject key identifier: A1:0F:68:20:D0:EE:D9:FB:F8:EC:DD:E6:4E:90:CF:02:C3:BB:BE:67
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356954B659BE11F1824ADEA7CE1D38B0.roa
Signing time: Wed 27 May 2026 11:21:30 +0000
ROA not before: Wed 27 May 2026 11:21:25 +0000
ROA not after: Fri 26 Feb 2027 11:21:25 +0000
asID: 140951
IP address blocks: 156.231.56.0/23 maxlen: 24
156.231.56.0/24 maxlen: 24
156.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113203 (0x1ba33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 11:21:25 2026 GMT
Not After : Feb 26 11:21:25 2027 GMT
Subject: CN=6a16d3ba-abea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:0b:e3:98:41:c7:62:db:ab:3f:ae:76:99:
95:7e:5c:87:ba:e5:db:cc:24:62:16:05:2f:0f:52:
7f:a8:9c:49:7d:1d:d0:99:bf:5a:c5:cf:ae:35:45:
8f:5a:44:b1:0a:fd:10:b1:24:cf:ba:ec:f2:60:d0:
d4:50:ed:88:2f:dc:ad:49:8b:5b:12:ab:11:fb:1a:
7d:bc:89:1c:c1:b3:25:5a:6c:71:76:7a:8c:f8:eb:
ac:d7:3f:8d:27:3f:25:34:e9:fe:f6:c1:c4:30:8a:
e8:e1:72:24:b8:49:08:a3:6b:8d:95:ac:8c:66:d0:
d1:82:69:2c:2e:18:19:55:71:7e:c2:eb:20:29:37:
81:c1:c9:18:fa:8f:fd:1e:ca:80:74:2c:f3:da:8e:
46:0b:94:dc:be:8d:84:09:b4:19:d2:ee:86:6b:17:
58:f1:73:31:c9:79:c4:a3:55:eb:e2:ad:70:6b:4d:
3a:86:9e:c9:93:86:55:4c:df:66:9d:83:c3:4c:7b:
b9:c2:1e:55:15:8d:dd:7a:e1:e3:91:e2:c0:78:31:
4b:64:33:3e:39:fd:c3:6b:95:3c:c9:9d:ee:af:81:
48:83:36:1c:3b:91:e6:05:ed:bf:74:92:96:f6:d2:
d3:73:24:c1:43:14:de:96:47:c9:7b:8f:72:53:80:
09:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0F:68:20:D0:EE:D9:FB:F8:EC:DD:E6:4E:90:CF:02:C3:BB:BE:67
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/356954B659BE11F1824ADEA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
67:20:a8:79:a4:a9:35:87:6e:ee:c1:8d:a0:84:03:49:10:fe:
4b:7c:47:63:1e:1f:bf:83:4f:a3:0f:6a:ff:be:fb:6c:9d:02:
a4:b7:d3:fd:76:27:73:ad:3d:e2:28:c7:24:e4:e7:1a:c8:70:
48:a1:5d:0b:eb:f3:31:e5:5e:2a:08:c7:13:e5:db:53:75:c7:
19:b1:24:d0:29:fe:63:14:9c:94:7b:36:49:f2:40:e5:5c:5b:
24:fb:9f:6d:aa:5c:33:c6:0a:55:4e:c4:d4:50:ae:61:ed:98:
67:c0:a1:cc:ed:02:f4:52:00:6e:9d:91:a7:45:90:73:75:0d:
08:00:20:7b:7a:43:19:cb:ad:34:70:5a:75:01:23:04:4e:28:
9e:11:8b:c7:e6:26:2f:ad:37:53:54:67:49:75:09:35:2c:b5:
c4:f4:25:58:29:52:0b:7e:6b:93:60:71:f1:3d:dd:18:cc:f0:
e7:e0:b6:4e:55:30:d2:11:09:f8:ca:30:62:56:73:30:cf:20:
81:6d:83:49:a7:68:64:e9:32:1b:d9:c5:6f:fe:1b:49:bb:f9:
b9:de:9d:9f:9e:fd:61:40:e8:fa:e2:23:82:a2:45:c6:6e:be:
88:72:18:21:35:c6:c6:16:85:34:1c:e6:cd:a2:f2:07:75:f8:
0f:a9:d2:59
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbozMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI3MTEyMTI1WhcNMjcwMjI2MTEyMTI1WjAYMRYw
FAYDVQQDEw02YTE2ZDNiYS1hYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxn8L45hBx2Lbqz+udpmVflyHuuXbzCRiFgUvD1J/qJxJfR3Qmb9axc+u
NUWPWkSxCv0QsSTPuuzyYNDUUO2IL9ytSYtbEqsR+xp9vIkcwbMlWmxxdnqM+Ous
1z+NJz8lNOn+9sHEMIro4XIkuEkIo2uNlayMZtDRgmksLhgZVXF+wusgKTeBwckY
+o/9HsqAdCzz2o5GC5Tcvo2ECbQZ0u6GaxdY8XMxyXnEo1Xr4q1wa006hp7Jk4ZV
TN9mnYPDTHu5wh5VFY3deuHjkeLAeDFLZDM+Of3Da5U8yZ3ur4FIgzYcO5HmBe2/
dJKW9tLTcyTBQxTelkfJe49yU4AJfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKEP
aCDQ7tn7+Ozd5k6QzwLDu75nMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTY5NTRCNjU5QkUxMUYxODI0QURFQTdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOc4MA0GCSqGSIb3DQEBCwUA
A4IBAQBnIKh5pKk1h27uwY2ghANJEP5LfEdjHh+/g0+jD2r/vvtsnQKkt9P9didz
rT3iKMck5OcayHBIoV0L6/Mx5V4qCMcT5dtTdccZsSTQKf5jFJyUezZJ8kDlXFsk
+59tqlwzxgpVTsTUUK5h7ZhnwKHM7QL0UgBunZGnRZBzdQ0IACB7ekMZy600cFp1
ASMETiieEYvH5iYvrTdTVGdJdQk1LLXE9CVYKVILfmuTYHHxPd0YzPDn4LZOVTDS
EQn4yjBiVnMwzyCBbYNJp2hk6TIb2cVv/htJu/m53p2fnv1hQOj64iOCokXGbr6I
chghNcbGFoU0HObNovIHdfgPqdJZ
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:32 2026 by rpki-client