Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377101AA694011F1A43568E8CE1D38B0.roa
File: 377101AA694011F1A43568E8CE1D38B0.roa (raw, json)
Hash identifier: GT2CDi19kSZ0s8R7+sPMEtJY2SYinuKEOWBHU7S26aE=
Subject key identifier: 60:BB:54:0E:D5:33:C0:BB:F3:25:59:AC:1C:52:A6:D0:0A:78:96:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377101AA694011F1A43568E8CE1D38B0.roa
Signing time: Tue 16 Jun 2026 04:59:56 +0000
ROA not before: Tue 16 Jun 2026 04:59:50 +0000
ROA not after: Tue 21 Jul 2026 04:59:50 +0000
asID: 202036
IP address blocks: 156.249.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114116 (0x1bdc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 04:59:50 2026 GMT
Not After : Jul 21 04:59:50 2026 GMT
Subject: CN=6a30d84c-4099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:17:fe:c8:93:f5:49:23:88:27:c4:f0:02:
37:c5:a0:24:0c:72:75:e8:e3:44:c2:65:0a:df:c7:
fc:20:7e:94:b3:7b:c5:bb:ce:86:52:f4:2f:40:c7:
4f:4e:27:4c:25:29:cf:81:e0:b1:57:b0:01:57:0d:
f1:9b:6f:24:6f:ea:8d:69:8e:86:97:5c:f7:ab:f3:
ee:e4:97:1c:4b:32:e0:fa:e7:d0:09:90:33:b2:c0:
7e:d9:65:56:2f:a3:fd:08:c6:e4:f5:c8:c5:36:89:
d5:5d:b4:c9:49:e1:d0:fd:89:e9:89:45:be:98:a4:
f7:e9:12:d0:08:99:8e:77:b2:af:d5:db:c7:b5:ce:
61:be:fa:9b:6c:b7:0b:93:74:0d:e8:fd:1e:5d:e1:
7d:e8:25:ed:1b:1d:5f:73:aa:c8:42:01:56:e0:53:
67:0c:de:04:4e:86:07:9e:9f:67:25:e5:bd:bc:a9:
dd:d4:6e:48:cf:7b:e5:5e:97:f8:af:fe:dd:62:ac:
81:96:55:a0:bc:23:42:cc:bb:d2:de:6c:9c:dc:60:
98:2c:d1:11:0e:15:71:ff:54:57:c6:eb:97:39:a8:
41:29:ed:3b:43:2f:b8:10:0d:df:ef:fa:d9:ee:1f:
9d:63:69:03:a3:27:b0:5d:69:4e:64:14:7e:18:d1:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BB:54:0E:D5:33:C0:BB:F3:25:59:AC:1C:52:A6:D0:0A:78:96:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/377101AA694011F1A43568E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:8b:3b:94:16:ed:27:d4:b0:90:28:a6:0f:28:35:13:f5:
11:d8:33:b9:ac:60:83:28:36:11:c4:4d:c0:03:55:b8:d9:4a:
0f:f6:35:80:5c:64:92:9b:b6:2b:7a:d3:f7:f8:cf:47:f6:0f:
e1:74:bc:a1:33:28:10:95:6a:d2:18:78:5c:49:7d:af:82:2b:
89:6b:1d:5e:af:dc:72:7c:f8:58:76:68:f6:25:95:5b:23:cc:
75:ee:4a:1f:88:95:a9:43:31:09:63:d1:16:f1:18:15:00:25:
2c:2f:85:e3:14:c0:7e:28:f2:05:cd:4b:fc:82:34:eb:a0:9c:
58:8d:c4:34:9d:7c:c3:7b:81:a4:0a:8b:1a:6d:6d:ae:27:44:
8b:ec:60:85:f0:c0:92:63:7b:70:c5:20:7c:f2:bf:52:28:72:
d0:f3:48:49:f0:8d:e2:6c:84:22:b7:52:a7:aa:9d:f6:9e:fe:
ca:53:cd:fd:71:c9:c5:d2:c5:b5:8b:18:72:da:49:f8:93:1f:
a6:dc:ee:d4:de:ee:86:6c:b9:5d:c8:0e:23:5d:2f:d4:0a:0f:
4f:86:de:ff:9f:05:f6:22:9b:09:9e:62:d7:26:9b:86:57:b7:
c2:e1:37:96:eb:e4:60:d0:51:82:3e:cc:8d:b1:62:a5:94:7f:
03:e0:d8:88
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb3EMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MDQ1OTUwWhcNMjYwNzIxMDQ1OTUwWjAYMRYw
FAYDVQQDEw02YTMwZDg0Yy00MDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArCIX/siT9UkjiCfE8AI3xaAkDHJ16ONEwmUK38f8IH6Us3vFu86GUvQv
QMdPTidMJSnPgeCxV7ABVw3xm28kb+qNaY6Gl1z3q/Pu5JccSzLg+ufQCZAzssB+
2WVWL6P9CMbk9cjFNonVXbTJSeHQ/YnpiUW+mKT36RLQCJmOd7Kv1dvHtc5hvvqb
bLcLk3QN6P0eXeF96CXtGx1fc6rIQgFW4FNnDN4EToYHnp9nJeW9vKnd1G5Iz3vl
Xpf4r/7dYqyBllWgvCNCzLvS3myc3GCYLNERDhVx/1RXxuuXOahBKe07Qy+4EA3f
7/rZ7h+dY2kDoyewXWlOZBR+GNGRdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGC7
VA7VM8C78yVZrBxSptAKeJa6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNzcxMDFBQTY5NDAxMUYxQTQzNTY4RThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPnFMA0GCSqGSIb3DQEBCwUA
A4IBAQBMSYs7lBbtJ9SwkCimDyg1E/UR2DO5rGCDKDYRxE3AA1W42UoP9jWAXGSS
m7YretP3+M9H9g/hdLyhMygQlWrSGHhcSX2vgiuJax1er9xyfPhYdmj2JZVbI8x1
7kofiJWpQzEJY9EW8RgVACUsL4XjFMB+KPIFzUv8gjTroJxYjcQ0nXzDe4GkCosa
bW2uJ0SL7GCF8MCSY3twxSB88r9SKHLQ80hJ8I3ibIQit1Knqp32nv7KU839ccnF
0sW1ixhy2kn4kx+m3O7U3u6GbLldyA4jXS/UCg9Pht7/nwX2IpsJnmLXJpuGV7fC
4TeW6+Rg0FGCPsyNsWKllH8D4NiI
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:34 2026 by rpki-client