Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA989056DB11F1A5D81A0FCF1D38B0.roa
File: 3CCA989056DB11F1A5D81A0FCF1D38B0.roa (raw, json)
Hash identifier: NzP6G3HBNXHJDv/v2ABJI0HKEhmpYHeJDR6Y0LRpkdQ=
Subject key identifier: 04:A4:93:4B:62:76:3C:B7:63:87:CD:0C:73:48:34:97:40:0B:2B:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA989056DB11F1A5D81A0FCF1D38B0.roa
Signing time: Sat 23 May 2026 19:11:45 +0000
ROA not before: Sat 23 May 2026 19:11:39 +0000
ROA not after: Mon 29 Jun 2026 19:11:39 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112813 (0x1b8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 19:11:39 2026 GMT
Not After : Jun 29 19:11:39 2026 GMT
Subject: CN=6a11fbf0-0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:49:e9:cb:53:8f:ce:3b:50:20:c2:55:e6:c1:
85:7f:fd:c9:24:df:b1:fb:f5:9c:2f:d8:61:df:cb:
18:ee:c5:ba:ae:60:10:ac:53:68:fd:29:71:a4:1a:
d1:55:f8:32:18:2b:64:61:f0:81:5c:ce:5f:5e:4d:
d0:57:2e:5d:76:ab:f1:05:7b:d6:2f:da:bb:1a:5b:
62:8a:74:34:71:af:1e:c7:c9:d2:c8:90:62:c1:a5:
05:9b:84:37:c2:39:16:7b:f0:da:5b:a7:94:50:d2:
54:61:7e:99:17:55:6e:58:ac:39:3a:9d:d2:96:f9:
78:f9:e1:93:72:bb:3c:ea:ea:51:ab:67:b9:75:a4:
10:1b:fd:64:1f:ea:4f:9b:c4:56:0b:d3:ea:c4:80:
79:0a:67:e9:27:23:ca:15:54:ce:e8:13:8c:97:73:
1a:5a:5b:90:7f:a2:25:df:9b:45:68:84:bd:bd:9f:
e4:be:9d:b5:d9:ed:50:1a:5d:e0:c4:ea:24:64:d3:
69:20:90:ba:9f:47:1c:49:e8:7c:f5:ae:15:00:98:
40:78:e7:b3:c5:16:2b:e0:eb:06:a1:8b:91:75:50:
ff:82:2c:b9:a9:6c:b3:d5:46:36:35:fa:6b:20:6b:
a5:92:c2:8c:05:5c:2c:3b:8c:86:b6:50:c0:b8:a1:
35:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A4:93:4B:62:76:3C:B7:63:87:CD:0C:73:48:34:97:40:0B:2B:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CCA989056DB11F1A5D81A0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
56:72:fa:91:a4:f9:c8:aa:0b:19:c2:4d:84:96:d4:9c:7d:5a:
b9:0d:ac:7c:9e:48:99:e6:af:1c:3e:de:66:b8:d3:12:5b:d8:
81:54:f0:96:72:1e:81:b6:27:3f:c7:dd:14:61:a6:40:c4:ef:
ec:48:9c:d7:62:8b:69:cd:b8:c7:ca:34:62:7c:77:4d:4b:d4:
b8:3c:98:e1:56:00:78:11:09:b0:f5:c1:c1:1a:ed:f8:3c:d3:
df:31:19:e6:c0:bb:b4:08:ae:68:47:02:d1:83:9e:31:17:d7:
26:b5:13:c3:de:df:3e:b1:5e:48:ac:14:5b:2a:66:f8:61:17:
4d:b1:38:f5:79:ca:df:77:8f:ed:82:2d:89:bb:75:91:45:a8:
df:89:98:ad:12:18:9a:34:e1:5a:61:a4:4b:a3:9f:4c:9f:08:
e3:d5:4e:46:1c:db:34:cf:70:a4:39:87:71:f2:f5:26:3e:32:
13:df:a7:68:79:b1:73:4a:b7:e8:d9:40:0b:b5:25:bb:90:7e:
8f:ea:16:e3:22:46:c2:dc:ff:89:9a:f3:c0:c8:f2:dd:cd:30:
66:47:65:b0:76:c2:24:2d:d4:0d:92:ed:f8:d7:38:a3:b6:f6:
d9:4f:c4:e3:8d:b8:1c:da:c5:28:dc:3d:79:18:69:07:b4:63:
83:4c:5b:09
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAbitMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIzMTkxMTM5WhcNMjYwNjI5MTkxMTM5WjAYMRYw
FAYDVQQDEw02YTExZmJmMC0wZjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9Enpy1OPzjtQIMJV5sGFf/3JJN+x+/WcL9hh38sY7sW6rmAQrFNo/Slx
pBrRVfgyGCtkYfCBXM5fXk3QVy5ddqvxBXvWL9q7GltiinQ0ca8ex8nSyJBiwaUF
m4Q3wjkWe/DaW6eUUNJUYX6ZF1VuWKw5Op3Slvl4+eGTcrs86upRq2e5daQQG/1k
H+pPm8RWC9PqxIB5CmfpJyPKFVTO6BOMl3MaWluQf6Il35tFaIS9vZ/kvp212e1Q
Gl3gxOokZNNpIJC6n0ccSeh89a4VAJhAeOezxRYr4OsGoYuRdVD/giy5qWyz1UY2
NfprIGulksKMBVwsO4yGtlDAuKE1TwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFASk
k0tidjy3Y4fNDHNINJdACyswMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQ0NBOTg5MDU2REIxMUYxQTVEODFBMEZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBnOEAAwQBnOEMAwQAnOQDAwQB
nO4CMAwDBAOc/ngDBAGc/nwwDQYJKoZIhvcNAQELBQADggEBAFZy+pGk+ciqCxnC
TYSW1Jx9WrkNrHyeSJnmrxw+3ma40xJb2IFU8JZyHoG2Jz/H3RRhpkDE7+xInNdi
i2nNuMfKNGJ8d01L1Lg8mOFWAHgRCbD1wcEa7fg8098xGebAu7QIrmhHAtGDnjEX
1ya1E8Pe3z6xXkisFFsqZvhhF02xOPV5yt93j+2CLYm7dZFFqN+JmK0SGJo04Vph
pEujn0yfCOPVTkYc2zTPcKQ5h3Hy9SY+MhPfp2h5sXNKt+jZQAu1JbuQfo/qFuMi
RsLc/4ma88DI8t3NMGZHZbB2wiQt1A2S7fjXOKO29tlPxOONuBzaxSjcPXkYaQe0
Y4NMWwk=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:50 2026 by rpki-client