Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4CC6CA5A7211F1AB170DF0CE1D38B0.roa
File: 3F4CC6CA5A7211F1AB170DF0CE1D38B0.roa (raw, json)
Hash identifier: 7V9MMZ54Iyv4gTCaUJ6tbwFtNaGfXPnFtNztDEdkGt0=
Subject key identifier: 62:48:12:A0:B5:10:A5:5E:0F:C6:AB:5D:A6:C7:08:8B:16:4F:81:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4CC6CA5A7211F1AB170DF0CE1D38B0.roa
Signing time: Thu 28 May 2026 08:50:16 +0000
ROA not before: Thu 28 May 2026 08:50:11 +0000
ROA not after: Mon 06 Jul 2026 08:50:11 +0000
asID: 401696
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113289 (0x1ba89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:50:11 2026 GMT
Not After : Jul 6 08:50:11 2026 GMT
Subject: CN=6a1801c8-fce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ea:af:2e:d0:f8:8a:c0:1f:8b:48:7d:59:09:
a6:fd:4c:49:d1:2b:f6:73:27:bd:a2:e1:f6:f4:ed:
b1:72:e4:97:a0:63:49:fd:85:a2:84:ca:91:99:fe:
f2:57:0c:78:7b:e5:d5:e5:18:81:43:d4:ce:d5:3b:
c2:ba:00:a2:c8:9e:22:d0:55:fb:e4:d0:4c:cb:3a:
b2:11:9e:88:3b:49:11:f2:08:a3:38:01:fd:84:27:
01:5e:bb:eb:64:20:72:15:44:98:6d:e0:6e:bc:c7:
d2:a8:d0:70:0f:18:f4:28:6e:3d:d7:15:87:e7:fe:
0f:36:b7:f4:be:04:be:fd:b7:3e:1e:bd:7a:b5:59:
2e:39:67:d1:c9:a1:24:c3:81:05:d0:a9:e9:00:2c:
13:88:ae:f0:7b:fa:73:b6:b5:a5:e7:ef:98:d9:ce:
fd:95:1d:40:9a:c0:34:24:73:e7:2c:a1:07:67:4f:
09:e8:4c:3f:08:bb:54:39:2d:c2:6f:7d:65:bc:84:
3d:63:d8:74:9c:f0:64:ed:1a:5a:4e:e5:44:ca:3a:
24:e1:f2:4d:68:5a:6d:58:b4:50:8f:95:43:06:02:
21:bb:c2:2f:d6:b3:80:85:db:ac:c0:b3:c1:b5:c4:
4b:10:21:ce:52:1f:87:97:bc:c3:b6:dc:2c:60:65:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:48:12:A0:B5:10:A5:5E:0F:C6:AB:5D:A6:C7:08:8B:16:4F:81:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4CC6CA5A7211F1AB170DF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
42:ad:39:2a:31:fe:f3:85:f4:0d:17:9d:d7:a9:08:4e:f0:84:
51:44:f0:4c:cb:15:5b:8a:66:c2:2d:18:23:15:98:a4:a3:73:
f1:db:09:6c:4c:fc:e3:37:88:4d:3a:00:86:3e:e0:c5:7b:0e:
09:2c:d2:f5:b9:88:51:b5:f1:07:a8:00:25:47:b7:4e:21:8a:
70:af:3e:b1:41:b5:f0:35:8d:59:42:77:92:54:35:26:bb:6b:
c9:4f:13:16:73:0f:47:9f:50:d1:a0:80:a6:da:bd:b1:1e:56:
82:d2:ba:86:f1:73:c8:16:42:83:61:89:4e:8c:bc:d5:35:ed:
61:f2:2f:98:19:68:02:75:5f:7a:0a:87:dd:c9:53:75:bc:f4:
2f:ac:ba:3e:6a:79:b9:b8:9b:bc:a6:69:8d:8f:2c:2a:5f:b7:
14:61:69:ee:da:25:46:bb:e9:18:85:b1:23:b8:ec:5e:82:a6:
10:e4:0f:51:62:a4:e2:c1:72:26:b1:87:53:85:30:a6:01:89:
16:1d:7f:69:d9:5c:0e:fa:7a:4a:9f:af:b1:d9:8d:ff:d7:b9:
b8:d3:a2:47:e3:e0:e4:db:7d:dd:0b:16:9e:e6:9d:94:89:6a:
5f:3e:73:02:56:ec:af:5a:97:60:be:68:24:01:a6:74:94:7d:
7c:a9:8b:c2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbqJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDg1MDExWhcNMjYwNzA2MDg1MDExWjAYMRYw
FAYDVQQDEw02YTE4MDFjOC1mY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm+qvLtD4isAfi0h9WQmm/UxJ0Sv2cye9ouH29O2xcuSXoGNJ/YWihMqR
mf7yVwx4e+XV5RiBQ9TO1TvCugCiyJ4i0FX75NBMyzqyEZ6IO0kR8gijOAH9hCcB
XrvrZCByFUSYbeBuvMfSqNBwDxj0KG491xWH5/4PNrf0vgS+/bc+Hr16tVkuOWfR
yaEkw4EF0KnpACwTiK7we/pztrWl5++Y2c79lR1AmsA0JHPnLKEHZ08J6Ew/CLtU
OS3Cb31lvIQ9Y9h0nPBk7RpaTuVEyjok4fJNaFptWLRQj5VDBgIhu8Iv1rOAhdus
wLPBtcRLECHOUh+Hl7zDttwsYGWLIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGJI
EqC1EKVeD8arXabHCIsWT4HQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRjRDQzZDQTVBNzIxMUYxQUIxNzBERjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQBCrTkqMf7zhfQNF53XqQhO8IRRRPBMyxVbimbCLRgjFZiko3Px2wlsTPzj
N4hNOgCGPuDFew4JLNL1uYhRtfEHqAAlR7dOIYpwrz6xQbXwNY1ZQneSVDUmu2vJ
TxMWcw9Hn1DRoICm2r2xHlaC0rqG8XPIFkKDYYlOjLzVNe1h8i+YGWgCdV96Cofd
yVN1vPQvrLo+anm5uJu8pmmNjywqX7cUYWnu2iVGu+kYhbEjuOxegqYQ5A9RYqTi
wXImsYdThTCmAYkWHX9p2VwO+npKn6+x2Y3/17m406JH4+Dk233dCxae5p2UiWpf
PnMCVuyvWpdgvmgkAaZ0lH18qYvC
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:58 2026 by rpki-client