Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FEB1B7254DC11F189381DECCE1D38B0.roa
File: 3FEB1B7254DC11F189381DECCE1D38B0.roa (raw, json)
Hash identifier: eU8hNXlFUbRHzKLU7xaNLHRSdyCSlb+UQ3e5WkQEuGE=
Subject key identifier: 57:82:94:C2:FA:7D:79:A2:81:F4:F2:E2:53:A2:EC:57:60:19:41:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FEB1B7254DC11F189381DECCE1D38B0.roa
Signing time: Thu 21 May 2026 06:13:57 +0000
ROA not before: Thu 21 May 2026 06:13:52 +0000
ROA not after: Thu 25 Jun 2026 06:13:52 +0000
asID: 271355
IP address blocks: 156.236.194.0/24 maxlen: 24
156.236.195.0/24 maxlen: 24
156.236.196.0/24 maxlen: 24
156.236.197.0/24 maxlen: 24
156.236.198.0/24 maxlen: 24
156.236.199.0/24 maxlen: 24
156.236.200.0/24 maxlen: 24
156.236.201.0/24 maxlen: 24
156.236.202.0/24 maxlen: 24
156.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112329 (0x1b6c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 06:13:52 2026 GMT
Not After : Jun 25 06:13:52 2026 GMT
Subject: CN=6a0ea2a5-9a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:93:61:8a:4b:7d:35:3b:7d:ca:05:2d:ec:7d:
93:94:5f:5c:93:e2:57:70:d5:84:88:bf:85:50:f9:
f5:a8:c1:49:76:48:9e:00:e5:58:ea:ec:12:b6:d5:
17:f5:3b:af:c7:6d:23:9b:f9:8f:62:19:32:c5:e9:
0a:fb:b6:d6:92:80:c9:ae:43:22:d0:34:4b:fc:ac:
45:f9:09:a7:0a:9b:a0:3d:11:57:75:20:dd:61:54:
d2:a2:bb:c4:54:e1:eb:3a:4d:00:bd:4d:29:c3:b7:
4d:b3:0b:0f:4e:49:51:5b:be:2e:fc:c6:bb:6d:8e:
e3:f3:17:35:f0:68:cc:aa:a9:e3:c9:6f:ab:2d:0b:
9c:15:41:c8:c9:e8:2e:41:6c:4b:cf:b3:b6:e4:ed:
a2:45:04:7b:0d:75:20:52:fc:76:f6:63:3c:c1:8c:
30:4d:d9:a9:c5:5d:98:56:8d:69:7a:75:8c:53:c7:
5b:e9:19:b9:b2:5a:17:d1:9f:ef:82:35:e8:6a:64:
c9:28:d1:0a:f7:5c:d3:f2:de:be:40:cd:b5:b3:14:
9a:39:45:3c:b4:c9:5e:de:57:de:27:16:4f:26:c4:
32:3a:01:00:06:67:d7:86:10:e0:05:d8:05:44:eb:
e9:df:2f:c4:70:68:ea:1c:aa:88:fa:d0:e5:54:11:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:82:94:C2:FA:7D:79:A2:81:F4:F2:E2:53:A2:EC:57:60:19:41:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FEB1B7254DC11F189381DECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.194.0-156.236.203.255
Signature Algorithm: sha256WithRSAEncryption
90:bf:45:27:b4:f6:99:38:36:d0:12:2b:fa:66:0a:be:42:f2:
42:cc:b9:a2:a0:f8:bc:e1:fd:17:6e:9e:d2:48:16:62:00:ff:
47:b2:17:88:e9:22:61:e4:61:a5:c2:a1:eb:15:ca:ef:d6:1c:
46:d1:9e:c5:4d:ea:ba:66:43:55:59:88:44:7c:fb:0d:4f:bd:
c3:b1:ef:12:94:f8:db:ff:a6:b8:e2:f3:cd:0f:73:17:59:d9:
80:89:34:aa:ba:5c:ea:e4:83:be:f3:b4:72:43:2e:e7:ee:df:
84:dd:92:14:35:ce:12:3c:ed:b9:aa:2d:25:ff:96:a8:58:9e:
ec:7f:9b:9e:6b:bd:b0:c7:3f:5f:7c:23:51:bc:61:7d:5d:a3:
59:80:a2:f9:62:a9:f8:17:99:cb:4b:28:7a:7d:78:d9:1a:9a:
5b:08:6d:09:28:46:a8:80:9c:18:63:5b:a6:bb:80:bd:3b:c1:
57:63:1f:7d:56:ee:ed:44:27:01:92:2f:3b:7b:c5:f7:91:86:
f9:55:ff:6c:d0:80:d2:2c:df:fc:51:a1:1e:08:3f:46:13:a9:
42:c0:e4:ee:e5:ef:ce:b0:92:54:46:19:f8:72:f8:e2:79:9b:
24:10:aa:8e:99:2e:55:b8:39:8c:7e:49:a8:80:5c:4b:9a:57:
4e:bb:51:a4
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbbJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMDYxMzUyWhcNMjYwNjI1MDYxMzUyWjAYMRYw
FAYDVQQDEw02YTBlYTJhNS05YTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArZNhikt9NTt9ygUt7H2TlF9ck+JXcNWEiL+FUPn1qMFJdkieAOVY6uwS
ttUX9Tuvx20jm/mPYhkyxekK+7bWkoDJrkMi0DRL/KxF+QmnCpugPRFXdSDdYVTS
orvEVOHrOk0AvU0pw7dNswsPTklRW74u/Ma7bY7j8xc18GjMqqnjyW+rLQucFUHI
yeguQWxLz7O25O2iRQR7DXUgUvx29mM8wYwwTdmpxV2YVo1penWMU8db6Rm5sloX
0Z/vgjXoamTJKNEK91zT8t6+QM21sxSaOUU8tMle3lfeJxZPJsQyOgEABmfXhhDg
BdgFROvp3y/EcGjqHKqI+tDlVBGK7wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFeC
lML6fXmigfTy4lOi7FdgGUFbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRkVCMUI3MjU0REMxMUYxODkzODFERUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc7MIDBAKc7MgwDQYJKoZI
hvcNAQELBQADggEBAJC/RSe09pk4NtASK/pmCr5C8kLMuaKg+Lzh/RduntJIFmIA
/0eyF4jpImHkYaXCoesVyu/WHEbRnsVN6rpmQ1VZiER8+w1PvcOx7xKU+Nv/prji
880PcxdZ2YCJNKq6XOrkg77ztHJDLufu34TdkhQ1zhI87bmqLSX/lqhYnux/m55r
vbDHP198I1G8YX1do1mAovliqfgXmctLKHp9eNkamlsIbQkoRqiAnBhjW6a7gL07
wVdjH31W7u1EJwGSLzt7xfeRhvlV/2zQgNIs3/xRoR4IP0YTqULA5O7l786wklRG
Gfhy+OJ5myQQqo6ZLlW4OYx+SaiAXEuaV067UaQ=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:58 2026 by rpki-client