Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063BEE0551A11F1B7B540E1CE1D38B0.roa
File: 4063BEE0551A11F1B7B540E1CE1D38B0.roa (raw, json)
Hash identifier: ODb0qNWD/xNNQCFWXon9L/zyW81pJFzeSZOhVm40Zv8=
Subject key identifier: 4A:44:D9:38:C2:32:8F:47:FD:26:3E:FF:56:F9:5B:9B:35:E5:7B:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B711
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063BEE0551A11F1B7B540E1CE1D38B0.roa
Signing time: Thu 21 May 2026 13:37:47 +0000
ROA not before: Thu 21 May 2026 13:37:42 +0000
ROA not after: Wed 19 Aug 2026 13:37:42 +0000
asID: 55020
IP address blocks: 156.224.16.0/23 maxlen: 24
156.224.18.0/23 maxlen: 24
156.224.20.0/22 maxlen: 24
156.224.24.0/22 maxlen: 24
156.224.28.0/23 maxlen: 24
156.224.30.0/23 maxlen: 24
156.224.63.0/24 maxlen: 24
156.235.96.0/21 maxlen: 24
156.235.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112401 (0x1b711)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 13:37:42 2026 GMT
Not After : Aug 19 13:37:42 2026 GMT
Subject: CN=6a0f0aaa-061d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:3a:06:ca:f1:dc:ff:ca:4b:ef:0f:06:e8:
53:56:9c:6a:d9:72:7e:b2:d3:ff:e9:71:90:d2:9e:
0c:6a:5b:9b:ba:9f:c9:6b:c6:97:bd:19:72:d9:f4:
1d:3b:9c:97:72:ed:64:ad:76:5e:75:83:4d:04:28:
b2:11:79:72:b8:63:60:22:dd:0e:3a:a2:06:84:7b:
8a:17:19:44:78:d0:4c:78:41:de:35:9a:4c:30:b3:
99:95:f2:21:eb:4a:61:03:94:7e:6e:d8:de:b9:3f:
aa:c5:93:d3:94:f6:b2:71:de:33:8a:38:c5:bb:cc:
23:97:a2:32:17:4e:c6:42:9c:b7:ae:2b:0b:89:cc:
9d:a8:eb:5f:ec:ee:de:3a:5b:46:68:58:5b:15:7c:
a7:51:0d:6b:da:f5:6f:27:72:12:78:dc:eb:7a:1a:
77:18:bb:fd:66:1d:f1:ed:83:c3:5c:d5:83:84:bf:
a8:c2:36:92:a5:d2:ea:83:44:8e:4e:2e:c8:b3:26:
61:43:1a:b2:dd:b7:23:c0:a5:c9:0c:15:56:df:0b:
cb:bb:c5:8d:43:84:91:6f:08:49:93:52:49:b7:47:
31:dc:78:5e:0b:02:f4:3b:25:a9:9b:1e:28:1a:99:
73:32:1f:3c:67:4e:35:22:7e:c2:62:0c:94:ff:a7:
54:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:44:D9:38:C2:32:8F:47:FD:26:3E:FF:56:F9:5B:9B:35:E5:7B:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063BEE0551A11F1B7B540E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.16.0/20
156.224.63.0/24
156.235.96.0/20
Signature Algorithm: sha256WithRSAEncryption
42:ea:6b:a3:83:59:2a:fd:6c:03:0f:24:d2:b7:6e:e6:ad:a1:
2e:a9:02:67:bd:d1:a6:88:c5:0f:24:49:32:9d:36:f4:6e:54:
9b:b9:ca:cc:a8:29:6c:de:a6:21:fc:ed:f1:f7:06:52:5e:96:
53:62:16:b1:e7:27:95:e7:11:d9:c0:69:7f:74:d9:13:ca:e5:
8a:47:09:2e:40:20:79:80:6d:48:b9:74:7e:16:f9:dd:dc:63:
4b:89:cc:73:86:42:6e:a4:ad:ae:d5:11:82:73:02:03:14:bf:
71:e9:45:78:0a:66:c0:bb:10:ad:24:af:25:51:a8:85:c2:3e:
21:6e:cd:0e:dc:30:1b:eb:2d:79:d3:1d:c4:61:aa:9a:ce:e7:
68:02:15:5e:82:c3:2f:a6:3d:c2:17:fc:d1:1a:83:e8:19:10:
d0:67:38:73:ed:cc:0a:de:2d:3e:b8:26:31:29:74:4e:a3:88:
75:37:d7:ab:69:06:ca:1f:74:32:f1:b1:ba:ad:2d:af:82:27:
ee:5c:3c:79:80:74:b0:42:c4:cd:b3:31:06:f3:17:d0:a3:06:
af:53:d5:da:41:1e:f3:a9:62:4d:b1:13:05:5c:3c:5c:3d:32:
0a:7b:cb:10:96:e7:99:d2:06:21:15:0d:91:9a:f1:3c:89:f7:
42:4d:e2:ad
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAbcRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTMzNzQyWhcNMjYwODE5MTMzNzQyWjAYMRYw
FAYDVQQDEw02YTBmMGFhYS0wNjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1eE6Bsrx3P/KS+8PBuhTVpxq2XJ+stP/6XGQ0p4Malubup/Ja8aXvRly
2fQdO5yXcu1krXZedYNNBCiyEXlyuGNgIt0OOqIGhHuKFxlEeNBMeEHeNZpMMLOZ
lfIh60phA5R+btjeuT+qxZPTlPaycd4zijjFu8wjl6IyF07GQpy3risLicydqOtf
7O7eOltGaFhbFXynUQ1r2vVvJ3ISeNzrehp3GLv9Zh3x7YPDXNWDhL+owjaSpdLq
g0SOTi7IsyZhQxqy3bcjwKXJDBVW3wvLu8WNQ4SRbwhJk1JJt0cx3HheCwL0OyWp
mx4oGplzMh88Z041In7CYgyU/6dUnQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFEpE
2TjCMo9H/SY+/1b5W5s15XtQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MDYzQkVFMDU1MUExMUYxQjdCNTQwRTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEnOAQAwQAnOA/AwQEnOtgMA0G
CSqGSIb3DQEBCwUAA4IBAQBC6mujg1kq/WwDDyTSt27mraEuqQJnvdGmiMUPJEky
nTb0blSbucrMqCls3qYh/O3x9wZSXpZTYhax5yeV5xHZwGl/dNkTyuWKRwkuQCB5
gG1IuXR+Fvnd3GNLicxzhkJupK2u1RGCcwIDFL9x6UV4CmbAuxCtJK8lUaiFwj4h
bs0O3DAb6y150x3EYaqazudoAhVegsMvpj3CF/zRGoPoGRDQZzhz7cwK3i0+uCYx
KXROo4h1N9eraQbKH3Qy8bG6rS2vgifuXDx5gHSwQsTNszEG8xfQowavU9XaQR7z
qWJNsRMFXDxcPTIKe8sQlueZ0gYhFQ2RmvE8ifdCTeKt
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client