Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C14292542811F1A340031ECF1D38B0.roa
File: 40C14292542811F1A340031ECF1D38B0.roa (raw, json)
Hash identifier: dFd4bFcCTMhymjl2CqRY6GviDkRIaIOTT3tGzenuxi0=
Subject key identifier: F9:B1:B0:AF:13:23:B4:A8:C5:F1:E8:C9:5B:BE:1D:11:D3:9F:AF:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B616
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C14292542811F1A340031ECF1D38B0.roa
Signing time: Wed 20 May 2026 08:45:29 +0000
ROA not before: Wed 20 May 2026 08:45:24 +0000
ROA not after: Mon 06 Nov 2028 08:45:24 +0000
asID: 17561
IP address blocks: 156.235.0.0/24 maxlen: 24
156.235.24.0/24 maxlen: 24
156.235.25.0/24 maxlen: 24
156.235.26.0/24 maxlen: 24
156.235.27.0/24 maxlen: 24
156.246.50.0/24 maxlen: 24
156.246.51.0/24 maxlen: 24
156.246.52.0/24 maxlen: 24
156.246.53.0/24 maxlen: 24
156.246.54.0/24 maxlen: 24
156.246.55.0/24 maxlen: 24
156.246.56.0/24 maxlen: 24
156.246.57.0/24 maxlen: 24
156.246.58.0/24 maxlen: 24
156.246.59.0/24 maxlen: 24
156.246.60.0/24 maxlen: 24
156.246.61.0/24 maxlen: 24
156.246.62.0/24 maxlen: 24
156.246.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112150 (0x1b616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:45:24 2026 GMT
Not After : Nov 6 08:45:24 2028 GMT
Subject: CN=6a0d74a9-32c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:4c:d9:cc:a3:9f:c4:ea:51:79:83:bc:ad:
a0:d2:08:6c:4e:96:0b:e5:c1:ed:13:61:fc:3b:c2:
a5:5a:06:eb:4b:74:3a:81:50:d4:7a:4e:f9:d8:6a:
bb:b9:0a:0a:a0:43:8b:38:30:dc:89:69:5d:13:c1:
d9:9c:61:99:90:cd:ef:76:80:f2:0e:46:25:bc:82:
68:d7:83:90:04:3d:38:10:0c:b5:64:73:9f:62:7b:
a2:28:9a:23:8b:d2:ab:ee:e2:b5:11:88:bc:6e:27:
66:53:f9:74:b0:4e:e7:a6:cb:a8:f5:a7:f2:1a:d3:
a3:e3:e0:fb:4e:89:48:51:c9:1b:dc:7d:12:0f:cf:
4d:0b:f3:2b:5f:a8:dc:ce:94:39:ac:4d:4d:df:dd:
01:ea:a1:7f:ec:e8:69:86:c0:76:a6:6a:ed:50:cc:
4c:60:6f:4c:54:b3:82:f6:c5:e4:e2:bc:9e:b2:5c:
66:d8:95:0a:da:cc:7a:dd:c1:98:c3:2b:7c:1a:70:
c4:19:ee:23:fb:af:26:d1:47:22:65:5d:5f:38:03:
3b:d6:df:92:d3:7e:c5:57:8f:66:08:3a:57:15:e1:
32:a9:f4:fe:aa:a8:28:13:21:d3:9b:80:06:6a:95:
7e:f4:84:87:52:6e:fb:14:08:62:2f:c3:0c:2d:0c:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B1:B0:AF:13:23:B4:A8:C5:F1:E8:C9:5B:BE:1D:11:D3:9F:AF:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40C14292542811F1A340031ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.0.0/24
156.235.24.0/22
156.246.50.0-156.246.63.255
Signature Algorithm: sha256WithRSAEncryption
13:bb:02:68:3b:81:bb:63:00:5f:f0:ff:af:5d:c0:53:c6:76:
e1:c3:75:c5:9e:04:b0:df:47:b2:e2:0c:82:5d:41:c2:14:98:
87:a4:ef:45:89:3f:25:70:a1:5b:ee:11:4a:76:c3:ab:4c:ed:
ac:4f:05:1a:a9:ab:d8:cb:ec:c8:34:fa:d4:f6:91:3a:c8:64:
02:df:4f:1b:03:55:de:eb:d1:7d:15:db:d6:44:0a:8c:ec:cb:
ad:d7:c4:be:90:1d:46:07:a5:65:db:20:38:56:ba:db:ce:7e:
db:85:cb:c2:87:8b:3d:02:6e:14:42:1f:4e:87:85:ca:29:4f:
cc:21:4e:e7:eb:06:26:f3:fd:5a:78:c1:b4:fc:2a:b4:78:50:
96:84:a4:c4:da:2a:3b:be:57:90:50:6a:1e:16:33:be:db:e8:
18:f1:a6:e7:2a:8c:eb:5b:a8:94:29:0a:ce:be:79:00:b1:b7:
da:cf:e3:8a:e4:e9:06:5b:eb:61:d7:53:97:86:87:7b:5b:38:
67:48:ab:89:75:f3:b6:b5:fd:8a:21:3f:13:01:02:ee:ae:91:
5d:01:2d:de:ee:e8:50:ab:07:a5:c5:c2:8a:d8:34:9d:cb:79:
2d:06:b5:b4:62:11:6d:68:7e:7a:e1:2b:f5:bb:f0:54:4c:64:
9a:7b:a1:93
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbYWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMDg0NTI0WhcNMjgxMTA2MDg0NTI0WjAYMRYw
FAYDVQQDEw02YTBkNzRhOS0zMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsJBM2cyjn8TqUXmDvK2g0ghsTpYL5cHtE2H8O8KlWgbrS3Q6gVDUek75
2Gq7uQoKoEOLODDciWldE8HZnGGZkM3vdoDyDkYlvIJo14OQBD04EAy1ZHOfYnui
KJoji9Kr7uK1EYi8bidmU/l0sE7npsuo9afyGtOj4+D7TolIUckb3H0SD89NC/Mr
X6jczpQ5rE1N390B6qF/7OhphsB2pmrtUMxMYG9MVLOC9sXk4ryeslxm2JUK2sx6
3cGYwyt8GnDEGe4j+68m0UciZV1fOAM71t+S037FV49mCDpXFeEyqfT+qqgoEyHT
m4AGapV+9ISHUm77FAhiL8MMLQwjeQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPmx
sK8TI7SoxfHoyVu+HRHTn6/FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MEMxNDI5MjU0MjgxMUYxQTM0MDAzMUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAnOsAAwQCnOsYMAwDBAGc9jID
BAac9gAwDQYJKoZIhvcNAQELBQADggEBABO7Amg7gbtjAF/w/69dwFPGduHDdcWe
BLDfR7LiDIJdQcIUmIek70WJPyVwoVvuEUp2w6tM7axPBRqpq9jL7Mg0+tT2kTrI
ZALfTxsDVd7r0X0V29ZECozsy63XxL6QHUYHpWXbIDhWutvOftuFy8KHiz0CbhRC
H06HhcopT8whTufrBibz/Vp4wbT8KrR4UJaEpMTaKju+V5BQah4WM77b6Bjxpucq
jOtbqJQpCs6+eQCxt9rP44rk6QZb62HXU5eGh3tbOGdIq4l187a1/YohPxMBAu6u
kV0BLd7u6FCrB6XFworYNJ3LeS0GtbRiEW1ofnrhK/W78FRMZJp7oZM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:00 2026 by rpki-client