Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4112C4CA543A11F1877E2E0ACF1D38B0.roa
File: 4112C4CA543A11F1877E2E0ACF1D38B0.roa (raw, json)
Hash identifier: W5svliTFjNyeRwhAQGd4GgVb1fxH0eu3jPB8ZNwDZDE=
Subject key identifier: 06:11:CD:35:13:23:F9:3C:2E:C3:D1:6A:36:EC:DD:A4:E7:36:BE:FC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B630
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4112C4CA543A11F1877E2E0ACF1D38B0.roa
Signing time: Wed 20 May 2026 10:54:20 +0000
ROA not before: Wed 20 May 2026 10:54:16 +0000
ROA not after: Thu 25 Jun 2026 10:54:16 +0000
asID: 273155
IP address blocks: 156.236.192.0/19 maxlen: 24
156.236.224.0/19 maxlen: 24
156.236.224.0/24 maxlen: 24
156.236.225.0/24 maxlen: 24
156.236.226.0/24 maxlen: 24
156.236.227.0/24 maxlen: 24
156.236.228.0/24 maxlen: 24
156.236.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112176 (0x1b630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:54:16 2026 GMT
Not After : Jun 25 10:54:16 2026 GMT
Subject: CN=6a0d92dc-73a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ac:ec:9d:40:a7:47:97:b1:ce:74:f4:9d:c8:
57:90:5a:a1:e1:10:c8:c2:2e:ff:bb:28:c8:57:b3:
5c:3f:62:70:4f:85:70:67:45:50:2d:c9:2b:01:a4:
b6:7a:f5:d2:cd:e7:d8:0a:e5:be:07:e3:18:12:ef:
b2:df:26:25:12:90:1e:eb:c9:af:45:d8:66:71:b8:
c9:78:9a:04:10:c9:de:7c:6e:50:6a:4a:3e:f7:ec:
e6:4e:4b:27:28:ba:aa:39:f2:d3:5c:c5:0e:4d:96:
60:a8:65:3e:07:3a:97:9a:6b:b1:0d:9a:64:21:89:
1a:d2:f8:9a:e6:4e:d7:46:66:b2:f4:c5:9a:99:05:
9f:00:17:f5:2f:88:b0:59:b0:d4:83:93:e7:0d:b7:
58:f8:e6:88:97:94:eb:5f:60:b5:5f:57:6b:be:00:
70:6f:b1:04:90:4c:61:0e:34:45:65:01:d8:1e:df:
8d:3c:b4:5e:ee:e8:1b:3c:a0:c9:99:e4:4f:09:ed:
db:36:be:d4:c0:fd:8f:ac:73:01:1f:bc:7e:02:8f:
0f:cd:ea:3f:ed:58:ee:89:95:b0:aa:ec:1c:28:33:
27:3e:8c:97:ef:86:5a:cd:f4:c5:32:e1:ed:d0:c3:
7f:6a:e7:77:7f:1e:9c:d8:ed:9e:81:4a:59:31:f3:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:CD:35:13:23:F9:3C:2E:C3:D1:6A:36:EC:DD:A4:E7:36:BE:FC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4112C4CA543A11F1877E2E0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:06:66:10:0e:0b:63:b7:bd:89:1f:a6:d1:de:e5:4c:3e:99:
5d:fa:ed:fd:40:10:ac:e0:a8:59:df:8a:a1:6c:05:04:3d:fb:
92:60:ae:f8:2e:c6:52:32:1b:ec:8b:70:97:e0:47:1e:37:5d:
59:48:2d:36:6a:a7:d0:7c:1d:2a:db:3a:46:01:b9:59:5f:22:
b4:e5:08:63:b2:b1:23:d4:4a:4e:09:48:0b:2b:2a:36:98:41:
92:d8:0e:e4:b6:94:98:7a:17:f9:26:c1:00:66:4b:3b:47:b6:
8b:bf:44:7c:c3:8b:c2:c9:a6:ac:9d:fd:93:3d:9f:5d:14:5a:
34:97:4d:e2:56:b2:ad:65:a2:e0:d0:10:c6:20:c3:9d:df:21:
4c:0c:c3:3b:fd:16:85:6a:18:e6:53:59:a1:e5:19:8c:79:5c:
eb:f7:1e:7d:96:c4:38:32:5e:48:bb:b9:91:10:bc:ac:e4:b1:
44:ea:5a:01:6d:5b:b0:8b:04:4e:b7:33:24:9d:85:42:8b:44:
26:68:28:4e:12:f4:dd:bf:8e:6b:50:1e:14:55:e5:23:09:bf:
94:11:e2:39:c0:c7:12:3f:5a:fd:5f:1f:e6:8e:d0:2f:b3:2c:
1b:49:b4:61:c2:70:4a:45:85:d6:66:13:bf:7a:84:cb:11:b5:
02:70:4e:31
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbYwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMTA1NDE2WhcNMjYwNjI1MTA1NDE2WjAYMRYw
FAYDVQQDEw02YTBkOTJkYy03M2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtazsnUCnR5exznT0nchXkFqh4RDIwi7/uyjIV7NcP2JwT4VwZ0VQLckr
AaS2evXSzefYCuW+B+MYEu+y3yYlEpAe68mvRdhmcbjJeJoEEMnefG5Qako+9+zm
TksnKLqqOfLTXMUOTZZgqGU+BzqXmmuxDZpkIYka0via5k7XRmay9MWamQWfABf1
L4iwWbDUg5PnDbdY+OaIl5TrX2C1X1drvgBwb7EEkExhDjRFZQHYHt+NPLRe7ugb
PKDJmeRPCe3bNr7UwP2PrHMBH7x+Ao8Pzeo/7VjuiZWwquwcKDMnPoyX74ZazfTF
MuHt0MN/aud3fx6c2O2egUpZMfPNRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAYR
zTUTI/k8LsPRajbs3aTnNr78MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80MTEyQzRDQTU0M0ExMUYxODc3RTJFMEFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnOzAMA0GCSqGSIb3DQEBCwUA
A4IBAQC6BmYQDgtjt72JH6bR3uVMPpld+u39QBCs4KhZ34qhbAUEPfuSYK74LsZS
Mhvsi3CX4EceN11ZSC02aqfQfB0q2zpGAblZXyK05QhjsrEj1EpOCUgLKyo2mEGS
2A7ktpSYehf5JsEAZks7R7aLv0R8w4vCyaasnf2TPZ9dFFo0l03iVrKtZaLg0BDG
IMOd3yFMDMM7/RaFahjmU1mh5RmMeVzr9x59lsQ4Ml5Iu7mRELys5LFE6loBbVuw
iwROtzMknYVCi0QmaChOEvTdv45rUB4UVeUjCb+UEeI5wMcSP1r9Xx/mjtAvsywb
SbRhwnBKRYXWZhO/eoTLEbUCcE4x
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client