Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46567C72163411F1B97D5A81DAE4EC9C.roa
File: 46567C72163411F1B97D5A81DAE4EC9C.roa (raw, json)
Hash identifier: Lpi23c5iMdVeGb08WznS+i9ag8E6RHAO6PUFuOM/LYc=
Subject key identifier: D0:82:B3:07:47:94:7D:4C:6E:5F:CE:B5:BC:9A:B8:C4:A0:B0:06:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46567C72163411F1B97D5A81DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 12:35:20 +0000
ROA not before: Mon 02 Mar 2026 12:35:16 +0000
ROA not after: Thu 09 Apr 2026 12:35:16 +0000
asID: 138915
IP address blocks: 156.244.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106972 (0x1a1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 12:35:16 2026 GMT
Not After : Apr 9 12:35:16 2026 GMT
Subject: CN=69a58408-3633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:cc:35:d8:3f:98:b6:35:c7:39:69:3d:5a:
09:f3:5c:ad:e3:eb:2f:f3:50:fe:6b:9d:9e:ab:5f:
a6:05:a6:b7:a3:84:c5:1b:b8:12:0c:c2:22:fa:c6:
51:3f:10:d6:fd:86:cf:7a:6d:b6:a9:86:80:71:b2:
b6:bc:6b:01:b6:61:fe:80:f1:be:b1:e3:90:a5:ce:
08:d1:3d:d5:52:5c:35:a2:70:4a:ec:6f:20:ca:90:
ef:ab:23:f7:5f:21:0e:c3:e5:89:1b:1a:76:98:c1:
a0:82:fd:d3:15:70:f2:0d:32:a7:90:4a:c0:75:c9:
2b:57:e7:89:36:02:c0:e7:c2:6c:df:fc:b0:05:06:
f6:2b:a3:8b:5b:53:ed:03:8e:1b:d6:00:7e:29:5e:
fd:b7:34:43:b9:2b:73:12:03:f4:86:39:63:a2:87:
c9:2d:5f:57:28:20:06:38:ce:e4:cd:56:83:7f:6a:
85:3f:2b:2f:73:c5:c6:2d:0b:a8:39:fb:4a:12:d8:
7d:1c:13:a9:b5:81:df:88:69:c5:be:57:cf:24:a3:
df:12:f0:2c:58:f9:8d:33:6f:9a:f3:84:df:17:2b:
45:6e:2b:40:e4:19:64:fe:00:e1:34:56:ea:d6:0d:
bf:ca:4c:58:78:84:f5:70:08:79:d1:c0:a6:2d:95:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:82:B3:07:47:94:7D:4C:6E:5F:CE:B5:BC:9A:B8:C4:A0:B0:06:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46567C72163411F1B97D5A81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.30.0/24
Signature Algorithm: sha256WithRSAEncryption
27:77:4e:47:7f:c1:18:97:32:7e:a8:20:c3:59:98:f6:36:18:
23:b3:d5:cb:2d:26:dd:05:02:aa:d4:b4:1c:1e:22:ff:bb:2f:
c2:7f:12:d1:e7:00:71:3e:e4:f0:b1:c6:60:7f:f3:e5:d8:26:
44:8e:d3:38:6e:26:3e:ba:15:34:1f:5f:df:1b:94:cd:a9:c0:
c2:a3:8e:5a:6a:11:47:60:9e:78:2a:ad:1d:fa:9e:c7:f4:7e:
60:81:ee:2a:c6:eb:e3:cc:43:c4:45:e2:e4:3e:a6:65:a2:ed:
69:7f:4f:28:11:38:c2:6a:a9:88:94:99:ea:ce:99:8e:1d:2a:
ce:38:33:35:bc:4c:f6:00:63:e5:e4:81:b9:7a:bf:58:36:03:
97:ca:d3:5a:cd:cc:e6:12:69:7f:83:9e:47:ce:19:9d:41:ee:
ea:b4:c9:6e:5c:e6:a1:1b:54:af:4c:76:a5:b6:ac:57:d1:b9:
95:47:2d:52:c6:0b:76:e0:6d:4b:ed:b0:18:a6:d2:e3:72:52:
78:51:d0:a1:24:bd:e9:4d:71:9f:1f:08:06:ef:98:b4:df:e6:
5b:ec:63:6b:c1:ec:1a:c0:3a:09:91:80:39:b4:c8:82:b8:5b:
0c:23:12:fb:db:de:2b:87:ff:20:4c:0b:f8:34:15:26:08:99:
aa:30:a5:32
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaHcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzAyMTIzNTE2WhcNMjYwNDA5MTIzNTE2WjAYMRYw
FAYDVQQDEw02OWE1ODQwOC0zNjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmoPMNdg/mLY1xzlpPVoJ81yt4+sv81D+a52eq1+mBaa3o4TFG7gSDMIi
+sZRPxDW/YbPem22qYaAcbK2vGsBtmH+gPG+seOQpc4I0T3VUlw1onBK7G8gypDv
qyP3XyEOw+WJGxp2mMGggv3TFXDyDTKnkErAdckrV+eJNgLA58Js3/ywBQb2K6OL
W1PtA44b1gB+KV79tzRDuStzEgP0hjljoofJLV9XKCAGOM7kzVaDf2qFPysvc8XG
LQuoOftKEth9HBOptYHfiGnFvlfPJKPfEvAsWPmNM2+a84TfFytFbitA5Blk/gDh
NFbq1g2/ykxYeIT1cAh50cCmLZVVrwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNCC
swdHlH1Mbl/OtbyauMSgsAbqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NjU2N0M3MjE2MzQxMUYxQjk3RDVBODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPQeMA0GCSqGSIb3DQEBCwUA
A4IBAQAnd05Hf8EYlzJ+qCDDWZj2Nhgjs9XLLSbdBQKq1LQcHiL/uy/CfxLR5wBx
PuTwscZgf/Pl2CZEjtM4biY+uhU0H1/fG5TNqcDCo45aahFHYJ54Kq0d+p7H9H5g
ge4qxuvjzEPEReLkPqZlou1pf08oETjCaqmIlJnqzpmOHSrOODM1vEz2AGPl5IG5
er9YNgOXytNazczmEml/g55HzhmdQe7qtMluXOahG1SvTHaltqxX0bmVRy1Sxgt2
4G1L7bAYptLjclJ4UdChJL3pTXGfHwgG75i03+Zb7GNrwewawDoJkYA5tMiCuFsM
IxL7294rh/8gTAv4NBUmCJmqMKUy
-----END CERTIFICATE-----
Generated at Wed Mar 4 11:16:28 2026 by rpki-client