Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA098858EB11F1B7629FA8CE1D38B0.roa
File: 46AA098858EB11F1B7629FA8CE1D38B0.roa (raw, json)
Hash identifier: 80O7BhA6+B31Ob26r1RBd41a3td74OIGqQsj5qpMjPQ=
Subject key identifier: AE:98:58:DB:D7:7E:95:16:D8:F9:7C:78:52:12:DF:89:83:19:EB:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA098858EB11F1B7629FA8CE1D38B0.roa
Signing time: Tue 26 May 2026 10:11:35 +0000
ROA not before: Tue 26 May 2026 10:11:28 +0000
ROA not after: Tue 29 Dec 2026 10:11:28 +0000
asID: 142132
IP address blocks: 156.240.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113119 (0x1b9df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 10:11:28 2026 GMT
Not After : Dec 29 10:11:28 2026 GMT
Subject: CN=6a1571d7-7b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:88:5a:7e:9c:97:26:1a:4e:51:c0:9a:b0:
22:b6:d7:5b:f6:bf:76:43:4e:e4:b3:fc:82:94:5c:
6a:99:00:73:c4:ff:cf:9d:37:e4:8c:4d:7c:20:a4:
bf:32:2c:ee:4c:1e:9f:18:51:0b:71:96:96:24:a7:
18:1c:7a:24:af:3f:da:fb:47:22:a3:79:d2:5c:50:
a0:f6:b3:ae:b4:2d:0f:aa:57:8b:05:99:5d:5b:43:
b1:31:6f:a7:1e:7c:a1:af:58:e0:e8:ef:77:54:e0:
2b:0e:2f:83:fb:96:ee:d2:6c:f9:40:a3:8d:77:5b:
78:1e:02:6a:04:33:52:c7:5a:f2:76:16:ac:22:71:
d9:77:0f:f8:18:62:8f:12:63:48:c6:46:df:4e:4a:
50:af:f0:3e:cf:e8:47:90:e4:a9:1d:40:0f:ad:14:
49:94:aa:de:52:75:31:4a:87:a2:16:dc:97:28:91:
f1:56:ac:8f:e8:ca:ce:4e:3a:2d:52:72:bb:52:f0:
ac:12:f5:bf:86:e8:f0:cd:08:28:c1:29:be:6d:37:
f1:89:b0:93:43:4c:0f:bf:75:19:43:69:e7:fa:1a:
2d:45:82:ec:1b:bb:d0:6e:b6:1f:87:c5:57:e3:fb:
1f:d2:1c:c8:ec:c8:39:0f:9d:d1:1f:97:be:82:a0:
c3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:58:DB:D7:7E:95:16:D8:F9:7C:78:52:12:DF:89:83:19:EB:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46AA098858EB11F1B7629FA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.76.0/24
Signature Algorithm: sha256WithRSAEncryption
80:72:46:ae:c5:30:d8:eb:b3:b5:3a:cf:04:82:a0:dd:44:e4:
16:4e:08:57:09:d0:d9:82:ec:d8:ad:1d:05:b5:d8:08:1f:9b:
90:4c:f8:fa:ce:c3:dc:44:26:94:0d:14:ef:60:79:fb:0d:2a:
18:db:ee:46:9e:44:8f:38:93:74:a6:c3:79:f6:37:f7:2f:19:
24:b4:b5:3c:75:61:56:14:da:8a:b9:fc:c7:56:75:98:5a:80:
7d:a4:fc:c5:d4:98:69:ba:22:66:6e:ba:04:1a:9a:de:0c:f4:
50:a2:86:ae:23:b9:0e:b1:1a:b6:59:b8:db:e5:78:b7:26:c3:
e5:97:de:52:7f:3b:93:33:61:18:96:58:79:68:1c:ab:5c:13:
d2:60:f3:6e:59:e8:15:01:b1:f2:50:7c:18:46:8c:82:80:48:
96:16:9c:43:57:83:f1:90:c1:4f:2a:39:8c:72:dd:c0:81:08:
40:7f:2b:0d:31:a7:e8:b5:c6:48:5b:2b:99:cf:c2:8d:3e:4c:
3b:f3:5c:c2:a5:97:9f:8b:bc:49:56:93:eb:0f:c0:c3:aa:92:
95:4b:b0:12:61:e5:ca:48:40:4a:c3:7d:d5:60:8a:4e:60:6f:
91:27:ac:f5:c2:86:83:92:98:00:bd:48:89:4f:be:7b:c4:02:
d4:f5:40:11
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbnfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI2MTAxMTI4WhcNMjYxMjI5MTAxMTI4WjAYMRYw
FAYDVQQDEw02YTE1NzFkNy03YjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7HuIWn6clyYaTlHAmrAittdb9r92Q07ks/yClFxqmQBzxP/PnTfkjE18
IKS/MizuTB6fGFELcZaWJKcYHHokrz/a+0cio3nSXFCg9rOutC0PqleLBZldW0Ox
MW+nHnyhr1jg6O93VOArDi+D+5bu0mz5QKONd1t4HgJqBDNSx1rydhasInHZdw/4
GGKPEmNIxkbfTkpQr/A+z+hHkOSpHUAPrRRJlKreUnUxSoeiFtyXKJHxVqyP6MrO
TjotUnK7UvCsEvW/hujwzQgowSm+bTfxibCTQ0wPv3UZQ2nn+hotRYLsG7vQbrYf
h8VX4/sf0hzI7Mg5D53RH5e+gqDDCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFK6Y
WNvXfpUW2Pl8eFIS34mDGeuhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NkFBMDk4ODU4RUIxMUYxQjc2MjlGQThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPBMMA0GCSqGSIb3DQEBCwUA
A4IBAQCAckauxTDY67O1Os8EgqDdROQWTghXCdDZguzYrR0FtdgIH5uQTPj6zsPc
RCaUDRTvYHn7DSoY2+5GnkSPOJN0psN59jf3LxkktLU8dWFWFNqKufzHVnWYWoB9
pPzF1JhpuiJmbroEGpreDPRQooauI7kOsRq2Wbjb5Xi3JsPll95SfzuTM2EYllh5
aByrXBPSYPNuWegVAbHyUHwYRoyCgEiWFpxDV4PxkMFPKjmMct3AgQhAfysNMafo
tcZIWyuZz8KNPkw781zCpZefi7xJVpPrD8DDqpKVS7ASYeXKSEBKw33VYIpOYG+R
J6z1woaDkpgAvUiJT757xALU9UAR
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:51 2026 by rpki-client