Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/513514BC1E2411F19CE15A84DAE4EC9C.roa
File: 513514BC1E2411F19CE15A84DAE4EC9C.roa (raw, json)
Hash identifier: 1uzb7hZ4iiIsTv/vTefgVdcjKkdh1YQe34+wfZDexlQ=
Subject key identifier: A9:16:BA:E6:8A:B3:6C:2D:2C:24:7C:13:C7:03:DA:CB:20:42:98:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/513514BC1E2411F19CE15A84DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 15:01:16 +0000
ROA not before: Thu 12 Mar 2026 15:01:11 +0000
ROA not after: Sat 13 Jun 2026 15:01:11 +0000
asID: 139880
IP address blocks: 156.249.224.0/20 maxlen: 24
156.253.32.0/20 maxlen: 24
156.253.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107704 (0x1a4b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 15:01:11 2026 GMT
Not After : Jun 13 15:01:11 2026 GMT
Subject: CN=69b2d53c-b602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:29:38:1e:30:96:74:b3:89:20:b6:3c:d2:
87:c4:f3:8a:1b:92:75:b2:c2:32:2c:9c:b0:e1:6f:
26:87:68:2e:10:55:0c:18:3e:5f:74:7e:71:a7:d9:
f8:bf:4b:c1:c0:7d:6b:e9:1c:c1:79:eb:7b:bc:36:
a9:33:43:73:85:99:40:f0:db:cc:f0:81:67:5d:da:
b2:67:0c:aa:47:ab:91:04:3d:c8:dd:8b:f5:00:68:
97:48:5f:ed:bb:ee:54:26:2b:8d:60:27:51:64:5d:
a0:2d:24:03:c5:4e:07:e1:be:59:f1:c9:46:8f:50:
f8:38:71:61:8a:6a:06:ec:fc:a8:7e:2c:d2:f6:9c:
3d:cc:d1:52:30:66:6b:98:d2:7a:d5:12:95:30:1d:
62:54:8b:32:8d:47:40:b7:cd:56:fb:3b:a7:bc:fd:
43:eb:4b:82:44:57:5c:a6:71:ef:3b:02:18:4f:e0:
30:ce:42:f6:52:18:98:6b:ad:09:25:46:3f:f8:38:
5a:c7:d6:67:ee:4a:45:37:72:7b:35:dc:9f:f4:ed:
ce:ae:72:21:81:bb:43:db:58:33:16:b9:48:8e:61:
0d:52:2b:59:e8:3a:39:89:25:72:b8:c1:94:b9:be:
c0:50:ed:76:1b:56:00:49:e7:01:47:11:c4:aa:a4:
06:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:BA:E6:8A:B3:6C:2D:2C:24:7C:13:C7:03:DA:CB:20:42:98:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/513514BC1E2411F19CE15A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.224.0/20
156.253.32.0/20
156.253.144.0/20
Signature Algorithm: sha256WithRSAEncryption
66:3f:bc:b4:1b:62:c6:d8:94:14:e4:42:a9:a3:82:2e:36:3c:
8c:57:b0:e0:47:a8:44:90:5b:0b:45:70:10:b4:72:e2:12:c2:
c5:b2:9d:ca:7c:a0:80:71:8f:65:96:06:4e:8d:a7:f0:61:ef:
fe:c1:cb:7a:04:dc:03:ab:88:35:a8:96:9a:fc:99:7c:b9:7f:
6c:71:e4:a7:6a:74:05:1c:6e:55:9b:b3:81:e4:b0:57:a9:f4:
4f:40:99:39:76:40:60:8c:5e:c7:dd:fc:59:d5:00:5b:c9:44:
2a:9b:c7:41:8a:47:07:e1:72:a0:12:31:ab:a3:7f:f6:05:65:
4e:0a:bf:90:79:8f:09:a7:6d:25:31:20:29:e4:75:44:ce:de:
c8:53:ef:fd:4f:c3:d4:d9:4a:75:43:27:81:1e:b9:c2:16:58:
08:ed:fd:1f:1d:cd:8b:8b:ee:62:24:31:31:9b:ef:de:81:bc:
1d:7d:dd:06:70:46:03:de:75:ab:2b:0b:8a:63:98:1f:d4:92:
7a:ec:67:75:68:61:22:87:9f:8a:c0:de:62:2b:fc:19:7e:28:
10:7a:e1:ed:a4:94:9c:03:1f:38:6d:3e:db:58:ef:06:25:11:
ae:5a:19:fe:35:f1:4c:72:ab:f7:74:72:aa:34:61:83:1e:a9:
6b:6b:86:24
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAaS4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEyMTUwMTExWhcNMjYwNjEzMTUwMTExWjAYMRYw
FAYDVQQDEw02OWIyZDUzYy1iNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyTopOB4wlnSziSC2PNKHxPOKG5J1ssIyLJyw4W8mh2guEFUMGD5fdH5x
p9n4v0vBwH1r6RzBeet7vDapM0NzhZlA8NvM8IFnXdqyZwyqR6uRBD3I3Yv1AGiX
SF/tu+5UJiuNYCdRZF2gLSQDxU4H4b5Z8clGj1D4OHFhimoG7PyofizS9pw9zNFS
MGZrmNJ61RKVMB1iVIsyjUdAt81W+zunvP1D60uCRFdcpnHvOwIYT+AwzkL2UhiY
a60JJUY/+Dhax9Zn7kpFN3J7Ndyf9O3OrnIhgbtD21gzFrlIjmENUitZ6Do5iSVy
uMGUub7AUO12G1YASecBRxHEqqQG9wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFKkW
uuaKs2wtLCR8E8cD2ssgQphGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MTM1MTRCQzFFMjQxMUYxOUNFMTVBODREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEnPngAwQEnP0gAwQEnP2QMA0G
CSqGSIb3DQEBCwUAA4IBAQBmP7y0G2LG2JQU5EKpo4IuNjyMV7DgR6hEkFsLRXAQ
tHLiEsLFsp3KfKCAcY9llgZOjafwYe/+wct6BNwDq4g1qJaa/Jl8uX9sceSnanQF
HG5Vm7OB5LBXqfRPQJk5dkBgjF7H3fxZ1QBbyUQqm8dBikcH4XKgEjGro3/2BWVO
Cr+QeY8Jp20lMSAp5HVEzt7IU+/9T8PU2Up1QyeBHrnCFlgI7f0fHc2Li+5iJDEx
m+/egbwdfd0GcEYD3nWrKwuKY5gf1JJ67Gd1aGEih5+KwN5iK/wZfigQeuHtpJSc
Ax84bT7bWO8GJRGuWhn+NfFMcqv3dHKqNGGDHqlra4Yk
-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:22 2026 by rpki-client