Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51743D06541E11F1B022D9E2CE1D38B0.roa
File: 51743D06541E11F1B022D9E2CE1D38B0.roa (raw, json)
Hash identifier: zBXorP0Fl2U6ZknpgFHFpTatboty1qH4A2C6OuD5ZNI=
Subject key identifier: 9E:91:BC:6D:C8:75:A0:64:37:6B:71:67:84:5B:E4:01:CC:2A:ED:CE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B602
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51743D06541E11F1B022D9E2CE1D38B0.roa
Signing time: Wed 20 May 2026 07:34:22 +0000
ROA not before: Wed 20 May 2026 07:34:18 +0000
ROA not after: Sat 22 May 2027 07:34:18 +0000
asID: 63199
IP address blocks: 156.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112130 (0x1b602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 07:34:18 2026 GMT
Not After : May 22 07:34:18 2027 GMT
Subject: CN=6a0d63fe-f8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:cd:1f:bf:bc:b2:93:95:98:3f:a3:11:a6:
93:70:a1:e8:3e:9d:57:a8:97:69:ee:6c:02:3c:82:
93:b4:97:38:e0:aa:0f:9a:74:80:a4:6e:26:e4:cf:
a6:6f:01:74:91:f1:cd:6d:e9:10:90:00:8c:ab:9e:
8a:ab:ab:09:13:b7:d6:6c:4d:c2:57:4b:1e:96:de:
29:35:e7:6e:bd:44:19:1c:2d:5c:28:8f:01:df:66:
ea:27:32:8f:9e:fb:3e:98:e3:d2:d5:5f:29:a5:24:
67:e4:e2:26:21:8e:80:ad:14:18:4c:66:f0:94:af:
02:30:92:a3:40:ef:1d:0e:50:1c:c4:6f:7d:44:01:
92:67:88:5a:b5:da:48:43:00:78:68:ec:1f:25:da:
8f:5e:98:bf:36:d6:2c:db:26:07:5d:69:ad:fb:3a:
f8:2d:fa:8e:67:cf:69:01:9b:b5:aa:34:03:51:10:
09:3b:84:58:ab:89:84:14:0b:6c:44:08:00:63:b3:
fe:19:dd:43:71:59:f7:7c:45:d4:72:79:b1:11:bb:
55:fc:0c:b1:42:82:e5:e8:13:cc:1c:c2:6d:08:3d:
a1:ec:fe:ce:43:dc:d5:97:a2:e0:e4:11:ea:9f:8e:
a7:82:09:82:9d:b6:8b:1f:0c:cb:50:7a:71:10:8e:
39:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:91:BC:6D:C8:75:A0:64:37:6B:71:67:84:5B:E4:01:CC:2A:ED:CE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51743D06541E11F1B022D9E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:b2:c9:cb:6e:e9:ad:24:ac:f7:19:a4:99:33:00:30:59:
db:8c:3b:57:fd:68:0f:7e:c4:d7:f7:1c:73:c8:cb:c9:29:00:
37:dc:86:2c:ef:82:3a:bf:11:58:c0:20:4d:a3:b8:0f:e8:fc:
62:06:ad:00:69:02:ab:34:04:70:d3:8e:15:02:83:71:ec:4f:
88:22:27:a7:f0:3b:12:de:ec:f6:42:84:3f:6b:41:17:5c:d6:
63:0f:18:c6:20:ce:60:07:39:70:90:70:cf:d0:31:7a:1a:c9:
8a:95:96:d3:de:4a:cd:b9:db:2a:50:ca:7b:18:a3:03:60:9d:
6d:44:aa:a6:51:fb:09:95:d6:3b:3e:5b:d1:2f:a5:36:28:a5:
5b:8c:57:87:41:9e:88:55:31:4f:c7:8e:01:28:7b:4f:46:f9:
7e:0b:d8:93:52:e0:19:65:69:84:e3:19:aa:b0:4c:ea:0b:cd:
c5:96:a4:77:fb:37:f0:cf:58:93:34:d0:7f:4d:10:bd:42:15:
7d:6d:de:64:66:d1:5a:e9:36:a1:fa:74:dd:a2:e4:ee:ee:22:
42:7d:56:43:83:4d:46:80:63:49:ee:2c:eb:33:39:bc:7f:fc:
24:d4:34:38:92:09:da:43:cb:67:17:c0:df:b8:ab:69:49:a4:
f5:7c:2c:a9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbYCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMDczNDE4WhcNMjcwNTIyMDczNDE4WjAYMRYw
FAYDVQQDEw02YTBkNjNmZS1mOGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyFHNH7+8spOVmD+jEaaTcKHoPp1XqJdp7mwCPIKTtJc44KoPmnSApG4m
5M+mbwF0kfHNbekQkACMq56Kq6sJE7fWbE3CV0selt4pNeduvUQZHC1cKI8B32bq
JzKPnvs+mOPS1V8ppSRn5OImIY6ArRQYTGbwlK8CMJKjQO8dDlAcxG99RAGSZ4ha
tdpIQwB4aOwfJdqPXpi/NtYs2yYHXWmt+zr4LfqOZ89pAZu1qjQDURAJO4RYq4mE
FAtsRAgAY7P+Gd1DcVn3fEXUcnmxEbtV/AyxQoLl6BPMHMJtCD2h7P7OQ9zVl6Lg
5BHqn46nggmCnbaLHwzLUHpxEI45JwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ6R
vG3IdaBkN2txZ4Rb5AHMKu3OMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MTc0M0QwNjU0MUUxMUYxQjAyMkQ5RTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPJSMA0GCSqGSIb3DQEBCwUA
A4IBAQBn2bLJy27prSSs9xmkmTMAMFnbjDtX/WgPfsTX9xxzyMvJKQA33IYs74I6
vxFYwCBNo7gP6PxiBq0AaQKrNARw044VAoNx7E+IIien8DsS3uz2QoQ/a0EXXNZj
DxjGIM5gBzlwkHDP0DF6GsmKlZbT3krNudsqUMp7GKMDYJ1tRKqmUfsJldY7PlvR
L6U2KKVbjFeHQZ6IVTFPx44BKHtPRvl+C9iTUuAZZWmE4xmqsEzqC83FlqR3+zfw
z1iTNNB/TRC9QhV9bd5kZtFa6Tah+nTdouTu7iJCfVZDg01GgGNJ7izrMzm8f/wk
1DQ4kgnaQ8tnF8DfuKtpSaT1fCyp
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:34 2026 by rpki-client