Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53877142578B11F19C55F7C2CE1D38B0.roa
File: 53877142578B11F19C55F7C2CE1D38B0.roa (raw, json)
Hash identifier: ENgoCUPMx8WOcnH0AQKZkh1Rx+XRdU/VVbZbddwDuZ4=
Subject key identifier: 4E:54:E1:D9:EA:44:BB:8B:AA:72:72:2F:22:B5:C1:65:1F:CC:7B:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B91C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53877142578B11F19C55F7C2CE1D38B0.roa
Signing time: Sun 24 May 2026 16:12:14 +0000
ROA not before: Sun 24 May 2026 16:12:10 +0000
ROA not after: Thu 02 Jul 2026 16:12:10 +0000
asID: 11427
IP address blocks: 156.229.184.0/21 maxlen: 24
156.233.16.0/21 maxlen: 24
156.241.32.0/21 maxlen: 24
156.242.112.0/21 maxlen: 24
156.243.40.0/21 maxlen: 24
156.243.88.0/21 maxlen: 24
156.243.120.0/21 maxlen: 24
156.243.176.0/21 maxlen: 24
156.243.208.0/21 maxlen: 24
156.244.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112924 (0x1b91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 16:12:10 2026 GMT
Not After : Jul 2 16:12:10 2026 GMT
Subject: CN=6a13235e-45b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:b8:b0:0a:a0:c2:c7:c0:88:ce:76:1a:ba:
d0:bc:45:b5:45:83:ff:a4:b1:83:89:03:ad:b0:f2:
83:e3:69:a7:0b:4f:fb:6f:ef:8f:5a:fe:97:aa:c3:
56:44:34:7c:e8:fd:55:a9:31:c8:f7:57:48:83:39:
21:05:2b:8a:2c:af:de:91:23:fa:0b:ad:34:c2:89:
79:53:b7:1d:67:a7:7e:92:ff:77:7e:66:7c:b6:76:
bf:7a:2a:2c:33:33:05:39:3b:f3:e3:c5:d5:3b:0b:
16:9b:69:2f:dc:4f:e8:ec:7f:85:26:70:48:be:a5:
5e:1d:c3:a7:90:b3:ab:ef:b4:a0:81:5c:37:ef:92:
10:9f:5d:62:f0:01:14:08:c5:8f:f1:eb:8a:2a:12:
8e:15:a7:69:78:b4:1a:f8:a5:7d:e1:cb:9e:e4:51:
9e:72:5f:c5:fc:d4:c2:30:cb:21:76:c8:7d:a7:46:
3b:c1:f2:0d:62:00:12:14:a6:a9:37:5c:d9:1a:a0:
2a:2d:09:cd:57:01:d4:92:b1:2e:69:c8:df:43:9d:
dc:27:21:4f:f2:3f:59:a1:42:4f:47:a3:77:1c:f6:
25:a9:49:fc:aa:3c:fe:fc:46:4f:2e:7a:26:47:0f:
a0:66:9f:b7:bd:69:08:07:6b:ed:d4:d8:8c:d0:7c:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:E1:D9:EA:44:BB:8B:AA:72:72:2F:22:B5:C1:65:1F:CC:7B:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53877142578B11F19C55F7C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.184.0/21
156.233.16.0/21
156.241.32.0/21
156.242.112.0/21
156.243.40.0/21
156.243.88.0/21
156.243.120.0/21
156.243.176.0/21
156.243.208.0/21
156.244.136.0/21
Signature Algorithm: sha256WithRSAEncryption
59:75:87:a8:7c:e2:cc:97:dc:be:55:6b:79:29:e3:5a:6c:54:
4c:3b:de:70:0b:a9:f3:0e:4a:2f:ca:13:8f:cf:70:20:6f:0a:
52:7c:22:c7:23:74:fb:88:7e:a4:35:34:99:88:5e:39:2f:a1:
d7:ec:ce:a9:2d:37:93:71:5d:73:34:56:c8:f1:6c:31:b7:ea:
a4:70:86:1b:2a:5d:3e:3e:ca:39:0c:ca:11:a3:de:61:03:6e:
da:d3:b2:0a:93:6c:73:cb:b8:6a:b1:92:cf:64:be:d0:21:cc:
32:33:9f:f6:49:39:38:eb:ba:fe:f7:2b:ef:e5:1e:20:66:ae:
28:e9:7b:8f:43:73:02:ad:28:54:38:02:45:a8:13:9e:ab:7f:
85:2f:1b:a8:a8:6d:ec:c2:db:fa:a6:4f:0b:79:44:8f:01:3b:
9b:a8:49:89:d8:f4:ff:07:79:0b:a5:7f:7b:49:6e:ce:e4:91:
bf:f3:9c:b3:ca:82:04:83:34:41:73:cf:29:85:ea:ed:fa:94:
2e:b2:fa:c7:1c:d2:0b:d8:89:77:9b:53:73:57:dd:b6:ea:74:
17:ac:03:05:5a:75:74:a4:c3:e8:ed:8e:2d:24:6f:e8:41:c0:
7b:8a:bd:21:77:7a:32:d4:89:4c:9e:8b:0c:27:cd:49:92:74:
3c:2b:fe:f9
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAbkcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI0MTYxMjEwWhcNMjYwNzAyMTYxMjEwWjAYMRYw
FAYDVQQDEw02YTEzMjM1ZS00NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnB64sAqgwsfAiM52GrrQvEW1RYP/pLGDiQOtsPKD42mnC0/7b++PWv6X
qsNWRDR86P1VqTHI91dIgzkhBSuKLK/ekSP6C600wol5U7cdZ6d+kv93fmZ8tna/
eiosMzMFOTvz48XVOwsWm2kv3E/o7H+FJnBIvqVeHcOnkLOr77SggVw375IQn11i
8AEUCMWP8euKKhKOFadpeLQa+KV94cue5FGecl/F/NTCMMshdsh9p0Y7wfINYgAS
FKapN1zZGqAqLQnNVwHUkrEuacjfQ53cJyFP8j9ZoUJPR6N3HPYlqUn8qjz+/EZP
LnomRw+gZp+3vWkIB2vt1NiM0HyvWwIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFE5U
4dnqRLuLqnJyLyK1wWUfzHtOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Mzg3NzE0MjU3OEIxMUYxOUM1NUY3QzJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDnOW4AwQDnOkQAwQDnPEgAwQD
nPJwAwQDnPMoAwQDnPNYAwQDnPN4AwQDnPOwAwQDnPPQAwQDnPSIMA0GCSqGSIb3
DQEBCwUAA4IBAQBZdYeofOLMl9y+VWt5KeNabFRMO95wC6nzDkovyhOPz3AgbwpS
fCLHI3T7iH6kNTSZiF45L6HX7M6pLTeTcV1zNFbI8Wwxt+qkcIYbKl0+Pso5DMoR
o95hA27a07IKk2xzy7hqsZLPZL7QIcwyM5/2STk467r+9yvv5R4gZq4o6XuPQ3MC
rShUOAJFqBOeq3+FLxuoqG3swtv6pk8LeUSPATubqEmJ2PT/B3kLpX97SW7O5JG/
85yzyoIEgzRBc88phert+pQusvrHHNIL2Il3m1NzV9226nQXrAMFWnV0pMPo7Y4t
JG/oQcB7ir0hd3oy1IlMnosMJ81JknQ8K/75
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:14 2026 by rpki-client