Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58864946550D11F1B7032114CF1D38B0.roa
File: 58864946550D11F1B7032114CF1D38B0.roa (raw, json)
Hash identifier: ZP7aC4zGX5u+ZhPLh1TjqF6tqsA8H868jurZ/ANdy7w=
Subject key identifier: D5:8F:DF:88:A8:11:C6:20:26:7A:A7:07:80:5B:FA:8C:6D:5E:71:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58864946550D11F1B7032114CF1D38B0.roa
Signing time: Thu 21 May 2026 12:05:24 +0000
ROA not before: Thu 21 May 2026 12:05:19 +0000
ROA not after: Wed 19 Aug 2026 12:05:19 +0000
asID: 134365
IP address blocks: 156.224.18.0/23 maxlen: 24
156.224.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112366 (0x1b6ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:05:19 2026 GMT
Not After : Aug 19 12:05:19 2026 GMT
Subject: CN=6a0ef503-1677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:c8:f4:dc:96:06:25:21:2c:c3:88:1d:3c:
46:e0:ff:7f:3f:9a:5b:83:ea:bc:6c:10:a8:22:fc:
8a:71:2c:2f:e6:3b:5e:b3:3b:5e:5e:ca:d9:74:23:
e8:df:59:2a:f0:f3:dc:52:f0:98:a1:01:db:72:57:
74:03:46:26:2c:1b:de:27:bd:78:cd:f5:2e:87:73:
06:77:56:d6:6f:a3:0d:88:49:7a:5d:7e:72:5e:a3:
d4:c3:b4:1e:90:ce:be:f9:6e:f5:16:b9:3e:86:c6:
31:50:f2:d0:28:d3:2a:13:d3:c7:5f:ce:57:11:49:
eb:61:6c:86:92:2c:c9:87:02:ac:7e:53:4c:0d:12:
f5:5e:4c:4a:9f:9a:b2:c8:32:24:49:a0:3d:2d:5e:
0d:60:3c:26:53:7a:e8:92:77:d9:3a:94:5b:e5:b6:
93:3b:8d:77:9e:cc:73:c8:ce:d2:92:2b:0c:42:88:
39:3c:8a:eb:a9:aa:64:86:5d:39:45:cb:96:89:b8:
a6:f1:2c:e0:03:84:9d:7d:6f:e5:a2:4e:ce:60:33:
4f:e2:c6:2f:d8:f0:d5:2d:29:49:76:7b:7a:fc:c3:
35:66:10:20:32:97:1c:56:2f:b7:51:fd:74:ec:5c:
17:b8:9d:75:86:e0:87:b6:ed:2f:e4:e7:0e:27:11:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:DF:88:A8:11:C6:20:26:7A:A7:07:80:5B:FA:8C:6D:5E:71:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/58864946550D11F1B7032114CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.18.0/23
156.224.28.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:f3:8f:6f:24:52:ed:74:9b:0f:d1:af:05:c6:36:47:3d:dc:
30:de:e7:b3:d0:6c:ce:04:d4:47:38:3c:e7:b3:56:9c:30:cb:
28:4e:28:a0:d1:6a:f7:4e:5f:ab:11:ca:c4:a1:e3:2d:ea:48:
c3:3b:8c:29:e5:93:88:be:49:b0:6b:3f:12:ff:64:6e:e1:24:
e1:53:90:22:84:5c:24:12:68:ad:ea:23:87:28:e0:01:cc:97:
3f:4f:96:c1:b9:43:93:df:ce:72:80:7b:61:63:ea:9f:17:61:
a2:b2:57:86:1d:da:a8:53:07:07:f7:99:9e:cd:fa:6c:f0:4d:
99:08:10:16:f9:97:ac:4e:ee:c8:81:a3:1b:96:5d:f0:16:cc:
f6:41:97:b1:31:ab:f6:37:49:74:eb:eb:89:b4:5b:15:99:91:
b4:c7:6a:bb:11:0e:fe:2a:90:78:a5:be:88:24:2d:a7:22:36:
67:db:fd:80:d1:ee:a9:11:b7:81:bd:dc:b8:85:cb:ca:2d:90:
48:7b:bb:3e:c7:2f:c6:15:93:27:54:58:f4:48:32:d1:3d:f9:
a2:45:bc:db:fb:07:4e:f3:85:cf:0a:cc:54:d8:04:2f:6d:3c:
fb:23:50:57:97:de:a0:ad:22:50:66:eb:5d:12:2f:3c:a6:f0:
e4:e6:7f:80
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbbuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTIwNTE5WhcNMjYwODE5MTIwNTE5WjAYMRYw
FAYDVQQDEw02YTBlZjUwMy0xNjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3tXI9NyWBiUhLMOIHTxG4P9/P5pbg+q8bBCoIvyKcSwv5jteszteXsrZ
dCPo31kq8PPcUvCYoQHbcld0A0YmLBveJ714zfUuh3MGd1bWb6MNiEl6XX5yXqPU
w7QekM6++W71Frk+hsYxUPLQKNMqE9PHX85XEUnrYWyGkizJhwKsflNMDRL1XkxK
n5qyyDIkSaA9LV4NYDwmU3roknfZOpRb5baTO413nsxzyM7SkisMQog5PIrrqapk
hl05RcuWibim8SzgA4SdfW/lok7OYDNP4sYv2PDVLSlJdnt6/MM1ZhAgMpccVi+3
Uf107FwXuJ11huCHtu0v5OcOJxFU5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWP
34ioEcYgJnqnB4Bb+oxtXnEzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODg2NDk0NjU1MEQxMUYxQjcwMzIxMTRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnOASAwQBnOAcMA0GCSqGSIb3
DQEBCwUAA4IBAQC6849vJFLtdJsP0a8FxjZHPdww3uez0GzOBNRHODzns1acMMso
Tiig0Wr3Tl+rEcrEoeMt6kjDO4wp5ZOIvkmwaz8S/2Ru4SThU5AihFwkEmit6iOH
KOABzJc/T5bBuUOT385ygHthY+qfF2GisleGHdqoUwcH95mezfps8E2ZCBAW+Zes
Tu7IgaMbll3wFsz2QZexMav2N0l06+uJtFsVmZG0x2q7EQ7+KpB4pb6IJC2nIjZn
2/2A0e6pEbeBvdy4hcvKLZBIe7s+xy/GFZMnVFj0SDLRPfmiRbzb+wdO84XPCsxU
2AQvbTz7I1BXl96grSJQZutdEi88pvDk5n+A
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:23 2026 by rpki-client