Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EEB8C6581A11F1AB4A1EB2CE1D38B0.roa
File: 59EEB8C6581A11F1AB4A1EB2CE1D38B0.roa (raw, json)
Hash identifier: B1kvGfTbjt2FigaiV1hGxoECh2uk1As2ISaYfG+h9B8=
Subject key identifier: 88:7A:D0:DB:61:51:2C:21:59:40:4B:0C:CB:BD:C9:91:AA:BB:03:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B974
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EEB8C6581A11F1AB4A1EB2CE1D38B0.roa
Signing time: Mon 25 May 2026 09:16:04 +0000
ROA not before: Mon 25 May 2026 09:15:58 +0000
ROA not after: Fri 26 Feb 2027 09:15:58 +0000
asID: 140951
IP address blocks: 156.231.56.0/24 maxlen: 24
156.231.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113012 (0x1b974)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 09:15:58 2026 GMT
Not After : Feb 26 09:15:58 2027 GMT
Subject: CN=6a141354-7252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:40:b6:f2:12:a5:8c:a4:f0:6c:bd:99:ad:
87:6d:88:80:ad:37:53:2d:ef:a3:d4:75:a3:3a:ea:
bd:f1:ae:6f:63:20:0c:85:ee:ce:2a:13:60:d6:40:
72:05:eb:10:8d:ea:06:6b:24:30:7e:62:a3:e5:88:
96:04:80:bf:8a:68:e4:10:96:ac:1b:0e:48:76:10:
25:6c:65:35:4a:0e:4c:37:3c:93:0f:e6:9d:9a:e5:
bb:da:cc:60:b3:8c:d7:0e:d1:c4:17:25:c3:6f:c2:
ed:75:19:8e:a3:27:dc:71:53:20:be:eb:d2:3a:7b:
6c:40:2a:73:41:86:da:d4:2b:ee:99:90:6f:59:92:
fa:ec:fb:33:72:84:df:2f:74:f3:2c:68:f0:02:8d:
8c:9f:ab:44:b7:bf:8f:00:ef:66:4d:ae:45:2e:3e:
dd:5d:4b:b5:d0:02:e3:d8:4c:3e:9c:26:cc:8b:e8:
42:9c:04:94:24:55:88:e8:76:34:08:6b:e6:25:ec:
66:b3:cd:24:ba:50:8a:58:c7:54:5c:5a:5f:06:96:
36:8a:06:60:a5:34:72:72:ea:8d:5c:48:70:e3:0f:
49:71:f1:6f:ea:c8:26:03:1b:7f:04:9b:51:e6:fe:
25:f7:aa:77:98:49:c0:41:05:26:01:67:ab:51:7d:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7A:D0:DB:61:51:2C:21:59:40:4B:0C:CB:BD:C9:91:AA:BB:03:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EEB8C6581A11F1AB4A1EB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:c6:7a:b0:ad:3c:80:18:68:1e:2c:3a:ea:3b:6b:3f:62:ac:
41:da:54:41:5b:7a:b2:11:73:53:3e:e6:ac:dd:5b:82:1a:15:
05:fb:69:51:5e:fc:0c:41:ed:c2:8e:7e:59:4e:c8:04:7f:17:
ca:72:cd:6b:4d:fa:10:1d:1d:ad:09:e2:6b:29:e8:f8:3e:a6:
57:50:07:78:1e:99:ea:f2:4a:42:81:dc:65:22:94:65:a3:7f:
3c:ab:f9:f9:93:93:dc:c3:74:f8:f9:d2:93:f8:06:20:ba:e3:
b9:27:1d:4e:26:86:36:9d:03:83:c5:de:5d:b2:5a:7a:3c:59:
ca:93:fe:30:dc:02:9f:46:8c:71:eb:95:5b:f9:d5:23:86:03:
e3:56:98:ac:37:b7:7c:6e:64:76:73:6b:b9:88:18:3d:04:f2:
f8:72:1c:c6:6c:dc:24:0c:cd:97:dc:c7:56:56:03:2e:c9:ca:
ed:34:93:32:0e:bd:3e:76:df:9a:d2:43:84:90:8f:ea:92:74:
cf:e2:1e:52:ec:4e:0f:b7:b4:4c:7d:4c:89:27:4e:c1:e6:4d:
e9:3a:6a:af:46:88:8d:2e:bb:c6:46:ed:b3:38:da:62:f1:10:
bb:9d:12:1d:fa:1a:84:20:4d:19:fa:97:65:69:c4:59:c8:c8:
64:92:ae:fc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbl0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI1MDkxNTU4WhcNMjcwMjI2MDkxNTU4WjAYMRYw
FAYDVQQDEw02YTE0MTM1NC03MjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtANAtvISpYyk8Gy9ma2HbYiArTdTLe+j1HWjOuq98a5vYyAMhe7OKhNg
1kByBesQjeoGayQwfmKj5YiWBIC/imjkEJasGw5IdhAlbGU1Sg5MNzyTD+admuW7
2sxgs4zXDtHEFyXDb8LtdRmOoyfccVMgvuvSOntsQCpzQYba1CvumZBvWZL67Psz
coTfL3TzLGjwAo2Mn6tEt7+PAO9mTa5FLj7dXUu10ALj2Ew+nCbMi+hCnASUJFWI
6HY0CGvmJexms80kulCKWMdUXFpfBpY2igZgpTRycuqNXEhw4w9JcfFv6sgmAxt/
BJtR5v4l96p3mEnAQQUmAWerUX1nnQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIh6
0NthUSwhWUBLDMu9yZGquwOqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81OUVFQjhDNjU4MUExMUYxQUI0QTFFQjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOc4MA0GCSqGSIb3DQEBCwUA
A4IBAQCjxnqwrTyAGGgeLDrqO2s/YqxB2lRBW3qyEXNTPuas3VuCGhUF+2lRXvwM
Qe3Cjn5ZTsgEfxfKcs1rTfoQHR2tCeJrKej4PqZXUAd4Hpnq8kpCgdxlIpRlo388
q/n5k5Pcw3T4+dKT+AYguuO5Jx1OJoY2nQODxd5dslp6PFnKk/4w3AKfRoxx65Vb
+dUjhgPjVpisN7d8bmR2c2u5iBg9BPL4chzGbNwkDM2X3MdWVgMuycrtNJMyDr0+
dt+a0kOEkI/qknTP4h5S7E4Pt7RMfUyJJ07B5k3pOmqvRoiNLrvGRu2zONpi8RC7
nRId+hqEIE0Z+pdlacRZyMhkkq78
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:57 2026 by rpki-client