Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBCACBE7C3411F18789B4A2CE1D38B0.roa
File: 5CBCACBE7C3411F18789B4A2CE1D38B0.roa (raw, json)
Hash identifier: 0IAozGsB07+aujIDtCcmLSEdhP9pQ5Z+MHqv4iDOMnc=
Subject key identifier: DE:7A:2D:63:4F:8F:3B:6F:25:77:B3:7E:27:8D:07:CD:39:84:D6:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C41E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBCACBE7C3411F18789B4A2CE1D38B0.roa
Signing time: Fri 10 Jul 2026 07:52:56 +0000
ROA not before: Fri 10 Jul 2026 07:52:52 +0000
ROA not after: Tue 18 Aug 2026 07:52:52 +0000
asID: 398823
IP address blocks: 156.245.64.0/18 maxlen: 24
156.245.64.0/20 maxlen: 24
156.245.80.0/20 maxlen: 24
156.245.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115742 (0x1c41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 07:52:52 2026 GMT
Not After : Aug 18 07:52:52 2026 GMT
Subject: CN=6a50a4d8-bb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6b:06:ba:9c:0b:c4:7a:a0:be:29:17:05:b8:
b7:49:57:78:88:52:9b:0b:cc:b2:65:25:95:cf:cb:
c9:ba:03:82:64:65:5b:e5:22:15:1a:e8:8f:cd:33:
65:43:ae:0f:39:c8:53:de:5e:d8:7f:60:86:b6:29:
a2:bf:f1:69:eb:9b:a9:94:f0:37:cd:72:48:08:7e:
ba:99:e0:ff:07:f9:f8:06:4d:bb:56:74:ab:11:da:
d7:16:6a:5b:b0:46:bf:84:6f:5f:b4:68:9d:ba:56:
4e:d6:a5:30:f7:b2:0c:b1:63:de:e1:2d:73:87:82:
bb:43:6e:c9:5d:77:cb:7e:43:bd:70:58:3f:da:ce:
56:d3:93:ce:82:aa:06:10:d0:96:8b:ca:79:c7:a3:
14:35:59:4c:8b:b2:31:32:09:af:c9:5c:92:a8:97:
61:b8:46:b6:64:1a:44:86:1d:87:cb:6e:e8:96:fa:
c5:3a:6d:16:2d:f6:97:c4:c1:5e:77:3a:d6:38:fc:
94:2c:f4:8b:57:32:7f:f4:66:e0:3b:0e:ee:08:aa:
1e:58:28:ba:44:81:16:a8:e5:c5:cb:9b:d0:32:f7:
69:24:78:8d:eb:f0:3b:13:4c:8b:7d:1d:48:25:7c:
5c:f0:f6:1f:ca:0a:01:ed:89:7e:f7:25:fe:b8:3a:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7A:2D:63:4F:8F:3B:6F:25:77:B3:7E:27:8D:07:CD:39:84:D6:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CBCACBE7C3411F18789B4A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.64.0/18
Signature Algorithm: sha256WithRSAEncryption
1d:d2:7a:df:9b:4f:70:5c:d0:1b:ca:0a:0d:aa:7c:30:5b:e9:
96:cf:6f:e7:cc:61:89:b7:6e:bb:00:ba:3b:90:d1:72:54:6b:
2e:62:8e:f0:72:08:c4:19:f0:48:59:13:4b:25:77:37:a3:12:
9c:95:f0:db:72:8d:92:34:f1:a9:86:ff:6e:3d:ff:91:2e:6f:
8a:50:df:94:ef:40:1e:21:ca:9c:dc:ec:46:14:46:8b:de:c8:
cf:15:d8:03:67:94:9f:c6:4b:2e:57:68:d1:e8:71:d4:99:72:
6f:3c:13:78:1b:8a:78:71:09:fc:3c:4c:ad:19:c2:a8:e6:6b:
79:eb:7f:69:b7:4b:91:92:49:a0:fa:5f:20:68:b2:70:34:c4:
7e:ff:ea:ea:32:1b:e9:97:ff:f8:3a:41:f3:c1:11:8a:a5:92:
cf:b4:42:f7:b8:9a:e8:71:41:4d:e8:1b:4b:c4:cf:13:42:07:
50:52:2f:85:d5:4d:cb:a0:3b:f1:55:f6:0d:17:45:88:4a:1d:
e8:4c:f8:83:20:b9:81:18:60:83:2b:c8:28:c0:b2:b8:fe:6c:
08:44:5e:68:a8:ea:67:df:24:89:08:d8:fb:4e:7c:32:d4:c4:
a6:25:b9:f3:d8:42:27:28:ab:a9:d0:26:5d:53:8b:0a:50:d7:
71:53:9a:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcQeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzEwMDc1MjUyWhcNMjYwODE4MDc1MjUyWjAYMRYw
FAYDVQQDEw02YTUwYTRkOC1iYjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt2sGupwLxHqgvikXBbi3SVd4iFKbC8yyZSWVz8vJugOCZGVb5SIVGuiP
zTNlQ64POchT3l7Yf2CGtimiv/Fp65uplPA3zXJICH66meD/B/n4Bk27VnSrEdrX
FmpbsEa/hG9ftGidulZO1qUw97IMsWPe4S1zh4K7Q27JXXfLfkO9cFg/2s5W05PO
gqoGENCWi8p5x6MUNVlMi7IxMgmvyVySqJdhuEa2ZBpEhh2Hy27olvrFOm0WLfaX
xMFedzrWOPyULPSLVzJ/9GbgOw7uCKoeWCi6RIEWqOXFy5vQMvdpJHiN6/A7E0yL
fR1IJXxc8PYfygoB7Yl+9yX+uDqvHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN56
LWNPjztvJXezfieNB805hNb3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Q0JDQUNCRTdDMzQxMUYxODc4OUI0QTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPVAMA0GCSqGSIb3DQEBCwUA
A4IBAQAd0nrfm09wXNAbygoNqnwwW+mWz2/nzGGJt267ALo7kNFyVGsuYo7wcgjE
GfBIWRNLJXc3oxKclfDbco2SNPGphv9uPf+RLm+KUN+U70AeIcqc3OxGFEaL3sjP
FdgDZ5SfxksuV2jR6HHUmXJvPBN4G4p4cQn8PEytGcKo5mt5639pt0uRkkmg+l8g
aLJwNMR+/+rqMhvpl//4OkHzwRGKpZLPtEL3uJrocUFN6BtLxM8TQgdQUi+F1U3L
oDvxVfYNF0WISh3oTPiDILmBGGCDK8gowLK4/mwIRF5oqOpn3ySJCNj7Tnwy1MSm
Jbnz2EInKKup0CZdU4sKUNdxU5om
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:04 2026 by rpki-client