Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D47455A75CB11F1A44360ECCE1D38B0.roa
File: 5D47455A75CB11F1A44360ECCE1D38B0.roa (raw, json)
Hash identifier: iHdH6EdmEoFk0CZAPJFzDgrEbn79PtQ7rbrc62kXDPY=
Subject key identifier: 53:53:E2:63:40:5B:0C:C0:C8:85:BB:E3:0C:42:EA:A4:1F:70:19:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C238
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D47455A75CB11F1A44360ECCE1D38B0.roa
Signing time: Thu 02 Jul 2026 04:06:13 +0000
ROA not before: Thu 02 Jul 2026 04:06:08 +0000
ROA not after: Sat 25 Jul 2026 04:06:08 +0000
asID: 32043
IP address blocks: 156.249.137.0/24 maxlen: 24
156.249.138.0/24 maxlen: 24
156.249.140.0/24 maxlen: 24
156.249.141.0/24 maxlen: 24
156.249.142.0/24 maxlen: 24
156.249.143.0/24 maxlen: 24
156.249.144.0/24 maxlen: 24
156.249.152.0/24 maxlen: 24
156.249.155.0/24 maxlen: 24
156.249.156.0/24 maxlen: 24
156.249.157.0/24 maxlen: 24
156.249.160.0/24 maxlen: 24
156.249.189.0/24 maxlen: 24
156.249.194.0/24 maxlen: 24
156.249.195.0/24 maxlen: 24
156.249.200.0/24 maxlen: 24
156.249.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115256 (0x1c238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 04:06:08 2026 GMT
Not After : Jul 25 04:06:08 2026 GMT
Subject: CN=6a45e3b5-dcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:79:d4:6f:8f:b4:67:40:a4:f2:d5:6e:d2:
cc:34:d2:6d:99:7c:bf:d4:c8:71:b2:03:6f:6f:20:
ee:86:26:12:31:39:99:08:c4:78:0e:29:23:f3:de:
88:26:5e:15:28:60:8f:86:fa:11:1e:f9:22:b5:0a:
82:a1:dd:5f:bd:18:09:43:f6:c2:a5:35:67:34:aa:
e3:56:d6:ac:89:2f:b3:1a:cb:8b:ca:9e:c4:97:6d:
c4:f1:e2:3e:9b:5d:18:a5:44:40:0d:0c:aa:7b:e1:
cb:ab:68:e9:00:9b:51:e0:76:37:a9:56:18:77:62:
23:93:2f:24:68:e7:28:11:9b:7e:f3:1f:b4:ec:4f:
2f:d5:3e:98:48:b0:98:fe:2c:e1:ad:21:17:d5:b0:
bc:f9:17:2a:22:8d:e4:ff:2e:59:a2:fb:6d:8e:58:
78:8a:31:0f:41:e6:74:45:d6:5e:f2:11:90:da:e1:
5f:61:9c:cb:dc:56:f0:32:68:1b:7a:65:db:57:06:
1a:ee:f3:54:6a:ad:bc:b6:0e:17:52:5d:27:34:00:
21:ed:81:3a:7f:20:b6:b4:99:89:ec:5f:a9:b4:ee:
c4:e4:b4:b4:ea:e0:94:54:33:fc:a8:f4:3d:e5:a3:
c1:10:3d:ab:25:1d:4b:5a:62:a2:33:6b:6d:f1:b2:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:53:E2:63:40:5B:0C:C0:C8:85:BB:E3:0C:42:EA:A4:1F:70:19:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D47455A75CB11F1A44360ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.137.0-156.249.138.255
156.249.140.0-156.249.144.255
156.249.152.0/24
156.249.155.0-156.249.157.255
156.249.160.0/24
156.249.189.0/24
156.249.194.0/23
156.249.200.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:c3:b6:0d:a0:37:ca:67:3e:ac:02:05:ea:12:4c:0a:1b:7c:
2e:22:42:fd:a9:d8:0b:d0:e9:f5:16:d5:98:63:5f:9e:8c:f3:
b1:be:04:9e:1e:0d:29:5c:3d:e1:58:0b:fb:43:be:df:8f:4e:
73:15:b9:f1:27:54:7a:92:ec:e5:b6:18:5b:a1:27:df:26:6d:
af:9a:51:c8:b5:80:03:4a:7b:1f:d4:67:8c:5c:08:27:a6:0a:
f3:4d:7f:1e:df:a3:58:fa:4e:66:14:2d:8c:8e:ff:b5:75:83:
8f:60:ed:77:04:88:c6:29:7a:1e:e4:de:58:b2:7e:4f:28:90:
08:1c:4d:60:6e:f5:9a:da:1e:a6:c9:3b:69:be:cd:d9:c5:6d:
ad:56:0a:96:b1:49:52:ae:31:55:6c:47:59:30:cf:f9:46:9b:
aa:b6:0a:a7:d8:ee:11:0e:8d:a5:0f:db:e2:7c:4b:d3:a1:1b:
1e:b1:91:5e:ae:c8:1b:6e:c4:69:2b:a8:c9:a4:4b:29:e9:19:
a3:8e:de:a2:c4:96:3f:6b:db:d8:a6:83:b6:ed:2d:07:56:30:
61:4e:2c:ab:8e:09:b9:05:44:eb:b0:e0:83:72:7e:cf:0a:05:
bc:7f:d3:5b:e4:2d:86:0c:b7:c0:44:ef:1a:6d:84:53:61:00:
22:b3:88:94
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIDAcI4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAyMDQwNjA4WhcNMjYwNzI1MDQwNjA4WjAYMRYw
FAYDVQQDEw02YTQ1ZTNiNS1kY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAred51G+PtGdApPLVbtLMNNJtmXy/1MhxsgNvbyDuhiYSMTmZCMR4Dikj
896IJl4VKGCPhvoRHvkitQqCod1fvRgJQ/bCpTVnNKrjVtasiS+zGsuLyp7El23E
8eI+m10YpURADQyqe+HLq2jpAJtR4HY3qVYYd2Ijky8kaOcoEZt+8x+07E8v1T6Y
SLCY/izhrSEX1bC8+RcqIo3k/y5Zovttjlh4ijEPQeZ0RdZe8hGQ2uFfYZzL3Fbw
MmgbemXbVwYa7vNUaq28tg4XUl0nNAAh7YE6fyC2tJmJ7F+ptO7E5LS06uCUVDP8
qPQ95aPBED2rJR1LWmKiM2tt8bLS9QIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFFNT
4mNAWwzAyIW74wxC6qQfcBnAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RDQ3NDU1QTc1Q0IxMUYxQTQ0MzYwRUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBACc+YkDBACc+YowDAMEApz5
jAMEAJz5kAMEAJz5mDAMAwQAnPmbAwQBnPmcAwQAnPmgAwQAnPm9AwQBnPnCAwQB
nPnIMA0GCSqGSIb3DQEBCwUAA4IBAQC5w7YNoDfKZz6sAgXqEkwKG3wuIkL9qdgL
0On1FtWYY1+ejPOxvgSeHg0pXD3hWAv7Q77fj05zFbnxJ1R6kuzlthhboSffJm2v
mlHItYADSnsf1GeMXAgnpgrzTX8e36NY+k5mFC2Mjv+1dYOPYO13BIjGKXoe5N5Y
sn5PKJAIHE1gbvWa2h6myTtpvs3ZxW2tVgqWsUlSrjFVbEdZMM/5Rpuqtgqn2O4R
Do2lD9vifEvToRsesZFersgbbsRpK6jJpEsp6Rmjjt6ixJY/a9vYpoO27S0HVjBh
Tiyrjgm5BUTrsOCDcn7PCgW8f9Nb5C2GDLfARO8abYRTYQAis4iU
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:12 2026 by rpki-client