Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D538284456011F186A502B7CE1D38B0.roa
File: 5D538284456011F186A502B7CE1D38B0.roa (raw, json)
Hash identifier: wn6vGVSQLOjRb0gDJpDq2LwLiciyT6wF8ouI9sbUkHM=
Subject key identifier: 75:3C:0C:5D:1D:70:34:31:F5:CE:12:03:F2:6D:6C:EA:F4:76:E0:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D538284456011F186A502B7CE1D38B0.roa
Signing time: Fri 01 May 2026 13:19:21 +0000
ROA not before: Fri 01 May 2026 13:19:15 +0000
ROA not after: Fri 30 Apr 2027 13:19:15 +0000
asID: 328608
IP address blocks: 156.255.68.0/24 maxlen: 24
156.255.69.0/24 maxlen: 24
156.255.70.0/24 maxlen: 24
156.255.71.0/24 maxlen: 24
156.255.88.0/24 maxlen: 24
156.255.89.0/24 maxlen: 24
156.255.90.0/24 maxlen: 24
156.255.91.0/24 maxlen: 24
156.255.92.0/24 maxlen: 24
156.255.93.0/24 maxlen: 24
156.255.94.0/24 maxlen: 24
156.255.95.0/24 maxlen: 24
156.255.96.0/24 maxlen: 24
156.255.99.0/24 maxlen: 24
156.255.100.0/24 maxlen: 24
156.255.101.0/24 maxlen: 24
156.255.102.0/24 maxlen: 24
156.255.103.0/24 maxlen: 24
156.255.104.0/24 maxlen: 24
156.255.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110760 (0x1b0a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 13:19:15 2026 GMT
Not After : Apr 30 13:19:15 2027 GMT
Subject: CN=69f4a859-c184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a0:00:df:85:d4:6c:85:39:70:ac:fa:02:f6:
65:43:5c:6b:99:e8:19:65:9c:72:0d:e3:4c:72:bb:
70:5b:17:4e:37:6e:b6:77:c8:a4:33:85:e6:8d:24:
23:42:7f:3c:cd:3b:24:e4:89:38:e9:54:06:e5:59:
02:5e:4f:72:45:de:64:3b:78:11:5b:d8:b2:38:60:
c5:62:9d:01:30:a0:0b:d0:3e:a2:79:a8:e7:15:81:
d3:c5:d3:62:26:72:a4:de:b9:d0:bd:05:14:1b:1f:
68:f5:cb:7a:6e:a8:cf:7a:7b:a5:84:78:e4:02:86:
96:77:c6:6b:93:82:cc:ac:db:a8:da:70:a4:ee:b0:
3f:b1:da:e0:c9:2d:9b:13:87:8f:4b:f3:bf:58:35:
a8:42:93:d6:c5:cb:d1:f2:2d:f5:71:34:18:6d:61:
40:65:cf:c9:c2:86:c0:6d:df:3d:b9:5a:5c:54:e0:
e0:cb:8a:ff:e4:01:c3:5c:ee:7f:24:ea:a6:47:2c:
d5:20:47:5a:c1:85:50:80:dc:ab:75:0f:6b:df:aa:
24:8c:08:e2:68:b0:59:81:75:d0:91:4d:33:b9:b3:
c5:ff:f5:ea:ad:34:17:1b:df:cc:48:9f:01:c0:6e:
47:d0:d9:d0:13:76:a0:a9:e7:18:00:ee:ee:b5:1d:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3C:0C:5D:1D:70:34:31:F5:CE:12:03:F2:6D:6C:EA:F4:76:E0:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D538284456011F186A502B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.68.0/22
156.255.88.0-156.255.96.255
156.255.99.0-156.255.105.255
Signature Algorithm: sha256WithRSAEncryption
ba:e4:68:db:4b:26:54:21:d1:96:d9:42:a5:7c:e5:39:6a:1c:
f2:6f:1e:c7:5a:e8:0d:80:20:c3:3d:a9:b5:7a:bf:00:94:70:
62:7b:7e:9d:50:85:29:f7:05:3a:ae:7b:26:0a:9f:94:04:08:
24:39:c0:35:5a:d9:b8:fb:28:23:e3:04:ef:c7:f9:00:34:16:
85:b1:91:54:6a:e0:54:6b:f1:88:55:07:e7:5c:04:ef:29:b8:
fd:54:dc:62:39:e0:46:5c:cc:16:ca:42:93:08:4a:b5:a4:5e:
6e:d5:67:2b:23:1b:db:79:33:70:e6:96:57:72:ab:cb:ca:13:
d3:84:fe:5e:4b:49:9d:fc:c8:39:74:0b:d5:f9:8c:7f:07:86:
ac:43:c2:e9:02:c4:4b:4a:c3:ec:d0:47:6b:93:b2:c6:a3:8d:
64:0b:32:7d:f3:6a:43:3a:69:9b:12:86:7e:b0:95:76:22:fb:
a5:bd:f9:4e:88:65:c3:d8:7b:d9:d7:85:2a:6e:89:c1:ea:b5:
a1:bc:b1:c1:43:f3:61:61:5f:7e:bb:80:1b:9b:d3:45:c2:2b:
5e:f7:fc:6e:6b:41:86:c9:23:6c:44:b1:9e:ad:fc:41:90:08:
e3:62:3d:ca:3f:f8:3a:7f:71:d0:ac:02:ac:27:06:39:c2:06:
b6:24:0d:1f
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAbCoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMTMxOTE1WhcNMjcwNDMwMTMxOTE1WjAYMRYw
FAYDVQQDEw02OWY0YTg1OS1jMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx6AA34XUbIU5cKz6AvZlQ1xrmegZZZxyDeNMcrtwWxdON262d8ikM4Xm
jSQjQn88zTsk5Ik46VQG5VkCXk9yRd5kO3gRW9iyOGDFYp0BMKAL0D6ieajnFYHT
xdNiJnKk3rnQvQUUGx9o9ct6bqjPenulhHjkAoaWd8Zrk4LMrNuo2nCk7rA/sdrg
yS2bE4ePS/O/WDWoQpPWxcvR8i31cTQYbWFAZc/JwobAbd89uVpcVODgy4r/5AHD
XO5/JOqmRyzVIEdawYVQgNyrdQ9r36okjAjiaLBZgXXQkU0zubPF//XqrTQXG9/M
SJ8BwG5H0NnQE3agqecYAO7utR3yUQIDAQABo4ICvjCCArowHQYDVR0OBBYEFHU8
DF0dcDQx9c4SA/JtbOr0duAoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RDUzODI4NDQ1NjAxMUYxODZBNTAyQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQCnP9EMAwDBAOc/1gDBACc/2Aw
DAMEAJz/YwMEAZz/aDANBgkqhkiG9w0BAQsFAAOCAQEAuuRo20smVCHRltlCpXzl
OWoc8m8ex1roDYAgwz2ptXq/AJRwYnt+nVCFKfcFOq57JgqflAQIJDnANVrZuPso
I+ME78f5ADQWhbGRVGrgVGvxiFUH51wE7ym4/VTcYjngRlzMFspCkwhKtaRebtVn
KyMb23kzcOaWV3Kry8oT04T+XktJnfzIOXQL1fmMfweGrEPC6QLES0rD7NBHa5Oy
xqONZAsyffNqQzppmxKGfrCVdiL7pb35Tohlw9h72deFKm6Jweq1obyxwUPzYWFf
fruAG5vTRcIrXvf8bmtBhskjbESxnq38QZAI42I9yj/4On9x0KwCrCcGOcIGtiQN
Hw==
-----END CERTIFICATE-----
Generated at Thu May 7 23:50:20 2026 by rpki-client