Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6334EB36740711F198214AA5CE1D38B0.roa
File: 6334EB36740711F198214AA5CE1D38B0.roa (raw, json)
Hash identifier: 0cWYd4VuKvDBWsqdjRWM17FsHgtzgGWqEuvgg438hBY=
Subject key identifier: C7:EC:BF:95:7B:BE:87:2A:7F:C9:36:39:49:5E:FE:D1:F2:BC:17:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C1DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6334EB36740711F198214AA5CE1D38B0.roa
Signing time: Mon 29 Jun 2026 22:10:51 +0000
ROA not before: Mon 29 Jun 2026 22:10:46 +0000
ROA not after: Wed 05 Aug 2026 22:10:46 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115166 (0x1c1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 22:10:46 2026 GMT
Not After : Aug 5 22:10:46 2026 GMT
Subject: CN=6a42ed6a-182a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:7b:bf:73:7c:ad:df:2b:c3:ea:48:44:17:
08:52:c7:b6:8e:f5:2d:9c:37:ef:8a:5d:65:3d:e6:
2d:89:11:41:60:c5:15:91:e7:c8:fb:68:97:97:af:
57:63:93:e7:d3:27:25:2a:af:f6:27:e0:4f:26:07:
74:29:fa:92:64:ac:9d:c1:3d:d5:80:d3:32:d5:f1:
e5:04:52:8a:a7:2f:84:ef:1c:7f:76:77:c4:00:76:
0e:0f:fc:73:44:fe:fa:10:de:6e:a4:25:71:3c:08:
32:ab:fa:9f:bb:d5:60:0c:cc:e5:d4:03:43:c3:86:
fa:4f:3b:eb:91:30:c9:6c:45:2e:51:fc:39:ae:d4:
43:3f:27:1d:46:cd:84:f8:9a:c7:49:cb:16:73:a8:
49:28:16:48:a3:b2:b1:75:99:7e:e2:ee:ae:d2:58:
5e:d2:bf:27:f6:56:ae:0b:fe:3d:56:b9:e2:f4:f8:
f5:df:ba:f0:e5:48:f8:62:26:04:de:86:9d:13:a7:
70:39:19:26:a0:eb:1e:f3:f2:5a:e9:7a:21:37:b7:
71:39:f9:2a:dc:b1:b9:ee:16:5c:72:85:e5:0d:b8:
10:b7:fe:f1:65:bb:18:9c:07:97:e6:61:bc:de:28:
d5:f5:e4:c1:96:c6:09:df:f8:07:a7:09:d2:b7:e4:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EC:BF:95:7B:BE:87:2A:7F:C9:36:39:49:5E:FE:D1:F2:BC:17:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6334EB36740711F198214AA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1d:42:e5:eb:2b:a5:54:32:34:b8:08:a4:72:a1:fb:ed:2d:71:
00:cc:4b:6a:14:23:9f:5c:b2:e8:c0:09:d1:0b:a4:94:57:68:
ba:51:06:93:ea:b5:75:d2:91:e7:21:89:57:c3:c1:93:08:13:
b2:9e:c7:ec:c4:0c:79:7b:4c:75:87:2b:9a:c0:c8:a3:d1:3d:
27:4f:32:66:98:b2:08:6f:fb:b0:4b:72:13:14:33:e8:cd:3a:
41:57:fe:7b:d9:8b:a1:33:5f:57:f5:d8:28:ee:9f:50:01:6e:
cc:33:63:b2:f2:6d:96:1e:47:2d:b6:45:58:e5:16:a3:a8:19:
3c:13:6e:c8:4a:33:01:f4:77:0c:6f:76:55:54:f7:65:64:09:
23:a6:7c:5d:79:ce:4d:08:0b:67:9c:1e:3e:11:e5:49:12:60:
28:b4:11:be:ad:e5:bf:94:85:9a:c5:64:c1:2c:30:ce:4e:da:
ad:dd:5c:c6:72:84:e2:cc:e8:dc:c5:5e:3c:79:80:5f:d4:90:
83:f8:1b:3f:8f:39:27:64:95:8c:46:7e:0c:92:ea:f4:c8:1d:
57:be:1d:ce:14:18:9c:4f:4e:1c:ea:0d:6d:dc:c8:a9:42:f8:
53:f9:4b:50:a4:bc:c9:96:db:6e:ac:2e:86:e1:14:72:4b:20:
1e:1e:60:3f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcHeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI5MjIxMDQ2WhcNMjYwODA1MjIxMDQ2WjAYMRYw
FAYDVQQDEw02YTQyZWQ2YS0xODJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqB7v3N8rd8rw+pIRBcIUse2jvUtnDfvil1lPeYtiRFBYMUVkefI+2iX
l69XY5Pn0yclKq/2J+BPJgd0KfqSZKydwT3VgNMy1fHlBFKKpy+E7xx/dnfEAHYO
D/xzRP76EN5upCVxPAgyq/qfu9VgDMzl1ANDw4b6TzvrkTDJbEUuUfw5rtRDPycd
Rs2E+JrHScsWc6hJKBZIo7KxdZl+4u6u0lhe0r8n9lauC/49Vrni9Pj137rw5Uj4
YiYE3oadE6dwORkmoOse8/Ja6XohN7dxOfkq3LG57hZccoXlDbgQt/7xZbsYnAeX
5mG83ijV9eTBlsYJ3/gHpwnSt+Sr5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMfs
v5V7vocqf8k2OUle/tHyvBdgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MzM0RUIzNjc0MDcxMUYxOTgyMTRBQTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQAdQuXrK6VUMjS4CKRyofvtLXEAzEtqFCOfXLLowAnRC6SUV2i6UQaT6rV1
0pHnIYlXw8GTCBOynsfsxAx5e0x1hyuawMij0T0nTzJmmLIIb/uwS3ITFDPozTpB
V/572YuhM19X9dgo7p9QAW7MM2Oy8m2WHkcttkVY5RajqBk8E27ISjMB9HcMb3ZV
VPdlZAkjpnxdec5NCAtnnB4+EeVJEmAotBG+reW/lIWaxWTBLDDOTtqt3VzGcoTi
zOjcxV48eYBf1JCD+Bs/jzknZJWMRn4Mkur0yB1Xvh3OFBicT04c6g1t3MipQvhT
+UtQpLzJltturC6G4RRySyAeHmA/
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:36 2026 by rpki-client