Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CAC25A716811F1B22BBBBDCE1D38B0.roa
File: 64CAC25A716811F1B22BBBBDCE1D38B0.roa (raw, json)
Hash identifier: Wp4s8460eYfTaS58rB/zwY1GMCipoxdrLzE38UXMlZc=
Subject key identifier: FE:DF:91:ED:F2:C7:86:E5:DD:34:3A:7D:7F:AD:E0:E0:B3:B2:CD:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CAC25A716811F1B22BBBBDCE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:07:41 +0000
ROA not before: Fri 26 Jun 2026 14:07:35 +0000
ROA not after: Thu 30 Jul 2026 14:07:35 +0000
asID: 9304
IP address blocks: 156.233.66.0/24 maxlen: 24
156.245.163.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114857 (0x1c0a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 14:07:35 2026 GMT
Not After : Jul 30 14:07:35 2026 GMT
Subject: CN=6a3e87ad-a154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:e8:95:bd:1c:6c:5b:5a:70:e3:85:66:48:
fd:a9:ea:0b:89:0c:b9:e6:38:42:61:4f:88:de:ff:
38:66:7f:b1:32:17:e9:b3:69:af:13:5d:e7:8a:ad:
49:6c:b7:bf:7d:ba:d9:30:bc:2c:05:70:a1:a1:47:
79:18:ff:33:4a:3c:ed:38:7e:8a:a1:66:ab:c9:fd:
61:94:52:36:6d:fb:90:32:be:41:40:2c:f5:e3:17:
2e:f3:a3:d0:90:aa:b5:ef:c5:16:e0:58:65:f7:dd:
7a:ca:4d:a4:d0:b6:77:37:07:58:08:01:7f:60:0f:
de:c9:e6:60:10:2f:50:76:8b:2c:e1:26:d5:68:63:
14:78:3b:22:f8:09:4c:7e:24:a0:62:33:97:c9:33:
8d:5d:0b:0c:d5:f0:94:95:0b:47:fc:87:9a:8f:61:
52:51:7e:76:03:f5:b1:26:cc:82:bf:7d:a7:ac:bf:
28:ad:ec:78:bf:14:5d:ee:c1:77:70:7c:ff:02:7a:
2b:7f:c9:ce:c7:ef:ed:41:ea:ee:30:23:87:f6:e2:
0f:8c:a8:ac:72:ea:22:67:18:dc:22:61:1b:92:09:
a9:6d:6c:47:6e:9e:3f:bd:0d:c0:49:7e:dc:11:49:
47:04:eb:7e:d5:58:9d:83:a0:e3:95:54:45:4a:40:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:DF:91:ED:F2:C7:86:E5:DD:34:3A:7D:7F:AD:E0:E0:B3:B2:CD:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64CAC25A716811F1B22BBBBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.66.0/24
156.245.163.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:61:22:3b:39:c4:b7:62:f7:e5:fa:23:0e:a7:0a:c4:ba:f4:
71:eb:7e:c1:54:23:a6:9b:1f:bb:6d:71:52:56:00:88:f2:d3:
36:a1:ea:b4:21:1c:a7:88:c3:73:5d:b2:73:fa:6f:77:e2:24:
81:95:ed:2d:a1:1b:a1:bd:3d:6d:47:bb:55:00:da:d2:5d:d2:
90:d6:8d:10:c9:2f:d1:06:bf:61:6f:04:a6:29:55:fd:08:24:
2b:c2:67:5c:4c:19:12:ac:7a:64:f3:8b:f7:5a:f1:fc:3d:a5:
7e:2e:fb:bc:c4:60:84:0a:81:ab:aa:c9:5d:d3:22:72:c5:ed:
86:97:9c:0e:5c:22:b5:4f:c0:7a:11:14:5e:70:e9:65:2c:06:
de:76:cf:42:f0:dd:23:55:cb:2e:9d:00:0e:5a:d6:14:f8:da:
d9:78:58:67:5a:d2:f8:ae:56:55:54:45:ce:d3:b6:f0:dc:fa:
5e:b5:6b:80:81:b7:55:01:63:26:88:dc:f9:de:1d:5e:d3:56:
52:7d:57:7d:b6:3f:0b:ff:3f:c7:c3:59:b7:3a:c3:90:3e:cc:
d7:27:62:93:6d:13:aa:6c:47:6e:c2:16:d7:a1:49:d8:e2:4c:
8e:4a:df:6a:f5:49:9a:0f:b9:db:51:85:8f:47:14:ab:ec:83:
2e:19:39:6f
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAcCpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI2MTQwNzM1WhcNMjYwNzMwMTQwNzM1WjAYMRYw
FAYDVQQDEw02YTNlODdhZC1hMTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq6Polb0cbFtacOOFZkj9qeoLiQy55jhCYU+I3v84Zn+xMhfps2mvE13n
iq1JbLe/fbrZMLwsBXChoUd5GP8zSjztOH6KoWaryf1hlFI2bfuQMr5BQCz14xcu
86PQkKq178UW4Fhl9916yk2k0LZ3NwdYCAF/YA/eyeZgEC9Qdoss4SbVaGMUeDsi
+AlMfiSgYjOXyTONXQsM1fCUlQtH/Ieaj2FSUX52A/WxJsyCv32nrL8orex4vxRd
7sF3cHz/Anorf8nOx+/tQeruMCOH9uIPjKiscuoiZxjcImEbkgmpbWxHbp4/vQ3A
SX7cEUlHBOt+1Vidg6DjlVRFSkDdNwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFP7f
ke3yx4bl3TQ6fX+t4OCzss3bMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NENBQzI1QTcxNjgxMUYxQjIyQkJCQkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnOlCAwQAnPWjAwQAnPXCAwQA
nPXTAwQAnPXgAwQAnP27MA0GCSqGSIb3DQEBCwUAA4IBAQAvYSI7OcS3Yvfl+iMO
pwrEuvRx637BVCOmmx+7bXFSVgCI8tM2oeq0IRyniMNzXbJz+m934iSBle0toRuh
vT1tR7tVANrSXdKQ1o0QyS/RBr9hbwSmKVX9CCQrwmdcTBkSrHpk84v3WvH8PaV+
Lvu8xGCECoGrqsld0yJyxe2Gl5wOXCK1T8B6ERRecOllLAbeds9C8N0jVcsunQAO
WtYU+NrZeFhnWtL4rlZVVEXO07bw3PpetWuAgbdVAWMmiNz53h1e01ZSfVd9tj8L
/z/Hw1m3OsOQPszXJ2KTbROqbEduwhbXoUnY4kyOSt9q9UmaD7nbUYWPRxSr7IMu
GTlv
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client