Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D89AA8E7AAD11F18E42021BCF1D38B0.roa
File: 6D89AA8E7AAD11F18E42021BCF1D38B0.roa (raw, json)
Hash identifier: BW1msY6e6Zwh2XFlqe1Pg+mYPPIwpndwzs58U1qZ12g=
Subject key identifier: 27:A0:F0:50:9B:EB:AC:9B:4F:7C:C5:B9:F0:CB:0E:D0:1A:85:E4:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D89AA8E7AAD11F18E42021BCF1D38B0.roa
Signing time: Wed 08 Jul 2026 09:14:31 +0000
ROA not before: Wed 08 Jul 2026 09:14:27 +0000
ROA not after: Mon 20 Jul 2026 09:14:27 +0000
asID: 141883
IP address blocks: 156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115618 (0x1c3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 09:14:27 2026 GMT
Not After : Jul 20 09:14:27 2026 GMT
Subject: CN=6a4e14f7-7d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:12:3e:a4:f0:f0:90:39:fa:da:b4:c0:a1:
70:c5:f0:cb:60:be:25:af:ef:2c:d9:ec:f8:a8:b6:
d3:01:78:d4:69:1b:68:1d:07:74:e4:83:26:7c:4a:
9e:25:ed:54:a3:45:0f:35:3d:a9:54:97:44:ff:ab:
5e:2d:18:43:28:49:49:75:5b:48:8e:57:71:6f:7d:
62:5f:a9:e4:e4:cb:0d:c7:ed:e1:50:16:06:ff:5d:
31:a1:e9:93:34:ce:c7:26:5a:e2:6d:7b:d1:19:d4:
16:43:0d:88:a3:ca:18:ee:d1:10:a2:82:23:1a:a4:
4b:1f:3d:61:ef:7a:98:5e:5c:75:ec:eb:12:41:cf:
79:ca:aa:49:f5:d4:e2:5e:f5:42:f4:e0:fb:ce:94:
c9:50:20:e4:78:d1:b9:66:9b:47:15:da:a2:d1:f2:
34:e7:c8:ca:0d:8e:c6:12:2f:c2:fa:93:89:5c:a9:
0f:5f:af:07:26:ce:20:01:24:ef:a0:fa:24:43:6a:
86:c4:a4:07:c5:73:cc:25:96:5f:ba:8b:f0:38:08:
59:2d:03:60:39:62:48:33:cf:30:a5:6c:ab:f4:01:
61:6a:a9:45:c6:d6:1b:f4:fe:87:a2:09:6a:52:25:
06:12:80:56:c8:20:82:50:fd:89:f2:d6:d2:da:f3:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:F0:50:9B:EB:AC:9B:4F:7C:C5:B9:F0:CB:0E:D0:1A:85:E4:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D89AA8E7AAD11F18E42021BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ae:3e:71:5d:d7:46:77:22:26:85:52:d7:ad:9e:4a:9e:31:
c3:1b:9b:e6:11:19:60:44:ec:44:c7:b6:3d:4a:00:83:af:aa:
f5:4b:dd:de:ac:17:b6:89:0c:00:9e:60:cc:ed:f6:69:56:38:
84:bd:c2:ac:eb:05:f8:17:4f:bd:9a:af:f1:1e:d0:96:1b:fe:
27:44:5a:ba:ea:39:49:0c:a5:56:59:71:ef:96:7c:7e:a5:21:
c1:30:2a:02:57:a7:32:c0:13:1a:3c:33:43:5b:a6:98:af:cd:
0a:c0:e5:a4:71:64:45:7a:71:0d:1f:35:f6:2d:90:bf:9c:ae:
e7:cc:8f:6b:87:5d:dd:20:9a:9d:86:19:7d:9e:90:64:49:26:
66:89:ee:37:64:1f:13:67:96:79:b4:61:36:a8:99:5d:b4:be:
35:01:25:56:24:86:75:12:78:ea:0f:a0:1e:50:15:79:3c:63:
cd:3d:ce:90:9e:fd:7f:89:71:3c:29:d5:0b:0e:fc:25:d1:9d:
cc:13:f1:62:de:85:03:69:7f:e4:02:4c:17:86:0a:0e:c4:e3:
e5:85:f0:28:dc:09:16:2e:7c:3f:13:ee:03:5c:fb:cf:0d:ef:
42:bb:3a:90:76:39:70:8f:e1:6d:c8:38:40:a0:3a:cb:8a:fa:
f8:7c:28:da
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAcOiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA4MDkxNDI3WhcNMjYwNzIwMDkxNDI3WjAYMRYw
FAYDVQQDEw02YTRlMTRmNy03ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzT4SPqTw8JA5+tq0wKFwxfDLYL4lr+8s2ez4qLbTAXjUaRtoHQd05IMm
fEqeJe1Uo0UPNT2pVJdE/6teLRhDKElJdVtIjldxb31iX6nk5MsNx+3hUBYG/10x
oemTNM7HJlribXvRGdQWQw2Io8oY7tEQooIjGqRLHz1h73qYXlx17OsSQc95yqpJ
9dTiXvVC9OD7zpTJUCDkeNG5ZptHFdqi0fI058jKDY7GEi/C+pOJXKkPX68HJs4g
ASTvoPokQ2qGxKQHxXPMJZZfuovwOAhZLQNgOWJIM88wpWyr9AFhaqlFxtYb9P6H
oglqUiUGEoBWyCCCUP2J8tbS2vMIMQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFCeg
8FCb66ybT3zFufDLDtAaheTHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RDg5QUE4RTdBQUQxMUYxOEU0MjAyMUJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDAwSc8AMEA5zwMDAMAwQBnPIK
AwQEnPIAMAsDAwGc9gMEAZz2EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOC
AQEAA64+cV3XRnciJoVS162eSp4xwxub5hEZYETsRMe2PUoAg6+q9Uvd3qwXtokM
AJ5gzO32aVY4hL3CrOsF+BdPvZqv8R7Qlhv+J0Rauuo5SQylVllx75Z8fqUhwTAq
AlenMsATGjwzQ1ummK/NCsDlpHFkRXpxDR819i2Qv5yu58yPa4dd3SCanYYZfZ6Q
ZEkmZonuN2QfE2eWebRhNqiZXbS+NQElViSGdRJ46g+gHlAVeTxjzT3OkJ79f4lx
PCnVCw78JdGdzBPxYt6FA2l/5AJMF4YKDsTj5YXwKNwJFi58PxPuA1z7zw3vQrs6
kHY5cI/hbcg4QKA6y4r6+Hwo2g==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:01 2026 by rpki-client