Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779D3F826AE911F1BBF8C407CF1D38B0.roa
File: 779D3F826AE911F1BBF8C407CF1D38B0.roa (raw, json)
Hash identifier: SPyh4nNjZptA8t1GkzmpThZVw0zZChZK47xf7bkMRf0=
Subject key identifier: 64:E2:9A:6E:79:08:04:36:51:25:B1:8E:AA:D1:5E:35:D4:C2:63:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779D3F826AE911F1BBF8C407CF1D38B0.roa
Signing time: Thu 18 Jun 2026 07:43:59 +0000
ROA not before: Thu 18 Jun 2026 07:43:55 +0000
ROA not after: Sat 25 Jul 2026 07:43:55 +0000
asID: 271355
IP address blocks: 156.236.224.0/24 maxlen: 24
156.236.230.0/24 maxlen: 24
156.236.231.0/24 maxlen: 24
156.236.232.0/24 maxlen: 24
156.236.233.0/24 maxlen: 24
156.236.234.0/24 maxlen: 24
156.236.235.0/24 maxlen: 24
156.236.236.0/24 maxlen: 24
156.236.237.0/24 maxlen: 24
156.236.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114414 (0x1beee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 07:43:55 2026 GMT
Not After : Jul 25 07:43:55 2026 GMT
Subject: CN=6a33a1bf-4852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:3f:41:40:c6:72:1e:a9:79:fa:c4:f2:73:
69:84:db:e5:52:3d:d8:79:4a:61:35:09:a4:07:31:
72:74:ba:50:ca:22:47:f5:24:e3:3d:08:d2:90:23:
76:ff:a9:58:26:37:0c:c7:c9:89:4b:a2:96:d0:d4:
aa:f4:9a:89:6d:e3:b2:fa:01:ff:7a:06:eb:7c:fa:
f2:c1:ed:d8:32:74:14:a6:c1:7b:bf:40:6b:57:20:
46:9d:ac:d8:88:f4:c9:8c:72:bb:57:8f:bf:0d:dd:
f0:0a:ca:bf:51:56:94:f5:84:43:e8:47:33:e8:c2:
08:42:c0:2b:95:b1:dc:d9:a9:ec:67:78:ec:a8:ea:
bb:5b:2b:4f:c0:a2:dd:b9:54:bb:d1:48:aa:38:37:
77:50:57:83:0a:db:f0:06:2b:16:db:13:7c:70:4b:
36:6f:0b:b7:f3:25:48:1c:be:57:2b:97:f0:4c:fb:
a6:d8:2f:8b:43:b0:48:97:67:42:f8:8f:4c:61:96:
ac:6d:aa:03:01:43:7c:eb:63:fa:7e:d8:00:0f:bc:
2c:f4:e3:95:48:32:de:2f:bd:5d:e8:37:f9:02:4d:
32:70:5f:a5:b7:4d:2d:33:09:b5:4a:b8:dd:b2:b5:
b8:15:cb:c8:92:bf:74:66:4c:a1:25:e1:df:98:72:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E2:9A:6E:79:08:04:36:51:25:B1:8E:AA:D1:5E:35:D4:C2:63:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/779D3F826AE911F1BBF8C407CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.224.0/24
156.236.230.0-156.236.238.255
Signature Algorithm: sha256WithRSAEncryption
16:03:02:53:29:dd:13:1b:d5:14:d9:a1:cd:d2:ec:3b:23:15:
38:5c:fd:6f:7f:35:f8:5f:a8:18:97:98:e6:8d:6e:aa:cd:ad:
b3:4b:bf:77:64:6c:de:83:0c:c6:bc:80:4f:89:da:43:b8:3b:
47:e6:1e:b5:7c:89:c0:71:85:af:f3:ef:cc:2c:b0:f1:50:02:
ea:00:c8:72:86:26:eb:dc:76:19:0d:bd:22:4c:b6:d0:ca:32:
d5:62:39:55:af:34:36:38:01:ee:06:90:97:4b:e4:99:b6:5a:
9f:40:9b:32:9c:ec:fd:30:79:3b:cd:c3:94:4a:6a:d1:ed:9f:
d3:89:d5:b1:e8:e0:ed:84:3b:5b:73:15:bd:c8:6b:40:0c:00:
87:75:dd:e0:65:7e:82:14:49:67:32:a3:7d:49:82:6c:76:47:
22:44:d6:30:22:c4:90:97:9c:7f:51:2f:7e:ae:28:06:a1:b1:
ac:b6:fb:c2:45:3c:9b:84:9a:3b:1a:c8:b6:e6:a5:fd:c9:f4:
39:65:95:b6:91:6c:67:4f:37:b4:46:ea:70:be:96:df:8f:89:
38:8b:6f:45:e7:94:6f:04:1b:72:71:10:f4:8b:91:7d:33:7b:
31:a2:3b:76:1a:79:ff:ca:12:20:b4:53:fd:28:29:18:07:b4:
dd:07:43:ed
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAb7uMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE4MDc0MzU1WhcNMjYwNzI1MDc0MzU1WjAYMRYw
FAYDVQQDEw02YTMzYTFiZi00ODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApes/QUDGch6pefrE8nNphNvlUj3YeUphNQmkBzFydLpQyiJH9STjPQjS
kCN2/6lYJjcMx8mJS6KW0NSq9JqJbeOy+gH/egbrfPrywe3YMnQUpsF7v0BrVyBG
nazYiPTJjHK7V4+/Dd3wCsq/UVaU9YRD6Ecz6MIIQsArlbHc2ansZ3jsqOq7WytP
wKLduVS70UiqODd3UFeDCtvwBisW2xN8cEs2bwu38yVIHL5XK5fwTPum2C+LQ7BI
l2dC+I9MYZasbaoDAUN862P6ftgAD7ws9OOVSDLeL71d6Df5Ak0ycF+lt00tMwm1
SrjdsrW4FcvIkr90ZkyhJeHfmHImawIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGTi
mm55CAQ2USWxjqrRXjXUwmPrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NzlEM0Y4MjZBRTkxMUYxQkJGOEM0MDdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnOzgMAwDBAGc7OYDBACc7O4w
DQYJKoZIhvcNAQELBQADggEBABYDAlMp3RMb1RTZoc3S7DsjFThc/W9/NfhfqBiX
mOaNbqrNrbNLv3dkbN6DDMa8gE+J2kO4O0fmHrV8icBxha/z78wssPFQAuoAyHKG
JuvcdhkNvSJMttDKMtViOVWvNDY4Ae4GkJdL5Jm2Wp9AmzKc7P0weTvNw5RKatHt
n9OJ1bHo4O2EO1tzFb3Ia0AMAId13eBlfoIUSWcyo31Jgmx2RyJE1jAixJCXnH9R
L36uKAahsay2+8JFPJuEmjsayLbmpf3J9DlllbaRbGdPN7RG6nC+lt+PiTiLb0Xn
lG8EG3JxEPSLkX0zezGiO3Yaef/KEiC0U/0oKRgHtN0HQ+0=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:53 2026 by rpki-client