Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8978086038B011F19E034DB2CE1D38B0.roa
File: 8978086038B011F19E034DB2CE1D38B0.roa (raw, json)
Hash identifier: prSMF325ZiBge1VvpPkwVQgdWVT1xcwdkGFpNJnC8NY=
Subject key identifier: D7:1B:5C:06:D0:78:52:DA:6F:9F:EA:5F:42:93:BB:78:BA:94:AD:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8978086038B011F19E034DB2CE1D38B0.roa
Signing time: Wed 15 Apr 2026 09:50:30 +0000
ROA not before: Wed 15 Apr 2026 09:50:25 +0000
ROA not after: Mon 11 May 2026 09:50:25 +0000
asID: 40779
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109779 (0x1acd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:50:25 2026 GMT
Not After : May 11 09:50:25 2026 GMT
Subject: CN=69df5f66-5a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a2:11:42:a7:0e:c2:6c:1b:7f:f5:fe:33:25:
73:8c:3f:38:90:6d:04:9b:24:18:2a:5b:1a:e3:94:
01:76:7f:5a:d0:f6:80:55:32:ca:2c:42:62:7e:51:
54:e5:ff:fe:39:e1:c8:eb:13:ea:0b:eb:6b:de:be:
4e:7b:19:25:56:df:6a:52:b0:ea:1e:ce:6b:16:19:
2c:7e:6f:bb:42:e8:08:48:16:0f:59:e2:9a:61:82:
68:02:78:51:ee:c5:73:6a:bc:22:e3:7a:8b:9a:e8:
91:ac:3d:38:46:b9:58:91:b3:72:12:ec:aa:bf:13:
ef:72:65:36:81:f4:c1:cc:17:ad:42:f6:97:76:2f:
e6:4e:e7:5c:10:f6:6d:b2:d8:74:25:c7:8f:c9:35:
2f:10:fa:ad:a6:fc:5e:08:1f:af:2f:a4:1a:a8:f1:
53:0b:d4:28:34:0d:0e:c8:f3:5b:1d:63:c5:23:be:
54:c3:c4:e6:59:5c:4f:dd:c5:d0:75:62:5b:01:9c:
c1:ac:49:11:23:64:e6:2c:e2:6c:bd:1d:df:c2:85:
a3:e2:4a:93:2b:75:5b:36:30:1f:ec:4d:21:d0:72:
ad:d7:31:74:a9:2a:c8:d0:b1:6c:b6:28:f2:02:c1:
0e:ae:0a:c5:85:e4:38:6f:d3:3c:b1:03:50:e1:b0:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1B:5C:06:D0:78:52:DA:6F:9F:EA:5F:42:93:BB:78:BA:94:AD:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8978086038B011F19E034DB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:e3:99:49:f4:3e:56:69:72:b9:77:a2:f4:39:20:2b:73:f1:
fa:98:b5:11:d2:6c:9a:dd:db:ad:7a:a4:c9:c5:88:2b:19:af:
b8:62:28:fd:fe:ec:f6:64:bb:8c:89:3a:a2:25:de:0c:35:ca:
f2:96:f2:5d:fd:6f:fb:31:a8:91:a9:c2:f2:ee:42:1f:ad:76:
62:cd:cf:f0:da:9b:5b:4a:b8:a6:27:91:74:7c:c8:f7:ac:46:
c7:bb:d1:af:31:85:ff:62:7f:38:91:fb:6d:4b:05:88:d7:f6:
bd:4c:8a:4d:6d:32:5f:fe:c9:cb:16:a0:e1:d6:62:3e:0e:87:
c5:8e:34:de:58:21:d4:e0:35:73:f0:e5:3a:a8:a3:0d:03:db:
61:e2:32:bf:61:61:74:7c:5d:21:04:ce:3f:c7:55:1f:a0:18:
38:e7:f1:f7:ec:10:20:1c:17:77:e4:46:af:3f:22:75:a9:2c:
12:47:f0:e5:f0:54:84:95:da:d7:c0:f6:af:76:09:69:55:d9:
ed:0c:30:c1:10:61:23:ec:53:84:27:89:17:f4:2a:85:32:f8:
1d:72:4f:2e:bc:67:c7:1f:ed:1d:ae:77:ea:32:ab:fa:40:fc:
4d:f7:03:52:35:97:b5:31:3e:b7:01:ce:7d:87:9c:90:e0:da:
57:2b:10:17
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAazTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE1MDk1MDI1WhcNMjYwNTExMDk1MDI1WjAYMRYw
FAYDVQQDEw02OWRmNWY2Ni01YTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5qIRQqcOwmwbf/X+MyVzjD84kG0EmyQYKlsa45QBdn9a0PaAVTLKLEJi
flFU5f/+OeHI6xPqC+tr3r5OexklVt9qUrDqHs5rFhksfm+7QugISBYPWeKaYYJo
AnhR7sVzarwi43qLmuiRrD04RrlYkbNyEuyqvxPvcmU2gfTBzBetQvaXdi/mTudc
EPZtsth0JcePyTUvEPqtpvxeCB+vL6QaqPFTC9QoNA0OyPNbHWPFI75Uw8TmWVxP
3cXQdWJbAZzBrEkRI2TmLOJsvR3fwoWj4kqTK3VbNjAf7E0h0HKt1zF0qSrI0LFs
tijyAsEOrgrFheQ4b9M8sQNQ4bDhTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNcb
XAbQeFLab5/qX0KTu3i6lK3QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84OTc4MDg2MDM4QjAxMUYxOUUwMzREQjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQCM45lJ9D5WaXK5d6L0OSArc/H6mLUR0mya3duteqTJxYgrGa+4Yij9/uz2
ZLuMiTqiJd4MNcrylvJd/W/7MaiRqcLy7kIfrXZizc/w2ptbSrimJ5F0fMj3rEbH
u9GvMYX/Yn84kfttSwWI1/a9TIpNbTJf/snLFqDh1mI+DofFjjTeWCHU4DVz8OU6
qKMNA9th4jK/YWF0fF0hBM4/x1UfoBg45/H37BAgHBd35EavPyJ1qSwSR/Dl8FSE
ldrXwPavdglpVdntDDDBEGEj7FOEJ4kX9CqFMvgdck8uvGfHH+0drnfqMqv6QPxN
9wNSNZe1MT63Ac59h5yQ4NpXKxAX
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:05 2026 by rpki-client