Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1899C45A6D11F1878EA7D3CE1D38B0.roa
File: 8D1899C45A6D11F1878EA7D3CE1D38B0.roa (raw, json)
Hash identifier: G6boNkCiPX82GQpozaLseOjuHdjVJrSkPC/5LEFrnZQ=
Subject key identifier: 12:9E:0D:04:9C:6E:D6:15:F1:11:C5:78:E8:38:0F:F2:C5:B9:BF:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1899C45A6D11F1878EA7D3CE1D38B0.roa
Signing time: Thu 28 May 2026 08:16:39 +0000
ROA not before: Thu 28 May 2026 08:16:34 +0000
ROA not after: Wed 01 Jul 2026 08:16:34 +0000
asID: 44559
IP address blocks: 156.233.83.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.249.98.0/24 maxlen: 24
156.249.99.0/24 maxlen: 24
156.249.100.0/24 maxlen: 24
156.249.103.0/24 maxlen: 24
156.249.112.0/24 maxlen: 24
156.249.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113265 (0x1ba71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:16:34 2026 GMT
Not After : Jul 1 08:16:34 2026 GMT
Subject: CN=6a17f9e7-7d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:0a:7b:0b:53:02:82:71:51:c8:a4:ad:c7:
10:d2:70:68:10:a9:46:8e:87:eb:7c:91:c4:f6:21:
00:f9:8d:52:3a:3c:b6:fb:62:16:2e:0e:26:c8:44:
aa:f3:05:f6:3a:d1:cd:d8:ce:63:ff:b4:a4:79:0d:
c1:ed:90:34:e4:d0:62:d0:99:c7:38:77:9e:ac:a5:
01:af:da:ab:3f:38:2d:9f:40:dc:e6:5c:f2:4f:ea:
6b:d3:a6:79:15:b1:99:18:fa:7f:3b:14:b7:ec:c7:
63:c3:6d:ba:25:73:55:af:61:8e:7d:7b:85:d4:a4:
e1:ef:cd:f3:4b:31:2b:99:b3:f8:39:7a:a4:a8:4f:
c5:b4:30:fc:fd:08:cb:1a:1c:9a:fe:2d:48:6d:db:
c2:48:49:72:91:0a:09:18:bf:5e:a9:22:b2:5c:a5:
0c:44:3f:b3:c5:f0:b1:94:74:ff:6b:f7:4c:d8:9a:
05:f4:91:2f:5d:38:eb:98:35:83:14:45:d1:36:0d:
9f:8f:08:6e:7f:88:c5:24:c4:ef:e9:29:07:f1:7b:
58:c1:5e:74:9b:d2:2b:9f:39:02:70:3f:39:3a:08:
5c:5b:97:cf:f0:89:0d:a4:72:af:1b:c5:23:dd:44:
82:48:27:1d:fd:4d:a8:68:6f:1c:b6:81:9d:a1:d0:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9E:0D:04:9C:6E:D6:15:F1:11:C5:78:E8:38:0F:F2:C5:B9:BF:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D1899C45A6D11F1878EA7D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.83.0/24
156.233.96.0/23
156.233.106.0/24
156.249.98.0-156.249.100.255
156.249.103.0/24
156.249.112.0/23
Signature Algorithm: sha256WithRSAEncryption
22:c4:1f:e7:a1:53:57:79:dc:a9:dd:1d:44:67:87:f1:bf:2b:
fe:ab:68:e8:72:36:8e:35:52:0d:e1:b6:84:f7:9e:dc:64:fe:
1f:e2:23:c7:a7:bf:97:47:6a:72:35:f9:37:fb:bd:84:86:b8:
dd:a8:28:6f:da:a8:1d:04:5c:c6:20:db:26:52:d4:77:7e:d6:
38:53:76:75:f5:b9:fe:27:b9:dc:0c:34:99:f6:e2:83:d6:a2:
14:16:59:42:02:b4:e8:3d:06:a0:83:99:bf:bd:1e:eb:da:fd:
c4:89:b9:bd:83:10:6c:56:66:9e:b9:08:d3:b8:ba:fc:12:7a:
1e:b6:e1:04:28:1d:e8:be:54:9d:5d:f7:cc:55:7c:7e:e5:b9:
3e:ea:96:fb:2a:61:ea:55:f8:40:73:34:c7:16:cd:bb:33:19:
c9:85:c0:38:e8:a8:51:82:cf:96:5c:36:af:35:ae:c5:77:a0:
d8:9a:f9:32:6c:c4:64:cd:ed:b1:2e:6f:61:9b:c0:70:60:16:
36:18:26:79:b4:b7:2d:1d:c6:a4:ba:01:a7:7d:9e:e6:7e:43:
00:a9:89:fe:ef:78:e9:34:5a:c8:8a:ba:68:30:94:e8:5e:f6:
d8:cc:07:9a:1d:e3:d9:46:3e:5a:10:d3:2a:42:58:f0:10:d6:
43:ca:c5:33
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIDAbpxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDgxNjM0WhcNMjYwNzAxMDgxNjM0WjAYMRYw
FAYDVQQDEw02YTE3ZjllNy03ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyYYKewtTAoJxUcikrccQ0nBoEKlGjofrfJHE9iEA+Y1SOjy2+2IWLg4m
yESq8wX2OtHN2M5j/7SkeQ3B7ZA05NBi0JnHOHeerKUBr9qrPzgtn0Dc5lzyT+pr
06Z5FbGZGPp/OxS37Mdjw226JXNVr2GOfXuF1KTh783zSzErmbP4OXqkqE/FtDD8
/QjLGhya/i1IbdvCSElykQoJGL9eqSKyXKUMRD+zxfCxlHT/a/dM2JoF9JEvXTjr
mDWDFEXRNg2fjwhuf4jFJMTv6SkH8XtYwV50m9IrnzkCcD85OghcW5fP8IkNpHKv
G8Uj3USCSCcd/U2oaG8ctoGdodBu7wIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFBKe
DQScbtYV8RHFeOg4D/LFub9jMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RDE4OTlDNDVBNkQxMUYxODc4RUE3RDNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAnOlTAwQBnOlgAwQAnOlqMAwD
BAGc+WIDBACc+WQDBACc+WcDBAGc+XAwDQYJKoZIhvcNAQELBQADggEBACLEH+eh
U1d53KndHURnh/G/K/6raOhyNo41Ug3htoT3ntxk/h/iI8env5dHanI1+Tf7vYSG
uN2oKG/aqB0EXMYg2yZS1Hd+1jhTdnX1uf4nudwMNJn24oPWohQWWUICtOg9BqCD
mb+9Huva/cSJub2DEGxWZp65CNO4uvwSeh624QQoHei+VJ1d98xVfH7luT7qlvsq
YepV+EBzNMcWzbszGcmFwDjoqFGCz5ZcNq81rsV3oNia+TJsxGTN7bEub2GbwHBg
FjYYJnm0ty0dxqS6Aad9nuZ+QwCpif7veOk0WsiKumgwlOhe9tjMB5od49lGPloQ
0ypCWPAQ1kPKxTM=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:30 2026 by rpki-client