Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F66219269B311F1882D411ACF1D38B0.roa
File: 8F66219269B311F1882D411ACF1D38B0.roa (raw, json)
Hash identifier: ofkomPXHn8Ezppcjj41S7N3kRFS/bLiIU/S7Hdbt2qo=
Subject key identifier: 83:A6:BB:F2:13:75:AE:FA:6C:6C:F0:D0:7D:C2:12:45:DB:4A:6B:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F66219269B311F1882D411ACF1D38B0.roa
Signing time: Tue 16 Jun 2026 18:45:36 +0000
ROA not before: Tue 16 Jun 2026 18:45:31 +0000
ROA not after: Fri 24 Jul 2026 18:45:31 +0000
asID: 214413
IP address blocks: 156.229.56.0/22 maxlen: 24
156.233.216.0/22 maxlen: 24
156.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114267 (0x1be5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 18:45:31 2026 GMT
Not After : Jul 24 18:45:31 2026 GMT
Subject: CN=6a3199cf-f879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:9d:d6:27:8f:ce:a1:02:a8:05:d1:09:6f:
70:8b:b4:45:a4:b0:16:4e:c2:50:d2:e1:6b:5c:62:
66:1a:a1:6e:c4:66:e4:3f:9f:71:c4:e2:ff:04:7c:
86:35:48:19:e0:d5:72:d0:27:de:3b:97:bf:f5:3f:
b5:0d:83:82:f0:75:ff:d4:87:cb:43:76:e1:37:38:
b6:4c:71:46:db:c4:c1:9c:89:78:8d:59:b8:4e:41:
41:0f:15:3b:04:1f:b3:fc:a8:6a:6e:2f:f5:f6:96:
20:24:4c:86:77:ce:e2:e0:a1:f6:7b:0b:76:db:c5:
e3:66:8e:2a:35:46:42:3a:98:e9:dd:96:4d:c2:ac:
51:66:10:3b:88:e1:68:6a:9f:dc:e2:14:ef:f2:b2:
34:85:59:a0:a5:ad:d4:bd:bd:cf:40:1c:d5:61:e9:
4b:b9:a9:62:31:7f:3d:30:81:35:96:ed:5c:a1:9d:
83:1e:0a:67:43:33:73:19:e1:3e:70:2f:58:6e:eb:
1d:b7:6f:df:33:96:3a:b1:22:2c:80:56:b0:08:f7:
17:09:89:e5:fa:d6:ad:41:af:71:1b:a4:ce:8e:06:
d2:76:29:dc:9b:9c:a1:e9:31:f0:4f:9d:9c:85:29:
ab:d8:d0:61:4d:cd:7c:aa:b5:1b:d6:6a:9a:0e:53:
e1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A6:BB:F2:13:75:AE:FA:6C:6C:F0:D0:7D:C2:12:45:DB:4A:6B:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F66219269B311F1882D411ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/22
156.233.216.0/22
156.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:d2:54:69:30:ce:d1:ea:f6:2f:5f:0c:03:48:1b:3a:5a:6a:
41:b1:8f:3b:48:86:e6:d3:ab:c7:44:71:e7:5f:26:77:90:44:
e9:c5:dd:94:16:66:10:8f:6b:9f:c0:95:47:3b:77:2d:fc:46:
49:4b:66:93:65:0c:39:d1:ba:60:b9:b0:7a:ef:d9:4b:d4:a7:
30:9c:36:b1:4b:bd:94:db:d7:c4:a5:22:ce:2b:d4:5c:17:1b:
dd:f7:38:e3:05:5b:e2:0a:e5:ca:97:2d:21:e8:71:5a:48:b8:
9f:b9:53:93:13:4f:a8:ab:aa:d3:06:b8:9a:15:0f:67:29:1d:
f9:cf:44:46:25:93:8f:31:66:46:5f:3c:51:17:99:0b:3a:98:
05:e0:0d:31:f1:ac:6a:95:84:b9:4d:fa:4f:a1:b3:5d:64:cd:
51:39:a4:3e:da:ec:97:c9:41:82:ad:c6:b2:0b:b6:ae:e4:7a:
ad:54:38:a2:2f:fd:46:fd:c2:55:22:18:f3:fa:5e:d5:e7:4d:
34:fb:39:b8:bc:44:13:44:4d:28:68:34:18:9b:54:0f:b0:1c:
9d:f4:a6:01:8d:2b:8c:b3:61:39:b8:6b:75:2f:7d:2b:fb:73:
f4:5b:12:9b:7b:b4:a1:06:aa:a9:db:f5:5e:4c:bb:85:ce:1a:
20:0b:a3:d0
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAb5bMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MTg0NTMxWhcNMjYwNzI0MTg0NTMxWjAYMRYw
FAYDVQQDEw02YTMxOTljZi1mODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu/6d1iePzqECqAXRCW9wi7RFpLAWTsJQ0uFrXGJmGqFuxGbkP59xxOL/
BHyGNUgZ4NVy0CfeO5e/9T+1DYOC8HX/1IfLQ3bhNzi2THFG28TBnIl4jVm4TkFB
DxU7BB+z/Khqbi/19pYgJEyGd87i4KH2ewt228XjZo4qNUZCOpjp3ZZNwqxRZhA7
iOFoap/c4hTv8rI0hVmgpa3Uvb3PQBzVYelLualiMX89MIE1lu1coZ2DHgpnQzNz
GeE+cC9Ybusdt2/fM5Y6sSIsgFawCPcXCYnl+tatQa9xG6TOjgbSdincm5yh6THw
T52chSmr2NBhTc18qrUb1mqaDlPhzwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFIOm
u/ITda76bGzw0H3CEkXbSmtTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RjY2MjE5MjY5QjMxMUYxODgyRDQxMUFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOU4AwQCnOnYAwQCnO+AMA0G
CSqGSIb3DQEBCwUAA4IBAQAa0lRpMM7R6vYvXwwDSBs6WmpBsY87SIbm06vHRHHn
XyZ3kETpxd2UFmYQj2ufwJVHO3ct/EZJS2aTZQw50bpgubB679lL1KcwnDaxS72U
29fEpSLOK9RcFxvd9zjjBVviCuXKly0h6HFaSLifuVOTE0+oq6rTBriaFQ9nKR35
z0RGJZOPMWZGXzxRF5kLOpgF4A0x8axqlYS5TfpPobNdZM1ROaQ+2uyXyUGCrcay
C7au5HqtVDiiL/1G/cJVIhjz+l7V5000+zm4vEQTRE0oaDQYm1QPsByd9KYBjSuM
s2E5uGt1L30r+3P0WxKbe7ShBqqp2/VeTLuFzhogC6PQ
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:56 2026 by rpki-client