Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948918207AAF11F1B70D1BA9CE1D38B0.roa
File: 948918207AAF11F1B70D1BA9CE1D38B0.roa (raw, json)
Hash identifier: R5+hYy2TbVObZuEFWfRxdMPAZjzvIGpPkDRaeeY1WeU=
Subject key identifier: 0B:F9:3A:7D:28:94:C1:90:AB:5A:B8:94:1F:39:89:62:8D:3F:46:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948918207AAF11F1B70D1BA9CE1D38B0.roa
Signing time: Wed 08 Jul 2026 09:29:56 +0000
ROA not before: Wed 08 Jul 2026 09:29:51 +0000
ROA not after: Mon 20 Jul 2026 09:29:51 +0000
asID: 54801
IP address blocks: 156.225.76.0/22 maxlen: 24
156.225.79.0/24 maxlen: 24
156.238.120.0/21 maxlen: 24
156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.204.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115624 (0x1c3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 09:29:51 2026 GMT
Not After : Jul 20 09:29:51 2026 GMT
Subject: CN=6a4e1894-65ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:6c:39:93:c7:c8:d1:24:74:90:40:66:fc:
25:39:13:fb:7f:32:fe:e9:8f:55:a2:e0:a8:83:22:
c6:fe:53:c5:03:5e:9c:48:e6:1a:84:10:ac:68:c8:
7f:cd:12:6a:49:87:2f:66:64:d3:8e:56:7a:11:48:
00:d5:3e:a9:68:4d:4c:41:11:32:65:f7:3e:ef:c2:
fd:6b:43:62:ff:5b:05:7f:77:a6:b5:b2:e6:80:51:
51:17:a6:0a:58:2e:6c:97:42:cf:fe:87:ea:27:b4:
78:99:5f:94:71:ca:64:21:64:23:c6:6b:1e:76:92:
8e:75:5a:d3:7f:dc:cf:d2:c9:4b:18:6e:83:59:43:
93:b3:b9:97:c2:b0:d2:3f:e0:a2:50:b1:8f:e5:60:
17:68:23:f8:60:bf:84:cb:d5:fe:95:fe:37:49:5c:
c5:b9:99:74:79:29:91:eb:18:54:87:b0:96:c7:bd:
db:bd:78:14:66:f2:58:c9:82:07:d9:81:a1:c9:e8:
17:4f:65:d3:0a:05:ca:5d:8b:06:51:64:f1:c1:fa:
35:f5:8a:6b:44:b3:75:a4:ef:63:30:8a:3d:4d:cf:
59:d3:d1:4f:9a:45:55:24:72:14:ac:f6:ae:25:78:
bf:b8:43:b8:a3:d4:74:ba:6e:04:52:bf:df:90:60:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F9:3A:7D:28:94:C1:90:AB:5A:B8:94:1F:39:89:62:8D:3F:46:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/948918207AAF11F1B70D1BA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.245.144.0/22
156.245.204.0/22
156.245.232.0/21
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
35:19:c3:07:42:6f:16:27:19:99:8c:11:af:7c:84:60:ba:22:
2e:d3:f1:0b:19:bf:82:ed:35:18:90:c1:41:52:59:8b:7c:fc:
11:74:09:7b:45:07:57:44:77:7c:0c:10:36:8a:dd:e5:ab:6b:
90:d3:b8:17:c1:3d:52:a9:75:1a:7c:96:44:8f:7c:87:72:29:
0e:95:9a:68:e2:f7:1b:26:bf:85:71:44:f5:bb:de:6f:0b:9e:
4a:36:94:40:8a:6e:49:22:51:2d:e2:90:34:14:00:43:0b:ca:
fd:94:3f:47:a3:f7:90:f9:3d:dc:ad:91:3b:a9:ea:3d:4f:91:
da:61:a5:41:84:4b:90:ee:45:41:6b:e6:1e:eb:ca:65:7a:65:
5d:55:1d:d1:83:e3:f9:0c:eb:ca:fd:9b:c5:f9:c0:87:81:b8:
1c:a6:c3:86:2e:60:74:d5:3a:d2:43:e4:f7:c3:8b:2b:07:d4:
cb:15:68:15:66:1d:39:7e:44:f9:5c:8a:d0:54:a5:e9:61:b4:
3c:8c:d6:00:a7:ba:1d:52:68:4a:dd:ae:8a:85:d6:54:91:8b:
4e:0b:73:77:d7:35:32:fe:e8:5e:4b:f5:c4:0f:67:36:ad:0c:
ba:e1:08:15:46:52:57:ce:5b:0c:56:f5:76:f3:99:d1:ec:56:
71:76:6e:14
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIDAcOoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzA4MDkyOTUxWhcNMjYwNzIwMDkyOTUxWjAYMRYw
FAYDVQQDEw02YTRlMTg5NC02NWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqVVsOZPHyNEkdJBAZvwlORP7fzL+6Y9VouCogyLG/lPFA16cSOYahBCs
aMh/zRJqSYcvZmTTjlZ6EUgA1T6paE1MQREyZfc+78L9a0Ni/1sFf3emtbLmgFFR
F6YKWC5sl0LP/ofqJ7R4mV+UccpkIWQjxmsedpKOdVrTf9zP0slLGG6DWUOTs7mX
wrDSP+CiULGP5WAXaCP4YL+Ey9X+lf43SVzFuZl0eSmR6xhUh7CWx73bvXgUZvJY
yYIH2YGhyegXT2XTCgXKXYsGUWTxwfo19YprRLN1pO9jMIo9Tc9Z09FPmkVVJHIU
rPauJXi/uEO4o9R0um4EUr/fkGAmowIDAQABo4IC7jCCAuowHQYDVR0OBBYEFAv5
On0olMGQq1q4lB85iWKNP0alMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDg5MTgyMDdBQUYxMUYxQjcwRDFCQTlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCnOFMAwQDnO54MAsDAwSc8AME
A5zwMDAMAwQBnPIKAwQEnPIAAwQCnPWQAwQCnPXMAwQDnPXoMAsDAwGc9gMEAZz2
EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOCAQEANRnDB0JvFicZmYwRr3yE
YLoiLtPxCxm/gu01GJDBQVJZi3z8EXQJe0UHV0R3fAwQNord5atrkNO4F8E9Uql1
GnyWRI98h3IpDpWaaOL3Gya/hXFE9bvebwueSjaUQIpuSSJRLeKQNBQAQwvK/ZQ/
R6P3kPk93K2RO6nqPU+R2mGlQYRLkO5FQWvmHuvKZXplXVUd0YPj+Qzryv2bxfnA
h4G4HKbDhi5gdNU60kPk98OLKwfUyxVoFWYdOX5E+VyK0FSl6WG0PIzWAKe6HVJo
St2uioXWVJGLTgtzd9c1Mv7oXkv1xA9nNq0MuuEIFUZSV85bDFb1dvOZ0exWcXZu
FA==
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:01 2026 by rpki-client