Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9544F59A54D011F1A2163AA2CE1D38B0.roa
File: 9544F59A54D011F1A2163AA2CE1D38B0.roa (raw, json)
Hash identifier: DawDxbh5/gmsGjxUJZ/GjuGqza+KB3SqzW2xeSbkXcw=
Subject key identifier: 8F:0C:0F:3C:A2:D5:52:11:EA:51:90:FF:AA:FB:F9:FD:13:E0:F6:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9544F59A54D011F1A2163AA2CE1D38B0.roa
Signing time: Thu 21 May 2026 04:50:26 +0000
ROA not before: Thu 21 May 2026 04:50:21 +0000
ROA not after: Wed 01 Jul 2026 04:50:21 +0000
asID: 395793
IP address blocks: 156.225.2.0/23 maxlen: 24
156.225.50.0/23 maxlen: 24
156.230.159.0/24 maxlen: 24
156.236.14.0/23 maxlen: 24
156.243.223.0/24 maxlen: 24
156.243.225.0/24 maxlen: 24
156.243.230.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 27 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112303 (0x1b6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 04:50:21 2026 GMT
Not After : Jul 1 04:50:21 2026 GMT
Subject: CN=6a0e8f12-0640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:e2:4c:05:f8:e7:7b:f8:45:42:71:dd:5b:
1a:a0:52:d5:9d:eb:2d:10:ea:95:cd:86:e1:64:20:
28:4e:09:91:82:ae:7e:32:7a:2c:d5:a2:5c:6d:de:
6e:69:53:2c:8d:cc:95:1b:2b:c8:b1:b0:99:96:ed:
2c:1f:16:c8:2b:5a:bd:ff:51:8a:76:93:ce:c5:92:
51:ba:f3:26:26:62:01:b3:07:ae:e6:db:0a:f1:28:
65:23:38:df:01:88:da:4e:89:55:70:03:d8:32:f5:
87:0a:0c:65:f0:cd:e2:35:bc:ac:e5:31:cb:fd:99:
32:6c:f3:b7:fb:be:d1:54:71:57:9c:b6:62:84:fc:
0d:87:36:29:6b:4c:1a:09:5c:cd:33:5f:da:57:ca:
66:d9:89:a7:b2:e6:6f:98:da:ab:80:b2:3b:db:68:
55:26:c9:2c:e9:c6:ac:3b:e1:71:e4:25:55:c6:8c:
f4:a1:42:7f:f5:0f:45:78:7b:d5:e2:49:14:c3:e6:
5c:7a:bf:07:db:6d:e4:3e:99:31:02:22:cd:e7:d9:
87:96:09:b4:99:9c:2b:b8:a8:1b:f1:5d:41:1a:c1:
4c:56:6d:9c:4b:ec:7e:77:e5:75:3b:33:5f:82:33:
05:21:55:b0:b2:72:d7:d6:8f:ba:30:3f:1e:77:fa:
19:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0C:0F:3C:A2:D5:52:11:EA:51:90:FF:AA:FB:F9:FD:13:E0:F6:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9544F59A54D011F1A2163AA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.2.0/23
156.225.50.0/23
156.230.159.0/24
156.236.14.0/23
156.243.223.0/24
156.243.225.0/24
156.243.230.0/24
156.243.241.0/24
156.243.245.0/24
156.243.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:99:ce:bb:7b:c3:63:14:db:2d:34:e0:a3:a9:c5:21:ae:32:
e1:07:fd:cc:85:3b:fb:4b:af:4d:77:6f:82:0f:4a:a2:27:32:
7f:8d:9d:42:10:da:a5:76:25:bf:e0:ca:28:81:4f:9a:09:de:
32:33:d1:70:43:4d:c1:dd:6c:4c:c9:e1:96:04:a2:07:a0:b0:
93:41:e5:ae:2e:de:d0:0c:3a:72:3f:50:73:64:a4:34:6f:8d:
04:b4:42:88:1a:0f:18:13:e5:dc:b2:ca:31:16:fb:11:ca:99:
8d:5b:b6:99:3a:0c:9f:e1:4d:b2:a9:4c:be:3a:89:fe:3a:58:
00:de:5b:5c:6e:31:e3:d8:6a:4f:0b:40:25:51:57:0e:5a:13:
df:83:46:9d:ee:16:cd:bd:2d:f2:52:a0:a1:c8:38:a8:8f:52:
f7:0b:5f:5c:96:26:58:b1:27:cb:92:dd:0e:ac:9a:01:c2:6a:
62:c2:e2:21:7e:c5:ac:3b:75:2b:56:94:0d:80:01:58:06:c1:
de:22:e3:b5:0e:cc:3a:c3:27:d0:ca:8f:6b:37:1d:47:72:6d:
14:4a:d4:ce:b7:1d:08:cf:73:f4:30:77:d1:e1:79:98:33:09:
9e:ed:90:5f:6d:4e:e5:ae:d6:93:3c:bc:f3:46:71:da:9a:a4:
80:17:e2:96
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAbavMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMDQ1MDIxWhcNMjYwNzAxMDQ1MDIxWjAYMRYw
FAYDVQQDEw02YTBlOGYxMi0wNjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwuLiTAX453v4RUJx3VsaoFLVnestEOqVzYbhZCAoTgmRgq5+Mnos1aJc
bd5uaVMsjcyVGyvIsbCZlu0sHxbIK1q9/1GKdpPOxZJRuvMmJmIBsweu5tsK8Shl
IzjfAYjaTolVcAPYMvWHCgxl8M3iNbys5THL/ZkybPO3+77RVHFXnLZihPwNhzYp
a0waCVzNM1/aV8pm2YmnsuZvmNqrgLI722hVJsks6casO+Fx5CVVxoz0oUJ/9Q9F
eHvV4kkUw+Zcer8H223kPpkxAiLN59mHlgm0mZwruKgb8V1BGsFMVm2cS+x+d+V1
OzNfgjMFIVWwsnLX1o+6MD8ed/oZuQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFI8M
Dzyi1VIR6lGQ/6r7+f0T4PZkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NTQ0RjU5QTU0RDAxMUYxQTIxNjNBQTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBnOECAwQBnOEyAwQAnOafAwQB
nOwOAwQAnPPfAwQAnPPhAwQAnPPmAwQAnPPxAwQAnPP1AwQAnPP6MA0GCSqGSIb3
DQEBCwUAA4IBAQBdmc67e8NjFNstNOCjqcUhrjLhB/3MhTv7S69Nd2+CD0qiJzJ/
jZ1CENqldiW/4MoogU+aCd4yM9FwQ03B3WxMyeGWBKIHoLCTQeWuLt7QDDpyP1Bz
ZKQ0b40EtEKIGg8YE+XcssoxFvsRypmNW7aZOgyf4U2yqUy+Oon+OlgA3ltcbjHj
2GpPC0AlUVcOWhPfg0ad7hbNvS3yUqChyDioj1L3C19cliZYsSfLkt0OrJoBwmpi
wuIhfsWsO3UrVpQNgAFYBsHeIuO1Dsw6wyfQyo9rNx1Hcm0UStTOtx0Iz3P0MHfR
4XmYMwme7ZBfbU7lrtaTPLzzRnHamqSAF+KW
-----END CERTIFICATE-----
Generated at Mon May 25 02:51:12 2026 by rpki-client