Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9804BF0E948611F183DC57F4CE1D38B0.roa
File: 9804BF0E948611F183DC57F4CE1D38B0.roa (raw, json)
Hash identifier: 9PApcZSOsw6R2JfrwnHZWUS5XZ8S7lyQp7owTmOodlY=
Subject key identifier: 0E:CA:74:C3:DB:3A:74:10:33:F9:20:AC:FE:47:71:FF:6F:43:8A:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CAC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9804BF0E948611F183DC57F4CE1D38B0.roa
Signing time: Mon 10 Aug 2026 06:42:02 +0000
ROA not before: Mon 10 Aug 2026 06:41:58 +0000
ROA not after: Mon 17 Aug 2026 06:41:58 +0000
asID: 139646
IP address blocks: 156.225.76.0/22 maxlen: 24
156.238.120.0/21 maxlen: 24
156.240.0.0/19 maxlen: 24
156.240.32.0/20 maxlen: 24
156.240.48.0/21 maxlen: 24
156.242.10.0/23 maxlen: 24
156.242.12.0/22 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.204.0/22 maxlen: 24
156.245.232.0/21 maxlen: 24
156.246.0.0/20 maxlen: 24
156.246.16.0/23 maxlen: 24
156.249.28.0/22 maxlen: 24
156.255.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117445 (0x1cac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 06:41:58 2026 GMT
Not After : Aug 17 06:41:58 2026 GMT
Subject: CN=6a7972ba-454a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:67:a8:f0:4f:31:26:2b:1c:74:65:8e:e4:ef:
a6:dd:6b:6f:e4:71:53:78:34:27:d9:7e:5e:92:bf:
af:c0:db:db:91:d4:e5:21:ea:29:b8:3d:2c:d7:56:
18:c7:00:57:38:2f:cd:94:94:4e:51:88:af:31:ac:
0b:39:da:79:ce:11:40:3b:02:15:15:3b:02:0c:42:
f7:f1:55:b3:85:75:1e:6c:c0:b1:01:69:45:47:b4:
5b:b7:de:6f:60:28:ca:96:f5:56:22:a0:30:95:a9:
af:7b:fe:ad:9a:9c:8a:5a:30:38:0e:ce:95:b5:d3:
8b:91:e6:3d:42:87:42:0a:71:62:e6:c1:b4:4f:ca:
df:39:d1:52:5a:8a:4c:45:7c:16:0b:88:ae:56:f6:
88:6c:40:9c:a4:3f:23:c9:48:32:0c:4d:65:a0:c9:
fb:54:1b:a3:1f:b3:63:0b:95:28:91:1f:27:1d:f2:
22:52:ae:4b:a6:f4:b8:99:7b:46:97:fb:3f:7b:ef:
cf:26:b7:9c:17:d0:29:6e:aa:7b:80:a4:5b:db:19:
77:73:70:2f:a0:88:35:80:cb:6c:d8:36:93:24:0d:
7e:10:7c:04:2e:7b:55:e5:d5:db:d7:80:66:40:19:
ac:a5:03:f9:14:24:e7:b1:7b:04:14:f7:1f:02:ac:
da:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CA:74:C3:DB:3A:74:10:33:F9:20:AC:FE:47:71:FF:6F:43:8A:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9804BF0E948611F183DC57F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.240.0.0-156.240.55.255
156.242.10.0-156.242.15.255
156.245.144.0/22
156.245.204.0/22
156.245.232.0/21
156.246.0.0-156.246.17.255
156.249.28.0/22
156.255.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:a1:5f:ab:44:03:e3:05:1a:74:1a:7b:c0:05:5e:2a:ff:
28:0b:bf:29:5b:71:ab:11:ac:7e:36:39:4b:a4:e1:6e:de:e8:
9c:34:f4:6e:f5:dd:14:f7:63:43:d5:a6:78:32:71:42:09:6f:
9f:f7:7c:d6:d2:c0:07:03:b3:10:d5:94:9e:e1:e4:b7:49:5b:
ab:da:a7:81:b4:eb:3e:9c:5c:90:4e:1b:18:89:d6:4c:95:e2:
97:2c:7d:80:b0:75:16:1e:80:9f:9f:88:23:8d:f7:bb:91:87:
f0:fa:ef:38:ff:05:88:48:8c:1b:19:87:64:6c:91:40:77:4a:
d8:5e:12:49:e5:0f:3b:c1:b6:54:e0:d8:0a:39:f6:b2:be:59:
aa:e0:e9:2d:81:de:9d:16:53:e0:84:cc:68:f9:c8:46:da:71:
fa:59:12:dc:1c:05:32:95:e8:c9:c7:bd:65:60:8c:cb:0c:06:
f7:2e:43:5f:98:f6:df:68:c2:9a:a9:34:c3:4b:03:77:c2:1a:
4c:c0:5e:4d:61:7f:e5:36:63:22:87:33:9b:3c:9c:e7:11:42:
ce:a0:f1:a9:77:8e:0f:46:77:68:f8:55:bc:e1:42:0e:cb:10:
b2:d8:a1:f6:72:19:7c:c6:33:2b:a2:45:fa:09:5c:1d:da:cb:
d1:fe:6e:57
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIDAcrFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEwMDY0MTU4WhcNMjYwODE3MDY0MTU4WjAYMRYw
FAYDVQQDEw02YTc5NzJiYS00NTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Weo8E8xJiscdGWO5O+m3Wtv5HFTeDQn2X5ekr+vwNvbkdTlIeopuD0s
11YYxwBXOC/NlJROUYivMawLOdp5zhFAOwIVFTsCDEL38VWzhXUebMCxAWlFR7Rb
t95vYCjKlvVWIqAwlamve/6tmpyKWjA4Ds6VtdOLkeY9QodCCnFi5sG0T8rfOdFS
WopMRXwWC4iuVvaIbECcpD8jyUgyDE1loMn7VBujH7NjC5UokR8nHfIiUq5LpvS4
mXtGl/s/e+/PJrecF9Apbqp7gKRb2xl3c3AvoIg1gMts2DaTJA1+EHwELntV5dXb
14BmQBmspQP5FCTnsXsEFPcfAqzajwIDAQABo4IC7jCCAuowHQYDVR0OBBYEFA7K
dMPbOnQQM/kgrP5Hcf9vQ4qhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85ODA0QkYwRTk0ODYxMUYxODNEQzU3RjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQCnOFMAwQDnO54MAsDAwSc8AME
A5zwMDAMAwQBnPIKAwQEnPIAAwQCnPWQAwQCnPXMAwQDnPXoMAsDAwGc9gMEAZz2
EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOCAQEAWN6hX6tEA+MFGnQae8AF
Xir/KAu/KVtxqxGsfjY5S6Thbt7onDT0bvXdFPdjQ9WmeDJxQglvn/d81tLABwOz
ENWUnuHkt0lbq9qngbTrPpxckE4bGInWTJXilyx9gLB1Fh6An5+II433u5GH8Prv
OP8FiEiMGxmHZGyRQHdK2F4SSeUPO8G2VODYCjn2sr5ZquDpLYHenRZT4ITMaPnI
Rtpx+lkS3BwFMpXoyce9ZWCMywwG9y5DX5j232jCmqk0w0sDd8IaTMBeTWF/5TZj
Ioczmzyc5xFCzqDxqXeOD0Z3aPhVvOFCDssQstih9nIZfMYzK6JF+glcHdrL0f5u
Vw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:40 2026 by rpki-client