Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F576A9E6FC011F18E4912AECE1D38B0.roa
File: 9F576A9E6FC011F18E4912AECE1D38B0.roa (raw, json)
Hash identifier: wg+d05y5f/Roo1jcMwyPzhdcUEPncbek8SOkYc845rY=
Subject key identifier: D4:7F:0E:C6:DD:3B:A8:D0:7D:06:11:68:83:2C:FA:E2:65:E7:20:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C02A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F576A9E6FC011F18E4912AECE1D38B0.roa
Signing time: Wed 24 Jun 2026 11:34:13 +0000
ROA not before: Wed 24 Jun 2026 11:34:08 +0000
ROA not after: Sat 01 Aug 2026 11:34:08 +0000
asID: 202656
IP address blocks: 156.243.32.0/24 maxlen: 24
156.243.33.0/24 maxlen: 24
156.243.80.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.243.249.0/24 maxlen: 24
156.243.254.0/24 maxlen: 24
156.248.6.0/24 maxlen: 24
156.248.7.0/24 maxlen: 24
156.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114730 (0x1c02a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 11:34:08 2026 GMT
Not After : Aug 1 11:34:08 2026 GMT
Subject: CN=6a3bc0b4-79d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ca:37:a4:40:d8:52:1f:82:9b:36:2d:6d:ee:
82:fd:d6:64:90:57:b5:3e:39:98:6f:df:e0:3d:cd:
f6:98:90:67:23:ef:03:93:6a:54:63:7a:f3:78:c1:
28:c2:da:74:15:92:22:df:09:13:b4:5e:34:bc:d9:
b6:83:0b:27:fd:da:cc:c1:93:2a:92:2e:9b:01:27:
f6:e2:43:74:d6:56:40:70:e1:9f:e4:3d:52:cc:a1:
df:e6:29:68:9d:e3:31:d4:36:72:ec:73:e6:4e:98:
73:e2:99:07:f4:d9:41:0c:b3:a7:d8:16:14:5f:82:
fd:60:cf:21:20:0a:17:45:ad:15:cb:50:1f:e5:b7:
a0:39:ed:68:29:b3:d6:0a:75:dd:1e:ab:19:b2:35:
7c:a5:dd:49:a3:17:aa:e3:69:b0:f6:19:1a:dc:c0:
8d:e5:84:56:c0:3e:72:ff:b3:44:67:ab:ce:63:ce:
32:d0:73:17:94:3f:81:8f:30:4f:9b:29:4e:36:a3:
bc:61:30:86:95:65:f1:7b:42:b3:1c:ae:29:60:3e:
a6:6d:ad:07:6f:6d:44:27:e9:a6:5c:5c:33:66:dd:
e6:38:72:81:13:87:2a:62:0e:21:ad:05:87:bf:be:
c0:e6:dc:77:66:19:a6:0a:5b:10:93:35:c3:a2:6c:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7F:0E:C6:DD:3B:A8:D0:7D:06:11:68:83:2C:FA:E2:65:E7:20:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F576A9E6FC011F18E4912AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.32.0/23
156.243.80.0/24
156.243.243.0/24
156.243.248.0/23
156.243.254.0/24
156.248.6.0/23
156.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
30:1f:6a:51:33:80:15:e4:21:e9:ed:d9:9c:e7:7e:41:7b:21:
65:0e:ec:78:db:3c:df:89:16:02:a6:19:a9:54:aa:17:47:59:
c2:b4:15:ff:e7:60:1a:52:ff:c5:10:db:db:c5:e4:cf:07:ff:
5e:84:a9:8b:ef:54:29:4d:fc:5e:2f:39:e0:94:c3:c3:ed:54:
c4:a6:28:f9:51:28:66:8b:11:a2:48:64:35:fa:a8:a5:a1:a2:
d4:d1:5a:e0:97:ef:f0:5c:56:5e:ab:d5:04:5e:bc:22:9e:61:
6f:9b:49:8c:5c:ff:9c:09:b7:70:ee:96:85:11:1d:a3:d1:ad:
fc:03:e2:27:d1:c1:d9:d8:2a:1e:8f:c0:fe:21:8e:c3:94:24:
fb:67:bb:f8:77:49:71:e3:01:0e:73:dc:eb:90:01:5a:7b:b9:
53:a6:36:75:ad:13:16:55:90:a8:9d:a3:1e:f2:66:24:6c:62:
3d:35:47:0d:4c:d8:9c:44:9a:e2:f6:fc:aa:1c:8c:a7:c1:1e:
11:35:b9:b3:11:69:4f:9a:ad:e3:ea:c5:07:67:45:d9:73:32:
25:cf:99:52:6e:e2:61:99:83:ec:91:52:cf:29:ea:20:98:2b:
3d:51:95:6a:8f:85:1f:a0:79:60:5c:75:01:1a:7b:7c:16:0b:
9e:2f:3f:21
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAcAqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI0MTEzNDA4WhcNMjYwODAxMTEzNDA4WjAYMRYw
FAYDVQQDEw02YTNiYzBiNC03OWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuco3pEDYUh+CmzYtbe6C/dZkkFe1PjmYb9/gPc32mJBnI+8Dk2pUY3rz
eMEowtp0FZIi3wkTtF40vNm2gwsn/drMwZMqki6bASf24kN01lZAcOGf5D1SzKHf
5iloneMx1DZy7HPmTphz4pkH9NlBDLOn2BYUX4L9YM8hIAoXRa0Vy1Af5begOe1o
KbPWCnXdHqsZsjV8pd1Joxeq42mw9hka3MCN5YRWwD5y/7NEZ6vOY84y0HMXlD+B
jzBPmylONqO8YTCGlWXxe0KzHK4pYD6mba0Hb21EJ+mmXFwzZt3mOHKBE4cqYg4h
rQWHv77A5tx3ZhmmClsQkzXDomwcjwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFNR/
DsbdO6jQfQYRaIMs+uJl5yAUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RjU3NkE5RTZGQzAxMUYxOEU0OTEyQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBnPMgAwQAnPNQAwQAnPPzAwQB
nPP4AwQAnPP+AwQBnPgGAwQAnPgUMA0GCSqGSIb3DQEBCwUAA4IBAQAwH2pRM4AV
5CHp7dmc535BeyFlDux42zzfiRYCphmpVKoXR1nCtBX/52AaUv/FENvbxeTPB/9e
hKmL71QpTfxeLznglMPD7VTEpij5UShmixGiSGQ1+qiloaLU0Vrgl+/wXFZeq9UE
XrwinmFvm0mMXP+cCbdw7paFER2j0a38A+In0cHZ2Coej8D+IY7DlCT7Z7v4d0lx
4wEOc9zrkAFae7lTpjZ1rRMWVZConaMe8mYkbGI9NUcNTNicRJri9vyqHIynwR4R
NbmzEWlPmq3j6sUHZ0XZczIlz5lSbuJhmYPskVLPKeogmCs9UZVqj4UfoHlgXHUB
Gnt8FgueLz8h
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:41 2026 by rpki-client