Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A24A088672F111F1A16AB915CF1D38B0.roa
File: A24A088672F111F1A16AB915CF1D38B0.roa (raw, json)
Hash identifier: wYGdPXg2jic0Mec09hK7OaK2VFcBK4ON6N9OWQ4K14c=
Subject key identifier: E2:BB:6B:46:39:F1:28:1D:EC:18:2B:80:7C:0C:6A:C0:16:61:D6:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C13F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A24A088672F111F1A16AB915CF1D38B0.roa
Signing time: Sun 28 Jun 2026 13:02:36 +0000
ROA not before: Sun 28 Jun 2026 13:02:32 +0000
ROA not after: Tue 04 Aug 2026 13:02:32 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115007 (0x1c13f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 13:02:32 2026 GMT
Not After : Aug 4 13:02:32 2026 GMT
Subject: CN=6a411b6c-6a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:5e:4c:aa:5d:a5:5d:0f:27:47:50:85:aa:
76:50:7c:0b:51:23:17:68:e1:72:f8:02:da:4f:8b:
9a:88:89:51:79:1a:45:ca:c9:77:0b:6d:d6:ca:84:
df:11:7a:4a:b5:39:87:e9:4f:8a:a8:6a:59:a3:0e:
53:d5:0d:c7:e2:8a:97:41:c7:ba:38:cb:8e:5a:f9:
4d:6c:ae:0f:e0:74:32:b4:ff:81:53:f4:fd:60:29:
4b:26:82:b1:39:9d:b7:18:06:f1:c9:21:ad:ca:d7:
1d:68:f6:10:33:29:4b:30:f7:0f:a9:ed:16:69:d0:
77:b4:b1:38:00:14:f8:1d:42:cc:7c:5b:8c:2b:7d:
f6:f3:e4:c2:26:41:52:54:ff:e6:77:77:c0:ed:46:
61:58:1c:e7:14:d0:f2:29:1a:9a:65:f2:55:96:a6:
f4:e6:cd:77:6c:d1:93:fa:24:41:e6:eb:3f:b4:95:
e5:e8:ab:5a:bc:8a:45:9b:e7:aa:65:9e:93:6a:31:
7e:b2:b9:11:89:93:ad:03:52:f0:6b:0d:4e:a0:6d:
64:bc:5d:e5:75:52:30:83:ce:42:25:c7:af:54:d7:
04:e6:9c:32:f0:7e:bb:1a:16:c4:6a:68:b9:85:a1:
d2:94:00:0b:45:ee:c5:25:64:1d:c4:3a:a2:ef:0d:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:6B:46:39:F1:28:1D:EC:18:2B:80:7C:0C:6A:C0:16:61:D6:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A24A088672F111F1A16AB915CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
79:2f:bb:69:32:50:87:56:1c:56:c3:86:b9:6f:65:45:23:c0:
0f:d1:c7:9a:e2:01:e7:3c:a7:d3:a0:3a:20:d6:2a:7c:34:68:
dd:99:de:3e:ba:8a:21:d6:0b:5d:3e:5c:36:8d:f3:21:fd:6b:
91:d1:5d:ce:eb:00:01:3c:ea:61:2d:66:7b:1f:5d:64:91:74:
b2:aa:d6:7d:80:37:be:ac:fa:c0:f4:32:7e:31:f9:e7:42:88:
25:a2:8d:1a:99:ed:64:a4:a6:19:1a:7a:a3:84:aa:ac:87:f2:
86:a6:ec:c8:bd:5a:d1:8a:25:ba:8b:f9:54:ca:47:fc:9e:a5:
71:05:f4:ad:fd:f9:8f:e5:f4:77:ed:c5:fb:4e:36:fd:2c:dd:
d7:e5:ea:11:ac:d0:2b:ac:ae:c3:5e:a6:fe:9b:bc:a9:0c:15:
53:8d:40:15:b3:22:7f:86:90:c9:45:7a:7b:2b:04:a0:16:aa:
2d:a5:41:05:f5:86:b0:ab:ef:f7:3b:78:e6:91:72:b6:7d:76:
c9:6b:42:97:f3:d0:90:fb:84:73:7b:e1:e8:ab:88:d9:c9:ca:
44:db:2a:96:79:c9:b0:5f:bc:a8:f6:07:8e:53:ea:b1:bc:8f:
22:bd:a3:f4:97:b5:a8:62:f2:ce:9f:98:d5:4f:48:d2:bd:c8:
c5:c1:a8:f0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcE/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI4MTMwMjMyWhcNMjYwODA0MTMwMjMyWjAYMRYw
FAYDVQQDEw02YTQxMWI2Yy02YTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzWJeTKpdpV0PJ0dQhap2UHwLUSMXaOFy+ALaT4uaiIlReRpFysl3C23W
yoTfEXpKtTmH6U+KqGpZow5T1Q3H4oqXQce6OMuOWvlNbK4P4HQytP+BU/T9YClL
JoKxOZ23GAbxySGtytcdaPYQMylLMPcPqe0WadB3tLE4ABT4HULMfFuMK3328+TC
JkFSVP/md3fA7UZhWBznFNDyKRqaZfJVlqb05s13bNGT+iRB5us/tJXl6KtavIpF
m+eqZZ6TajF+srkRiZOtA1Lwaw1OoG1kvF3ldVIwg85CJcevVNcE5pwy8H67GhbE
ami5haHSlAALRe7FJWQdxDqi7w3D0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOK7
a0Y58Sgd7BgrgHwMasAWYdYoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMjRBMDg4NjcyRjExMUYxQTE2QUI5MTVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoAMA0GCSqGSIb3DQEBCwUA
A4IBAQB5L7tpMlCHVhxWw4a5b2VFI8AP0cea4gHnPKfToDog1ip8NGjdmd4+uooh
1gtdPlw2jfMh/WuR0V3O6wABPOphLWZ7H11kkXSyqtZ9gDe+rPrA9DJ+MfnnQogl
oo0ame1kpKYZGnqjhKqsh/KGpuzIvVrRiiW6i/lUykf8nqVxBfSt/fmP5fR37cX7
Tjb9LN3X5eoRrNArrK7DXqb+m7ypDBVTjUAVsyJ/hpDJRXp7KwSgFqotpUEF9Yaw
q+/3O3jmkXK2fXbJa0KX89CQ+4Rze+Hoq4jZycpE2yqWecmwX7yo9geOU+qxvI8i
vaP0l7WoYvLOn5jVT0jSvcjFwajw
-----END CERTIFICATE-----
Generated at Thu Jul 9 06:30:10 2026 by rpki-client