Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD206E3E7C4311F1916ED6FDCE1D38B0.roa
File: AD206E3E7C4311F1916ED6FDCE1D38B0.roa (raw, json)
Hash identifier: 1VtSfX5V4JokfGRqiLFBVKj+W4PJnUuuVQzd1qq3yvM=
Subject key identifier: DD:EB:D9:FF:A7:5F:76:97:3A:6C:FC:22:23:E0:64:6F:03:A6:79:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C460
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD206E3E7C4311F1916ED6FDCE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:42:34 +0000
ROA not before: Fri 10 Jul 2026 09:42:29 +0000
ROA not after: Tue 10 Jul 2029 09:42:29 +0000
asID: 17561
IP address blocks: 156.251.251.0/24 maxlen: 24
156.251.252.0/24 maxlen: 24
156.251.253.0/24 maxlen: 24
156.251.254.0/24 maxlen: 24
156.251.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115808 (0x1c460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:42:29 2026 GMT
Not After : Jul 10 09:42:29 2029 GMT
Subject: CN=6a50be8a-d855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6a:f2:d9:29:01:c2:35:dd:26:29:f3:c1:eb:
bb:86:f5:0a:51:4b:b9:52:56:7c:4c:70:66:0c:48:
26:23:75:2e:a3:a9:b8:fa:98:08:48:f0:1d:d5:c4:
bf:15:10:ab:27:81:ae:99:cc:73:c9:8b:7f:6f:cd:
e1:63:6d:66:74:21:94:8f:41:75:d0:9e:a4:15:30:
15:ef:3d:f0:79:46:f0:85:0e:6a:83:10:bf:59:06:
15:c1:38:ad:4f:97:61:b1:56:20:fe:a6:5d:0c:ba:
17:43:09:fc:8a:96:27:11:83:fa:15:f4:a8:6f:23:
6f:fe:05:69:13:32:75:a6:2a:dc:d8:7c:f7:2f:b6:
51:e8:9b:25:93:0c:41:1a:de:31:5f:34:89:01:3f:
d4:68:b0:e0:01:3d:5d:f0:87:81:17:98:21:b6:b9:
85:fd:ab:62:47:44:a6:15:93:22:98:c4:ce:ff:bb:
be:5c:3d:68:42:85:2e:72:bd:56:a0:a8:45:69:d4:
e4:7d:c7:22:1a:b6:b2:d9:5c:09:f9:a5:cf:04:be:
95:11:e0:2b:1f:27:10:24:61:a7:20:90:d4:72:f0:
8f:92:6b:16:ab:37:14:fe:7a:c9:3a:1c:2c:88:46:
e8:5a:e9:2f:36:bd:cc:3c:1e:e3:bd:3a:42:62:2a:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:EB:D9:FF:A7:5F:76:97:3A:6C:FC:22:23:E0:64:6F:03:A6:79:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD206E3E7C4311F1916ED6FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.251.0-156.251.255.255
Signature Algorithm: sha256WithRSAEncryption
4a:23:b2:d3:99:fc:56:19:f2:8a:56:fa:bc:f0:b4:9c:86:43:
87:53:d7:e7:83:6e:23:12:f6:09:3e:49:4f:30:ab:e2:20:83:
2f:e1:4a:08:fb:c6:59:38:d9:b0:70:92:01:14:cf:8b:84:ae:
d6:dd:95:42:f1:e5:3a:23:40:96:07:96:26:91:c0:dd:4f:63:
82:2e:3b:d0:b1:75:82:32:35:94:5b:15:95:e0:03:83:68:cb:
b5:2d:ac:e4:37:f8:93:d0:52:d1:67:b9:65:2c:3e:7f:7e:0e:
0f:2f:9e:85:31:28:75:a7:e0:89:bb:ae:a4:f4:1d:03:a3:6a:
0f:54:8d:21:91:83:cc:9d:fb:d9:97:c6:ce:96:8e:57:66:cf:
cf:24:52:fc:12:99:77:bb:b6:6c:21:e7:12:39:94:be:89:58:
37:9a:98:16:59:a3:b4:2d:10:d3:9f:86:ea:bb:e7:50:1c:62:
a0:02:6f:c4:ef:0f:80:c0:ff:8c:41:80:c9:82:f5:fa:d9:e5:
22:15:20:b6:1c:15:eb:3c:fb:d7:10:e6:cf:84:9c:ca:17:09:
ef:ca:96:57:f4:70:3c:99:f7:35:de:23:04:bc:3e:93:ca:4f:
81:e8:a4:e7:04:70:02:30:bf:0d:13:e8:d1:e1:02:28:d7:e6:
e0:67:e1:09
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIDAcRgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzEwMDk0MjI5WhcNMjkwNzEwMDk0MjI5WjAYMRYw
FAYDVQQDEw02YTUwYmU4YS1kODU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1mry2SkBwjXdJinzweu7hvUKUUu5UlZ8THBmDEgmI3Uuo6m4+pgISPAd
1cS/FRCrJ4GumcxzyYt/b83hY21mdCGUj0F10J6kFTAV7z3weUbwhQ5qgxC/WQYV
wTitT5dhsVYg/qZdDLoXQwn8ipYnEYP6FfSobyNv/gVpEzJ1pirc2Hz3L7ZR6Jsl
kwxBGt4xXzSJAT/UaLDgAT1d8IeBF5ghtrmF/atiR0SmFZMimMTO/7u+XD1oQoUu
cr1WoKhFadTkfcciGray2VwJ+aXPBL6VEeArHycQJGGnIJDUcvCPkmsWqzcU/nrJ
OhwsiEboWukvNr3MPB7jvTpCYio8xwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFN3r
2f+nX3aXOmz8IiPgZG8DpnnBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRDIwNkUzRTdDNDMxMUYxOTE2RUQ2RkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBACc+/sDAwKc+DANBgkqhkiG
9w0BAQsFAAOCAQEASiOy05n8Vhnyilb6vPC0nIZDh1PX54NuIxL2CT5JTzCr4iCD
L+FKCPvGWTjZsHCSARTPi4Su1t2VQvHlOiNAlgeWJpHA3U9jgi470LF1gjI1lFsV
leADg2jLtS2s5Df4k9BS0We5ZSw+f34ODy+ehTEodafgibuupPQdA6NqD1SNIZGD
zJ372ZfGzpaOV2bPzyRS/BKZd7u2bCHnEjmUvolYN5qYFlmjtC0Q05+G6rvnUBxi
oAJvxO8PgMD/jEGAyYL1+tnlIhUgthwV6zz71xDmz4ScyhcJ78qWV/RwPJn3Nd4j
BLw+k8pPgeik5wRwAjC/DRPo0eECKNfm4GfhCQ==
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:39 2026 by rpki-client