Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B001912C551111F1ACE880AECE1D38B0.roa
File: B001912C551111F1ACE880AECE1D38B0.roa (raw, json)
Hash identifier: n4a9ml/XnKfHgmBCIFDzMMz35LIjGYYNmf76lY6MOxI=
Subject key identifier: 60:7F:82:3E:F6:07:D2:D0:EE:56:45:9F:46:BC:56:DA:78:83:47:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B001912C551111F1ACE880AECE1D38B0.roa
Signing time: Thu 21 May 2026 12:36:28 +0000
ROA not before: Thu 21 May 2026 12:36:24 +0000
ROA not after: Wed 19 Aug 2026 12:36:24 +0000
asID: 54600
IP address blocks: 156.235.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112383 (0x1b6ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:36:24 2026 GMT
Not After : Aug 19 12:36:24 2026 GMT
Subject: CN=6a0efc4c-01df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:4c:63:32:56:35:0a:0b:36:33:2e:5c:b2:
a8:05:b1:1c:1e:a6:8d:31:04:a1:89:dc:e9:31:d4:
c4:62:b4:f5:09:3b:39:6b:c7:6e:90:b8:0b:ba:b1:
3e:9f:b0:31:41:04:e9:10:4b:51:a2:9d:0e:e4:4c:
b8:e9:95:b0:56:ab:06:8a:18:cc:04:a8:2a:e7:1d:
4d:d0:41:5f:f2:8d:c1:7e:6e:81:83:ea:a1:7b:3b:
69:43:5d:41:5f:b5:13:9f:bc:31:39:d7:8e:ea:39:
63:88:72:2d:1a:e2:b9:4d:38:8a:c4:6a:79:9a:11:
6a:36:df:fb:0b:ca:bd:33:78:82:49:b2:30:b0:6e:
1b:2c:41:fb:ae:06:27:77:18:a6:18:da:89:86:ed:
09:c1:9d:2d:d0:23:4c:b6:b2:6c:2d:71:b7:42:f7:
67:6f:66:95:6a:aa:98:95:77:ea:51:ea:15:ee:08:
a9:0b:ce:36:32:5e:17:44:3a:1e:59:78:4a:5a:8d:
41:7a:4b:da:9f:08:f6:7a:2b:fa:11:4a:8c:aa:eb:
ca:d1:be:e0:ed:99:46:e6:3f:a3:25:b2:c7:42:65:
db:94:61:ae:b3:6c:c3:0a:81:53:2a:c3:dc:a5:dd:
c3:06:2e:8c:9c:12:1c:d9:87:e9:6a:7d:10:e4:eb:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7F:82:3E:F6:07:D2:D0:EE:56:45:9F:46:BC:56:DA:78:83:47:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B001912C551111F1ACE880AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.96.0/21
Signature Algorithm: sha256WithRSAEncryption
53:58:2e:6e:59:f9:f6:e8:44:4d:bd:66:6c:28:89:69:48:54:
84:5b:74:f4:1c:ff:ac:d5:87:cf:0a:b9:e9:5f:4b:a6:38:3b:
b7:90:5e:b6:20:bd:1b:f5:f7:b1:54:aa:b0:5e:3e:b1:7f:92:
e4:18:42:1f:05:5c:00:cd:93:2c:30:5e:cb:64:2a:73:15:4c:
c2:d7:2d:9c:e9:e8:96:ff:69:c5:48:85:14:25:37:61:ed:43:
cf:59:11:0a:94:14:93:ce:76:c9:23:7e:6e:82:75:d1:f4:83:
c6:bb:fd:fb:5a:9c:6e:12:9f:22:f4:6e:ff:ed:f3:18:6c:95:
a3:c2:ab:f6:da:b2:3e:17:ae:d9:8f:48:58:3e:89:52:8d:2d:
79:0a:36:04:b7:2f:07:5a:8c:f6:91:be:67:54:08:41:97:4f:
90:77:5b:e7:e0:42:da:f0:e9:8a:52:f4:87:65:e8:6a:42:48:
7e:5c:0d:2c:12:a1:d7:84:b1:39:41:a8:5a:6d:f1:0e:14:44:
a8:5a:b8:de:69:5f:bb:14:ce:f1:70:27:f2:20:4a:49:6f:1b:
20:db:08:1e:dc:4b:e5:2e:b6:07:58:80:d1:6e:84:d3:25:12:
12:89:8d:9c:0a:eb:0a:91:20:d0:c6:87:e2:9b:13:d3:5c:2e:
df:e4:bf:5b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbb/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTIzNjI0WhcNMjYwODE5MTIzNjI0WjAYMRYw
FAYDVQQDEw02YTBlZmM0Yy0wMWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxxFMYzJWNQoLNjMuXLKoBbEcHqaNMQShidzpMdTEYrT1CTs5a8dukLgL
urE+n7AxQQTpEEtRop0O5Ey46ZWwVqsGihjMBKgq5x1N0EFf8o3Bfm6Bg+qheztp
Q11BX7UTn7wxOdeO6jljiHItGuK5TTiKxGp5mhFqNt/7C8q9M3iCSbIwsG4bLEH7
rgYndximGNqJhu0JwZ0t0CNMtrJsLXG3Qvdnb2aVaqqYlXfqUeoV7gipC842Ml4X
RDoeWXhKWo1Bekvanwj2eiv6EUqMquvK0b7g7ZlG5j+jJbLHQmXblGGus2zDCoFT
KsPcpd3DBi6MnBIc2Yfpan0Q5OvlawIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGB/
gj72B9LQ7lZFn0a8Vtp4g0eOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMDAxOTEyQzU1MTExMUYxQUNFODgwQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOtgMA0GCSqGSIb3DQEBCwUA
A4IBAQBTWC5uWfn26ERNvWZsKIlpSFSEW3T0HP+s1YfPCrnpX0umODu3kF62IL0b
9fexVKqwXj6xf5LkGEIfBVwAzZMsMF7LZCpzFUzC1y2c6eiW/2nFSIUUJTdh7UPP
WREKlBSTznbJI35ugnXR9IPGu/37WpxuEp8i9G7/7fMYbJWjwqv22rI+F67Zj0hY
PolSjS15CjYEty8HWoz2kb5nVAhBl0+Qd1vn4ELa8OmKUvSHZehqQkh+XA0sEqHX
hLE5QahabfEOFESoWrjeaV+7FM7xcCfyIEpJbxsg2wge3EvlLrYHWIDRboTTJRIS
iY2cCusKkSDQxofimxPTXC7f5L9b
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:15 2026 by rpki-client