Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7F91C6545D11F180BE4CDECE1D38B0.roa
File: BA7F91C6545D11F180BE4CDECE1D38B0.roa (raw, json)
Hash identifier: j/6YC5qBzT/ShXwgyjxixh9CZjedChBjXz7BW/ozokY=
Subject key identifier: 57:43:61:4E:6B:86:76:4A:9E:6F:20:3B:FB:52:41:4D:C3:91:B8:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B66A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7F91C6545D11F180BE4CDECE1D38B0.roa
Signing time: Wed 20 May 2026 15:08:17 +0000
ROA not before: Wed 20 May 2026 15:08:11 +0000
ROA not after: Fri 26 Jun 2026 15:08:11 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112234 (0x1b66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 15:08:11 2026 GMT
Not After : Jun 26 15:08:11 2026 GMT
Subject: CN=6a0dce60-17d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:18:b7:47:65:cb:ce:4c:a6:47:6f:48:ec:
d7:05:e1:e5:01:d9:c8:81:e0:bb:d6:e0:40:90:f7:
cf:d8:26:51:df:14:9d:4e:d0:f9:17:c6:17:37:fa:
73:56:02:39:6a:96:10:08:bc:6c:c2:19:e7:7e:49:
02:85:c3:cf:c1:79:6c:56:06:d9:10:c6:03:74:e2:
ed:03:1a:d6:c3:51:11:21:e0:10:1f:d5:f8:1c:40:
cf:5a:4c:7b:90:a9:a1:ce:4b:a0:b0:aa:c8:22:67:
67:d3:d1:88:a3:3c:b9:f8:c3:3d:2f:ef:b9:7f:a1:
f1:0e:47:5b:11:c1:f5:6a:f4:86:a4:20:09:5a:a2:
4a:1e:33:0e:4f:de:85:1d:f7:1e:0a:08:65:45:d7:
2b:82:50:88:33:47:18:f0:bf:36:ad:4d:e3:c0:68:
93:6d:db:96:d7:27:62:20:c3:69:f3:5b:4e:8b:b7:
00:44:45:04:ea:b4:be:c3:4c:ce:1e:8f:f9:2a:64:
f4:71:26:97:b2:ec:c7:be:f8:0a:22:10:dd:c8:21:
d9:4e:21:2c:b9:c7:17:f6:32:97:5e:42:c6:3b:ca:
a9:08:0e:6b:1e:6f:e9:7c:5d:fd:1a:30:b1:79:47:
18:29:ef:30:70:f0:73:23:c5:cf:7f:2d:ec:ef:4b:
96:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:43:61:4E:6B:86:76:4A:9E:6F:20:3B:FB:52:41:4D:C3:91:B8:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA7F91C6545D11F180BE4CDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.114.255
156.225.116.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:9b:53:8e:2a:b9:a7:db:86:06:86:76:1c:be:3b:c5:30:6a:
39:0a:0a:ae:59:55:7d:10:dd:e5:3b:a0:59:64:a7:f5:9e:b8:
01:ab:25:2d:fe:db:f1:52:41:83:c4:91:44:d0:7f:5e:0b:20:
7a:21:f9:a8:89:f5:7b:96:22:59:37:d6:44:0d:ee:16:26:c3:
43:35:82:00:84:ec:87:d1:cc:c0:d8:77:8c:9e:83:c2:0b:6b:
45:7e:0c:1c:cb:5a:3d:d5:9d:81:83:44:43:11:61:33:0b:23:
4f:14:dc:f7:4a:9d:a9:02:64:17:56:69:70:57:82:75:8c:47:
6a:18:65:52:4f:65:67:f9:7c:72:05:9b:b7:d9:27:cb:fc:39:
b9:e9:1f:23:2a:e4:bf:bd:32:4a:c7:6e:93:c4:55:d7:42:aa:
6d:b4:67:82:04:d3:e7:f3:7c:09:38:7d:06:c9:2d:19:03:5f:
6c:d5:d1:0e:67:06:39:4e:f3:11:b9:19:40:a9:fe:d7:f3:ad:
b1:cc:99:7b:9d:f5:ef:4d:0c:39:ff:93:c6:b3:a6:96:1e:c6:
9a:7b:00:89:cf:b5:49:5a:f1:54:25:1e:b7:be:bb:74:cb:62:
8b:1a:cc:b3:38:e5:ee:41:06:c2:2b:6b:3e:53:ba:a2:be:bf:
69:3b:1f:7b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbZqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIwMTUwODExWhcNMjYwNjI2MTUwODExWjAYMRYw
FAYDVQQDEw02YTBkY2U2MC0xN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAn+kYt0dly85MpkdvSOzXBeHlAdnIgeC71uBAkPfP2CZR3xSdTtD5F8YX
N/pzVgI5apYQCLxswhnnfkkChcPPwXlsVgbZEMYDdOLtAxrWw1ERIeAQH9X4HEDP
Wkx7kKmhzkugsKrIImdn09GIozy5+MM9L++5f6HxDkdbEcH1avSGpCAJWqJKHjMO
T96FHfceCghlRdcrglCIM0cY8L82rU3jwGiTbduW1ydiIMNp81tOi7cAREUE6rS+
w0zOHo/5KmT0cSaXsuzHvvgKIhDdyCHZTiEsuccX9jKXXkLGO8qpCA5rHm/pfF39
GjCxeUcYKe8wcPBzI8XPfy3s70uWiwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFdD
YU5rhnZKnm8gO/tSQU3Dkbh9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTdGOTFDNjU0NUQxMUYxODBCRTRDREVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASc4XADBACc4XIDBAKc4XQw
DQYJKoZIhvcNAQELBQADggEBALGbU44quafbhgaGdhy+O8UwajkKCq5ZVX0Q3eU7
oFlkp/WeuAGrJS3+2/FSQYPEkUTQf14LIHoh+aiJ9XuWIlk31kQN7hYmw0M1ggCE
7IfRzMDYd4yeg8ILa0V+DBzLWj3VnYGDREMRYTMLI08U3PdKnakCZBdWaXBXgnWM
R2oYZVJPZWf5fHIFm7fZJ8v8ObnpHyMq5L+9MkrHbpPEVddCqm20Z4IE0+fzfAk4
fQbJLRkDX2zV0Q5nBjlO8xG5GUCp/tfzrbHMmXud9e9NDDn/k8azppYexpp7AInP
tUla8VQlHre+u3TLYosazLM45e5BBsIraz5TuqK+v2k7H3s=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:06 2026 by rpki-client