Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB88A64EA411F1A5C13716CF1D38B0.roa
File: C0BB88A64EA411F1A5C13716CF1D38B0.roa (raw, json)
Hash identifier: tlr45n9Sok2Xt9ihJ76YRnoU5MkFtjLDNJe0x7mvTBs=
Subject key identifier: B0:7D:BA:BC:CD:C3:7F:E9:FC:D8:3D:C4:6C:E2:76:36:4C:6D:CB:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B41A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB88A64EA411F1A5C13716CF1D38B0.roa
Signing time: Wed 13 May 2026 08:21:34 +0000
ROA not before: Wed 13 May 2026 08:21:29 +0000
ROA not after: Wed 20 May 2026 08:21:29 +0000
asID: 137443
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 17 May 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111642 (0x1b41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 08:21:29 2026 GMT
Not After : May 20 08:21:29 2026 GMT
Subject: CN=6a04348e-35c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:3d:74:4f:f7:6a:66:84:4e:e8:a0:88:2d:
ae:3b:bc:d2:b0:8b:61:1b:b2:67:4a:eb:2e:91:26:
36:c4:93:9c:f1:fa:35:d5:d4:0c:0d:3f:1e:4a:8c:
a3:21:34:97:40:73:53:75:25:15:6d:bc:68:48:48:
34:f6:c9:12:e3:1d:7a:01:fe:a7:f0:38:e3:ce:36:
80:d5:24:7d:7b:41:f8:31:5c:3a:c3:12:63:a1:30:
54:62:5a:23:f1:ee:5a:07:ff:15:78:0e:7f:b5:34:
8b:33:39:aa:d9:bc:6a:44:6b:13:14:41:9d:52:93:
d7:fc:30:40:29:86:8c:4e:f6:72:46:8a:bb:2b:58:
00:94:81:1a:16:ba:3e:22:3d:10:a6:83:fe:d1:53:
08:e2:e8:94:99:40:48:5a:69:f2:e0:00:de:85:9b:
65:ff:2f:a2:d9:23:7e:ea:d0:01:2e:07:31:23:bf:
79:68:bf:29:a0:2b:be:9c:7a:17:8d:c2:1d:40:17:
81:ac:34:86:a7:db:bb:e4:93:05:46:a8:a4:2f:b7:
45:13:11:d3:16:f6:55:4d:3d:4f:6d:32:9e:de:57:
89:1e:ee:6d:b4:97:dc:c4:81:15:bb:04:d9:77:af:
2d:66:73:2a:c0:25:aa:2f:49:03:b8:4a:ee:2e:5b:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:BA:BC:CD:C3:7F:E9:FC:D8:3D:C4:6C:E2:76:36:4C:6D:CB:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0BB88A64EA411F1A5C13716CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:1d:6a:76:34:eb:3c:0f:77:f2:65:18:ff:12:ea:fc:18:c6:
6a:d2:81:9b:0b:f8:a8:82:63:54:28:ac:bd:65:98:77:59:42:
a3:1c:1e:e8:6d:bd:7e:31:fe:c3:73:d1:6b:21:fd:b3:73:07:
35:a3:c8:a8:71:7a:de:ec:84:57:af:eb:d9:76:ff:6a:a8:54:
46:f5:b6:a6:01:b4:de:8d:60:05:f5:54:fc:41:cc:5c:e1:6d:
f7:6f:7b:42:8d:3b:a4:b8:ce:4f:27:fb:2e:37:42:6b:27:e8:
79:b6:18:06:a8:be:a4:2c:e8:81:37:39:bb:c1:56:63:2e:23:
21:80:58:b3:82:61:98:c1:58:a1:3e:bf:dc:40:57:5b:d5:79:
06:78:0d:44:45:6f:d6:81:3c:05:6f:8a:fc:41:15:56:17:02:
2e:c0:cf:80:ed:68:97:82:d0:43:79:5d:12:54:3d:9b:40:df:
d9:36:2e:55:ee:c4:31:f2:f8:6d:e1:eb:21:b0:6e:f8:01:01:
0e:e4:ac:9c:19:22:a9:70:d4:e3:ba:48:27:fb:ef:5a:2a:4a:
4c:91:ef:d7:33:46:bc:c4:b1:84:61:ab:d4:dc:af:49:8b:27:
5a:b0:04:32:0c:6b:2d:bc:2b:1c:c3:c0:c7:b0:a7:e6:99:2e:
2d:fb:36:e7
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbQaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEzMDgyMTI5WhcNMjYwNTIwMDgyMTI5WjAYMRYw
FAYDVQQDEw02YTA0MzQ4ZS0zNWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAst09dE/3amaETuigiC2uO7zSsIthG7JnSusukSY2xJOc8fo11dQMDT8e
SoyjITSXQHNTdSUVbbxoSEg09skS4x16Af6n8DjjzjaA1SR9e0H4MVw6wxJjoTBU
Yloj8e5aB/8VeA5/tTSLMzmq2bxqRGsTFEGdUpPX/DBAKYaMTvZyRoq7K1gAlIEa
Fro+Ij0QpoP+0VMI4uiUmUBIWmny4ADehZtl/y+i2SN+6tABLgcxI795aL8poCu+
nHoXjcIdQBeBrDSGp9u75JMFRqikL7dFExHTFvZVTT1PbTKe3leJHu5ttJfcxIEV
uwTZd68tZnMqwCWqL0kDuEruLltqCQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLB9
urzNw3/p/Ng9xGzidjZMbcuAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMEJCODhBNjRFQTQxMUYxQTVDMTM3MTZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAE4danY06zwPd/JlGP8S6vwYxmrSgZsL
+KiCY1QorL1lmHdZQqMcHuhtvX4x/sNz0Wsh/bNzBzWjyKhxet7shFev69l2/2qo
VEb1tqYBtN6NYAX1VPxBzFzhbfdve0KNO6S4zk8n+y43Qmsn6Hm2GAaovqQs6IE3
ObvBVmMuIyGAWLOCYZjBWKE+v9xAV1vVeQZ4DURFb9aBPAVvivxBFVYXAi7Az4Dt
aJeC0EN5XRJUPZtA39k2LlXuxDHy+G3h6yGwbvgBAQ7krJwZIqlw1OO6SCf771oq
SkyR79czRrzEsYRhq9Tcr0mLJ1qwBDIMay28KxzDwMewp+aZLi37Nuc=
-----END CERTIFICATE-----
Generated at Fri May 15 18:37:39 2026 by rpki-client