Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C14F5500439A11F1A9E7B8F5CE1D38B0.roa
File: C14F5500439A11F1A9E7B8F5CE1D38B0.roa (raw, json)
Hash identifier: FRi5i/1rSkewTbk+xD8SLYk29jAU8g310OgEXwtYmag=
Subject key identifier: D1:ED:D4:DF:E5:32:47:A3:71:63:F3:38:3B:55:E8:1F:EE:C4:3B:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C14F5500439A11F1A9E7B8F5CE1D38B0.roa
Signing time: Wed 29 Apr 2026 07:12:18 +0000
ROA not before: Wed 29 Apr 2026 07:12:13 +0000
ROA not after: Fri 05 Jun 2026 07:12:13 +0000
asID: 142032
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110517 (0x1afb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 07:12:13 2026 GMT
Not After : Jun 5 07:12:13 2026 GMT
Subject: CN=69f1af51-fdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f5:2d:32:cb:9d:cb:ab:b6:bd:f5:4d:94:67:
27:92:f8:5c:30:44:0e:a5:65:ca:39:82:46:6e:9e:
75:97:c0:f9:2e:7f:f1:9a:de:ba:64:bf:5c:29:eb:
37:62:a1:d2:36:55:cb:d1:94:d7:fd:16:37:63:8e:
1d:ad:5a:39:6f:81:24:4d:c3:4f:90:43:35:35:34:
74:34:1e:08:54:1c:72:06:3c:e3:f7:6e:e0:bc:c1:
3b:53:53:6e:a3:3a:9d:8a:eb:45:18:d6:bf:8c:90:
81:18:e9:8d:09:06:12:42:7e:98:75:89:51:04:3d:
59:74:77:92:d1:41:c1:cc:70:77:71:7d:af:43:21:
fa:e5:b5:ae:16:17:d7:27:a3:d4:0c:c8:4d:32:15:
06:9a:6d:39:c1:2c:47:7e:59:58:64:7d:36:de:a9:
c0:02:66:80:ee:8b:3b:20:b8:29:b0:53:c5:e4:26:
0b:77:38:2f:56:29:08:df:f1:94:3a:e1:ca:69:b9:
19:f4:1d:03:04:bc:45:56:dc:2a:25:d7:89:31:46:
0d:29:9e:95:93:3d:fe:40:51:4d:04:2e:e3:0d:46:
b0:25:e0:66:b9:cb:f1:dd:e2:fe:1b:f7:b3:0e:2d:
aa:c5:d9:fa:75:02:f9:d4:9c:a2:a2:0e:a0:82:ab:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:D4:DF:E5:32:47:A3:71:63:F3:38:3B:55:E8:1F:EE:C4:3B:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C14F5500439A11F1A9E7B8F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
b0:ce:a1:5d:6c:39:52:d2:d2:90:fd:35:c1:f4:5e:7e:68:af:
b6:58:d6:e6:57:34:55:a5:4c:92:c6:e5:07:86:13:26:bf:f9:
9e:5a:ed:f4:85:29:89:28:f1:cc:fb:b1:5c:9c:75:cf:08:59:
1e:02:f1:b0:9e:25:26:6b:f6:e8:68:f7:e2:0d:c2:f4:4f:d2:
98:6e:b8:e1:db:b6:4d:b8:e6:37:5d:18:fc:d1:aa:e8:95:55:
87:d4:9e:41:53:8d:7a:90:51:77:e9:30:f4:d7:3c:9a:9c:c9:
97:0a:5c:84:7f:e3:42:94:4c:a8:a4:07:76:63:98:1f:52:a0:
77:d1:09:b7:40:3b:ca:55:ed:50:24:e4:82:6e:c2:08:19:23:
1c:99:cd:2c:fb:37:9b:6f:46:ea:69:d1:1d:09:06:cf:ce:f1:
1f:fa:68:23:86:f7:41:12:79:37:26:6a:37:19:d1:ed:c7:eb:
1b:e4:11:a3:48:6d:89:b8:7d:3f:65:d9:e5:94:e7:da:20:52:
ed:f0:4e:b7:05:f6:84:6d:00:2d:b6:83:c9:60:76:fd:9c:36:
a8:86:84:0c:19:85:30:2d:d1:13:41:90:ae:f0:7a:4a:5b:ea:
a1:af:9e:e1:e7:d7:e8:33:37:a6:37:81:bf:9e:f5:8b:f9:31:
02:0d:12:7c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAa+1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDI5MDcxMjEzWhcNMjYwNjA1MDcxMjEzWjAYMRYw
FAYDVQQDEw02OWYxYWY1MS1mZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1vUtMsudy6u2vfVNlGcnkvhcMEQOpWXKOYJGbp51l8D5Ln/xmt66ZL9c
Kes3YqHSNlXL0ZTX/RY3Y44drVo5b4EkTcNPkEM1NTR0NB4IVBxyBjzj927gvME7
U1NuozqdiutFGNa/jJCBGOmNCQYSQn6YdYlRBD1ZdHeS0UHBzHB3cX2vQyH65bWu
FhfXJ6PUDMhNMhUGmm05wSxHfllYZH023qnAAmaA7os7ILgpsFPF5CYLdzgvVikI
3/GUOuHKabkZ9B0DBLxFVtwqJdeJMUYNKZ6Vkz3+QFFNBC7jDUawJeBmucvx3eL+
G/ezDi2qxdn6dQL51Jyiog6ggqt5FwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNHt
1N/lMkejcWPzODtV6B/uxDurMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTRGNTUwMDQzOUExMUYxQTlFN0I4RjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQCwzqFdbDlS0tKQ/TXB9F5+aK+2WNbmVzRVpUySxuUHhhMmv/meWu30hSmJ
KPHM+7FcnHXPCFkeAvGwniUma/boaPfiDcL0T9KYbrjh27ZNuOY3XRj80arolVWH
1J5BU416kFF36TD01zyanMmXClyEf+NClEyopAd2Y5gfUqB30Qm3QDvKVe1QJOSC
bsIIGSMcmc0s+zebb0bqadEdCQbPzvEf+mgjhvdBEnk3Jmo3GdHtx+sb5BGjSG2J
uH0/ZdnllOfaIFLt8E63BfaEbQAttoPJYHb9nDaohoQMGYUwLdETQZCu8HpKW+qh
r57h59foMzemN4G/nvWL+TECDRJ8
-----END CERTIFICATE-----
Generated at Wed May 6 02:40:43 2026 by rpki-client