Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D641D05BA511F1823298ABCE1D38B0.roa
File: C3D641D05BA511F1823298ABCE1D38B0.roa (raw, json)
Hash identifier: kx6z36aoHg0cA9yZ8UdPZjt0Df9YDg8AGO7kwtQnKVI=
Subject key identifier: 70:ED:76:53:BF:EB:BA:4A:C4:A2:C7:E4:5A:52:1A:E7:F5:3E:AF:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BABA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D641D05BA511F1823298ABCE1D38B0.roa
Signing time: Fri 29 May 2026 21:31:34 +0000
ROA not before: Fri 29 May 2026 21:31:29 +0000
ROA not after: Sun 28 Jun 2026 21:31:29 +0000
asID: 202656
IP address blocks: 156.233.9.0/24 maxlen: 24
156.233.96.0/24 maxlen: 24
156.233.97.0/24 maxlen: 24
156.233.106.0/24 maxlen: 24
156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113338 (0x1baba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 21:31:29 2026 GMT
Not After : Jun 28 21:31:29 2026 GMT
Subject: CN=6a1a05b6-1337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:4f:2f:41:fd:55:a7:22:a9:44:45:87:40:
8e:ab:03:42:53:6f:51:11:70:78:8a:31:9e:ce:87:
f4:74:57:de:e1:67:d5:9e:48:84:d3:f1:ab:d0:39:
fd:8b:2f:01:cf:f4:32:7b:db:c3:1e:fc:d3:be:87:
dd:25:cf:2c:3e:76:c4:32:ab:83:66:d5:5d:01:93:
58:2d:3b:62:0f:ac:dc:c3:d4:bb:59:d1:22:55:0c:
f1:61:69:ec:2a:94:4d:e9:b6:98:b8:f4:ac:d2:ca:
52:85:b8:95:f0:57:01:fb:e5:45:1d:55:6c:ff:26:
02:0a:e9:3f:17:b5:a8:69:69:4b:92:25:46:9a:76:
91:4d:ad:d9:8f:0e:a8:d7:3b:1d:ef:bb:0e:b5:06:
e9:74:94:aa:cb:a8:18:21:b7:8a:1a:18:d1:cc:73:
bb:c5:bb:7b:cf:0e:18:ba:11:8b:87:c4:1a:9e:80:
e1:fa:8a:79:e5:04:6b:0d:17:db:ec:44:00:fc:f6:
1d:7b:bf:e7:19:58:0a:9d:cf:ef:97:51:9d:24:8e:
7a:ff:76:ca:7a:05:9e:69:3c:c1:cd:37:5f:ec:b6:
ca:79:81:ca:43:eb:bc:5b:80:fe:5c:77:9d:55:d7:
7f:f5:0a:97:cb:ec:29:21:63:fc:c1:94:44:dc:11:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:ED:76:53:BF:EB:BA:4A:C4:A2:C7:E4:5A:52:1A:E7:F5:3E:AF:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C3D641D05BA511F1823298ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.9.0/24
156.233.96.0/23
156.233.106.0/24
156.233.116.0/23
156.246.182.0-156.246.189.255
156.246.250.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
68:c9:3a:b2:3f:ae:5b:cc:6c:d6:68:c5:06:6f:55:6b:d7:d7:
61:ca:a5:f5:3b:23:23:48:e0:2d:b1:95:24:65:66:74:fa:cc:
ad:9c:4e:3b:06:1b:e9:b8:eb:6e:70:0a:06:89:98:e0:1c:8e:
24:bf:32:32:e2:90:40:b4:30:5f:0d:b1:ce:6b:84:9f:60:7b:
92:99:2c:50:ba:6a:6e:53:88:29:0d:36:b4:82:50:dc:24:9a:
d7:56:43:7f:35:c4:46:83:79:f2:35:9a:07:43:5d:cf:f5:2e:
16:fb:15:88:45:d1:f1:34:b5:3b:1c:1a:dd:33:8e:aa:64:93:
48:4e:f2:74:c0:ab:a8:e6:aa:10:22:34:b6:29:9c:82:45:dc:
6b:26:0b:1e:c6:f8:a6:cd:d1:92:61:f0:93:60:60:b7:37:65:
8f:5c:52:07:2f:65:f3:15:65:14:da:3d:1b:5d:35:85:7e:bb:
52:57:a0:a2:4b:2d:38:73:e3:aa:6d:45:cb:38:16:f5:12:89:
96:84:13:83:3d:d9:76:1c:9a:64:b8:76:89:ac:8c:26:b8:b6:
02:63:8d:5c:bf:ea:7d:47:be:e6:3d:49:00:bc:92:07:03:31:
41:be:00:1c:4e:b0:81:f6:2b:9c:4e:fe:4d:0a:e2:ca:2b:a6:
6c:68:6c:f9
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAbq6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI5MjEzMTI5WhcNMjYwNjI4MjEzMTI5WjAYMRYw
FAYDVQQDEw02YTFhMDViNi0xMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwEJPL0H9VaciqURFh0COqwNCU29REXB4ijGezof0dFfe4WfVnkiE0/Gr
0Dn9iy8Bz/Qye9vDHvzTvofdJc8sPnbEMquDZtVdAZNYLTtiD6zcw9S7WdEiVQzx
YWnsKpRN6baYuPSs0spShbiV8FcB++VFHVVs/yYCCuk/F7WoaWlLkiVGmnaRTa3Z
jw6o1zsd77sOtQbpdJSqy6gYIbeKGhjRzHO7xbt7zw4YuhGLh8QanoDh+op55QRr
DRfb7EQA/PYde7/nGVgKnc/vl1GdJI56/3bKegWeaTzBzTdf7LbKeYHKQ+u8W4D+
XHedVdd/9QqXy+wpIWP8wZRE3BHYuQIDAQABo4ICzzCCAsswHQYDVR0OBBYEFHDt
dlO/67pKxKLH5FpSGuf1Pq+hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DM0Q2NDFEMDVCQTUxMUYxODIzMjk4QUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzAwQAnOkJAwQBnOlgAwQAnOlqAwQB
nOl0MAwDBAGc9rYDBAGc9rwwCwMEAZz2+gMDAJz2MA0GCSqGSIb3DQEBCwUAA4IB
AQBoyTqyP65bzGzWaMUGb1Vr19dhyqX1OyMjSOAtsZUkZWZ0+sytnE47BhvpuOtu
cAoGiZjgHI4kvzIy4pBAtDBfDbHOa4SfYHuSmSxQumpuU4gpDTa0glDcJJrXVkN/
NcRGg3nyNZoHQ13P9S4W+xWIRdHxNLU7HBrdM46qZJNITvJ0wKuo5qoQIjS2KZyC
RdxrJgsexvimzdGSYfCTYGC3N2WPXFIHL2XzFWUU2j0bXTWFfrtSV6CiSy04c+Oq
bUXLOBb1EomWhBODPdl2HJpkuHaJrIwmuLYCY41cv+p9R77mPUkAvJIHAzFBvgAc
TrCB9iucTv5NCuLKK6ZsaGz5
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:56 2026 by rpki-client