Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A5306C816F11F185DD3EABCE1D38B0.roa
File: C5A5306C816F11F185DD3EABCE1D38B0.roa (raw, json)
Hash identifier: RK84anTW6+/ux3IgXMkBuoTkeUvuuTjNRmjYsB33B+4=
Subject key identifier: DD:3B:88:B3:96:15:66:EE:05:5E:0D:40:A1:F6:E1:0A:F7:1B:CC:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C594
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A5306C816F11F185DD3EABCE1D38B0.roa
Signing time: Thu 16 Jul 2026 23:40:49 +0000
ROA not before: Thu 16 Jul 2026 23:40:45 +0000
ROA not after: Sat 22 Aug 2026 23:40:45 +0000
asID: 269984
IP address blocks: 156.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116116 (0x1c594)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 23:40:45 2026 GMT
Not After : Aug 22 23:40:45 2026 GMT
Subject: CN=6a596c00-85b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:e2:14:0e:dd:f6:3e:d6:d0:9e:ef:1a:ee:
9c:dc:f2:87:21:7f:1e:58:67:4f:46:00:51:3b:f4:
8a:74:43:e0:c2:40:4a:2c:fd:2d:a9:14:82:cb:44:
b0:48:c8:12:46:55:d4:c6:17:4a:4a:1e:4b:af:e8:
2d:f6:5d:95:c4:26:48:6e:0f:65:06:5c:f3:0a:36:
2f:66:82:91:25:cb:d8:e1:9f:5a:89:ce:3c:f8:a5:
e0:6d:b8:e2:ac:6c:43:5d:7d:21:ef:fe:13:57:9f:
8f:fd:55:b4:5a:21:37:aa:58:d4:aa:df:3c:ce:54:
87:5a:f5:45:b5:22:3a:85:a2:7e:de:5f:09:44:2f:
be:20:b9:e8:3f:97:fd:26:c9:01:02:aa:d4:7c:3b:
15:7b:90:e0:0c:5d:2f:40:ff:80:e3:34:aa:0d:0c:
9b:54:e6:05:7e:44:f6:cb:48:5a:6c:13:6d:f3:56:
c1:ab:4a:48:4a:8b:ae:c8:92:ff:cb:1a:e3:0b:b6:
c1:d2:26:d8:92:9a:63:e6:29:ab:fb:bf:82:b7:62:
3d:5a:05:19:ba:14:91:67:9f:e6:e8:ab:77:e1:56:
f1:0f:81:93:e0:11:22:48:5b:1d:7f:67:e1:b9:96:
73:12:b3:1d:11:00:79:21:36:b9:94:ca:a8:be:55:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:88:B3:96:15:66:EE:05:5E:0D:40:A1:F6:E1:0A:F7:1B:CC:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5A5306C816F11F185DD3EABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
25:4e:6a:c3:59:0a:d0:e6:99:e0:22:0b:4c:45:18:a5:bf:59:
1a:0e:82:e4:05:05:2f:36:1b:b5:4e:47:59:da:3e:e4:23:95:
d0:22:db:dc:2c:38:a1:e2:49:0c:73:c2:ad:62:5f:ec:c9:67:
f9:9b:64:2c:61:d2:bb:87:a6:36:2e:8e:f4:81:6c:85:28:55:
71:cf:e4:85:46:e3:95:71:cb:66:53:ce:8f:22:f1:83:4f:ef:
f1:ae:71:e2:f4:f5:27:76:d8:61:37:00:c4:43:ac:77:82:f4:
29:d5:a5:7f:c4:2f:2f:e9:98:64:3e:02:43:0e:86:16:9d:c1:
c4:e8:d3:41:28:c7:71:54:6f:2d:82:63:97:2b:9c:2a:af:80:
ac:6a:90:10:2c:86:35:03:1c:c5:87:37:6c:c6:ec:62:f9:87:
d5:d1:a2:fc:fe:3a:e9:78:5a:b4:d4:d3:f6:c0:fd:f1:5f:76:
37:1f:d6:49:ab:51:63:5a:d8:e5:2f:43:65:e1:71:24:30:96:
04:27:fa:1f:fd:e9:27:d0:44:59:64:f1:84:13:72:c4:8c:21:
0c:cd:db:00:55:5a:05:bf:32:e4:f4:2e:2f:f9:7f:fd:9f:e3:
5a:d7:39:31:41:d6:2d:ed:ff:b2:de:69:0a:f3:35:51:25:f8:
6f:13:9c:46
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcWUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE2MjM0MDQ1WhcNMjYwODIyMjM0MDQ1WjAYMRYw
FAYDVQQDEw02YTU5NmMwMC04NWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqaPiFA7d9j7W0J7vGu6c3PKHIX8eWGdPRgBRO/SKdEPgwkBKLP0tqRSC
y0SwSMgSRlXUxhdKSh5Lr+gt9l2VxCZIbg9lBlzzCjYvZoKRJcvY4Z9aic48+KXg
bbjirGxDXX0h7/4TV5+P/VW0WiE3qljUqt88zlSHWvVFtSI6haJ+3l8JRC++ILno
P5f9JskBAqrUfDsVe5DgDF0vQP+A4zSqDQybVOYFfkT2y0habBNt81bBq0pISouu
yJL/yxrjC7bB0ibYkppj5imr+7+Ct2I9WgUZuhSRZ5/m6Kt34VbxD4GT4BEiSFsd
f2fhuZZzErMdEQB5ITa5lMqovlVtKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN07
iLOWFWbuBV4NQKH24Qr3G8zcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNUE1MzA2QzgxNkYxMUYxODVERDNFQUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnP+AMA0GCSqGSIb3DQEBCwUA
A4IBAQAlTmrDWQrQ5pngIgtMRRilv1kaDoLkBQUvNhu1TkdZ2j7kI5XQItvcLDih
4kkMc8KtYl/syWf5m2QsYdK7h6Y2Lo70gWyFKFVxz+SFRuOVcctmU86PIvGDT+/x
rnHi9PUndthhNwDEQ6x3gvQp1aV/xC8v6ZhkPgJDDoYWncHE6NNBKMdxVG8tgmOX
K5wqr4CsapAQLIY1AxzFhzdsxuxi+YfV0aL8/jrpeFq01NP2wP3xX3Y3H9ZJq1Fj
WtjlL0Nl4XEkMJYEJ/of/ekn0ERZZPGEE3LEjCEMzdsAVVoFvzLk9C4v+X/9n+Na
1zkxQdYt7f+y3mkK8zVRJfhvE5xG
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:06 2026 by rpki-client