Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69A1BC2578F11F1A3FF07DFCE1D38B0.roa
File: C69A1BC2578F11F1A3FF07DFCE1D38B0.roa (raw, json)
Hash identifier: cnKHjcpzkHc7lHExJcyCM8hqWihtNd3t7/P87H9opA8=
Subject key identifier: E0:83:8C:25:ED:06:DC:8A:3B:C0:33:32:D8:A3:03:7A:94:9D:B2:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B924
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69A1BC2578F11F1A3FF07DFCE1D38B0.roa
Signing time: Sun 24 May 2026 16:44:06 +0000
ROA not before: Sun 24 May 2026 16:44:00 +0000
ROA not after: Wed 01 Jul 2026 16:44:00 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112932 (0x1b924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 16:44:00 2026 GMT
Not After : Jul 1 16:44:00 2026 GMT
Subject: CN=6a132ad5-6d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:d7:69:e3:f2:6e:ba:75:52:07:ad:1a:15:
9f:73:10:4d:65:b3:3c:a3:b0:4b:8c:8d:d3:8b:ea:
fc:30:0e:78:55:db:69:a3:1d:a8:08:ed:fd:f2:fb:
4d:48:e8:91:5e:71:73:f0:32:ee:62:8b:1e:cd:83:
54:a9:19:88:cf:2e:4d:4d:33:a8:ab:45:95:15:a6:
fc:78:b9:e3:a8:e4:d0:ae:0e:28:79:e4:bb:3b:6b:
35:b2:e4:1a:2b:21:fa:ab:91:29:cd:81:ee:6b:4c:
f9:ff:3f:34:c9:6f:b4:dd:2a:e6:02:28:d5:5b:ab:
14:f0:18:eb:dd:78:d8:29:27:51:c5:3e:5f:4e:dc:
db:3d:e9:22:17:1c:cd:9b:c7:bc:47:a5:26:fa:6c:
3c:55:cb:07:02:a1:51:e3:ce:3e:84:ce:9a:76:25:
00:bb:6b:33:51:eb:f4:40:9d:01:98:1b:b1:f5:d2:
0b:7a:cc:12:67:e4:4d:0a:0b:e8:6f:38:ca:72:05:
f9:70:79:7b:e9:01:e1:81:f1:27:00:1c:89:40:93:
55:05:82:fc:22:51:16:b5:7a:59:ba:f0:bd:bc:ab:
79:5a:6d:c0:30:bf:50:bc:4e:a0:15:f1:02:d4:e3:
5b:a3:eb:9d:41:4a:7c:f6:90:af:85:79:77:15:ac:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:83:8C:25:ED:06:DC:8A:3B:C0:33:32:D8:A3:03:7A:94:9D:B2:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C69A1BC2578F11F1A3FF07DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
64:da:dc:d5:9f:af:86:e2:64:06:49:21:71:6c:b6:2e:16:e6:
0f:f8:52:73:f2:38:f2:0e:41:70:3d:72:2b:18:f5:c6:1d:24:
95:b7:5c:b0:f9:4e:fb:ef:01:a3:32:aa:38:02:7d:de:0e:e6:
bd:74:3e:3a:9f:c9:a1:ab:e3:70:36:4d:25:c8:72:6e:d8:77:
bc:dc:a6:b2:03:cb:db:f0:61:1a:f1:6f:57:db:03:fc:02:3b:
38:b9:11:84:70:29:1d:80:12:39:02:db:ec:21:2b:47:df:ad:
cb:96:ed:d0:9a:2f:b2:b3:16:86:6d:70:30:26:5c:ec:09:31:
16:e2:d2:13:d6:f3:35:dc:76:b6:c8:9f:7c:f1:74:37:09:0c:
66:21:c3:ee:11:32:cd:e1:d1:b7:6b:e8:b1:93:a2:3f:0c:0f:
66:50:a6:26:b7:7e:d0:20:a8:a2:8c:0d:8c:b4:6f:c4:11:47:
f6:4e:8f:01:08:0c:3b:f6:e1:05:a3:30:66:5d:57:30:89:4f:
5e:1d:d0:2a:ef:b2:d7:e5:81:f8:60:fa:80:b8:0d:0c:25:11:
c6:0f:82:62:6e:ba:98:05:36:36:a5:ab:32:77:7b:7e:57:94:
89:e5:fe:99:77:a4:b8:d5:07:7e:00:ca:9b:9e:b8:44:8c:42:
11:cd:84:60
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbkkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI0MTY0NDAwWhcNMjYwNzAxMTY0NDAwWjAYMRYw
FAYDVQQDEw02YTEzMmFkNS02ZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1unXaePybrp1UgetGhWfcxBNZbM8o7BLjI3Ti+r8MA54Vdtpox2oCO39
8vtNSOiRXnFz8DLuYosezYNUqRmIzy5NTTOoq0WVFab8eLnjqOTQrg4oeeS7O2s1
suQaKyH6q5EpzYHua0z5/z80yW+03SrmAijVW6sU8Bjr3XjYKSdRxT5fTtzbPeki
FxzNm8e8R6Um+mw8VcsHAqFR484+hM6adiUAu2szUev0QJ0BmBux9dILeswSZ+RN
CgvobzjKcgX5cHl76QHhgfEnAByJQJNVBYL8IlEWtXpZuvC9vKt5Wm3AML9QvE6g
FfEC1ONbo+udQUp89pCvhXl3Faw3ywIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOCD
jCXtBtyKO8AzMtijA3qUnbIMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjlBMUJDMjU3OEYxMUYxQTNGRjA3REZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQGnONAMAwDBAWc/iADBAWc/kAw
DQYJKoZIhvcNAQELBQADggEBAGTa3NWfr4biZAZJIXFsti4W5g/4UnPyOPIOQXA9
cisY9cYdJJW3XLD5TvvvAaMyqjgCfd4O5r10PjqfyaGr43A2TSXIcm7Yd7zcprID
y9vwYRrxb1fbA/wCOzi5EYRwKR2AEjkC2+whK0ffrcuW7dCaL7KzFoZtcDAmXOwJ
MRbi0hPW8zXcdrbIn3zxdDcJDGYhw+4RMs3h0bdr6LGToj8MD2ZQpia3ftAgqKKM
DYy0b8QRR/ZOjwEIDDv24QWjMGZdVzCJT14d0Crvstflgfhg+oC4DQwlEcYPgmJu
upgFNjalqzJ3e35XlInl/pl3pLjVB34AypueuESMQhHNhGA=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:14 2026 by rpki-client