Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD74B5A45A6B11F1928816CBCE1D38B0.roa
File: CD74B5A45A6B11F1928816CBCE1D38B0.roa (raw, json)
Hash identifier: cE5NAclyX1zkw7IHiBIUZvuBqANOgQ9X7jw72+VfrWw=
Subject key identifier: 21:8E:14:2C:8E:DE:B0:94:16:9A:12:93:0B:6C:E5:5E:65:17:02:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA69
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD74B5A45A6B11F1928816CBCE1D38B0.roa
Signing time: Thu 28 May 2026 08:04:08 +0000
ROA not before: Thu 28 May 2026 08:04:04 +0000
ROA not after: Sun 05 Jul 2026 08:04:04 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113257 (0x1ba69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 08:04:04 2026 GMT
Not After : Jul 5 08:04:04 2026 GMT
Subject: CN=6a17f6f8-537a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:8e:2c:ed:e7:92:90:af:b9:0f:1f:c0:2a:
e6:72:8f:47:8a:6a:ea:8c:67:5b:49:cf:90:55:48:
eb:d3:bd:e1:3c:60:e1:b7:0e:8c:2f:92:e5:af:ea:
40:2f:e8:d9:11:ea:7a:1f:39:fd:16:2f:82:d5:3c:
1b:6b:9e:8a:3a:26:c2:96:54:44:76:e0:50:43:61:
d8:e3:45:99:53:3d:32:27:05:f5:19:1f:cc:fe:10:
33:58:92:cd:4b:d5:0d:e8:5e:1b:6c:97:c1:54:c3:
19:27:dd:1f:9c:4a:3b:35:25:98:29:9f:89:1f:21:
f7:13:91:04:7a:39:8d:34:c8:33:6e:2f:58:c9:08:
e7:d1:23:79:42:cd:72:62:74:2c:de:e2:00:01:19:
1c:54:99:e5:46:2f:43:e4:c9:f7:98:53:41:a2:8a:
17:58:00:97:04:67:25:bd:32:a8:df:74:ba:dc:dd:
1b:fd:6a:77:65:31:2e:0c:40:f3:5c:67:91:0a:9a:
6d:fc:c3:27:f7:01:15:3b:fa:a6:c8:4f:7e:df:f9:
a7:c8:bf:5d:37:72:4b:e4:ad:66:37:a7:b7:ca:7a:
e3:44:a2:d6:98:e4:a9:80:cf:7a:d1:31:3b:5b:6a:
a8:43:15:c0:5f:bb:28:20:cb:8e:f2:4a:6a:b4:21:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8E:14:2C:8E:DE:B0:94:16:9A:12:93:0B:6C:E5:5E:65:17:02:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD74B5A45A6B11F1928816CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
31:10:d4:02:8d:ef:c3:ce:56:ac:5b:fb:cf:18:de:05:c9:51:
bb:57:9c:f3:16:b0:1c:ba:e9:99:08:4f:98:48:4b:70:d5:b8:
74:e2:77:fc:20:27:cb:53:13:25:e7:1f:cb:91:4b:d6:63:60:
b8:78:7f:12:e9:3e:19:08:c3:f9:1a:c3:8e:c7:a2:ce:ae:73:
f6:fd:58:9f:b3:b3:a7:ee:de:62:7f:78:f5:df:53:48:d8:fe:
ae:2e:a1:17:3c:89:a7:3a:a9:60:23:12:b0:de:67:17:f0:00:
f8:bf:8d:02:92:6b:13:0c:2a:46:c6:e0:62:4c:26:0b:28:ca:
4f:1f:bc:a0:ee:aa:41:f7:e9:19:7e:ad:a4:26:81:c1:6b:c5:
aa:76:80:2a:58:5c:a7:9f:1d:d5:05:28:7c:3e:63:43:20:f0:
ae:d6:af:b4:d1:76:b4:bb:9b:39:ad:90:1f:9d:df:51:f6:d4:
a1:20:5e:8f:66:42:02:61:81:b3:ff:df:89:b5:9f:a0:1d:fc:
54:00:29:25:5b:7b:00:ee:1e:1a:7a:a9:2e:60:09:a7:cf:67:
6d:b8:6c:1d:6d:67:7b:a9:f4:95:56:18:97:22:41:57:d1:10:
27:4a:54:b7:3a:5d:66:11:13:40:be:cf:35:43:e2:9e:b9:84:
1a:13:0e:75
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbppMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDgwNDA0WhcNMjYwNzA1MDgwNDA0WjAYMRYw
FAYDVQQDEw02YTE3ZjZmOC01MzdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx8OOLO3nkpCvuQ8fwCrmco9HimrqjGdbSc+QVUjr073hPGDhtw6ML5Ll
r+pAL+jZEep6Hzn9Fi+C1Twba56KOibCllREduBQQ2HY40WZUz0yJwX1GR/M/hAz
WJLNS9UN6F4bbJfBVMMZJ90fnEo7NSWYKZ+JHyH3E5EEejmNNMgzbi9YyQjn0SN5
Qs1yYnQs3uIAARkcVJnlRi9D5Mn3mFNBoooXWACXBGclvTKo33S63N0b/Wp3ZTEu
DEDzXGeRCppt/MMn9wEVO/qmyE9+3/mnyL9dN3JL5K1mN6e3ynrjRKLWmOSpgM96
0TE7W2qoQxXAX7soIMuO8kpqtCHXewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCGO
FCyO3rCUFpoSkwts5V5lFwKRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDc0QjVBNDVBNkIxMUYxOTI4ODE2Q0JDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoAMA0GCSqGSIb3DQEBCwUA
A4IBAQAxENQCje/DzlasW/vPGN4FyVG7V5zzFrAcuumZCE+YSEtw1bh04nf8ICfL
UxMl5x/LkUvWY2C4eH8S6T4ZCMP5GsOOx6LOrnP2/Vifs7On7t5if3j131NI2P6u
LqEXPImnOqlgIxKw3mcX8AD4v40CkmsTDCpGxuBiTCYLKMpPH7yg7qpB9+kZfq2k
JoHBa8WqdoAqWFynnx3VBSh8PmNDIPCu1q+00Xa0u5s5rZAfnd9R9tShIF6PZkIC
YYGz/9+JtZ+gHfxUACklW3sA7h4aeqkuYAmnz2dtuGwdbWd7qfSVVhiXIkFX0RAn
SlS3Ol1mERNAvs81Q+KeuYQaEw51
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:40 2026 by rpki-client