Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC99FA457F611F19EC301DBCE1D38B0.roa
File: CEC99FA457F611F19EC301DBCE1D38B0.roa (raw, json)
Hash identifier: gRNf+djQIp/Ix0sb7i7UNXl0nqdVvm/4bGOCKRDjnBg=
Subject key identifier: E9:19:3D:B5:2E:97:56:14:56:E1:31:35:2C:8B:31:03:84:49:61:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B955
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC99FA457F611F19EC301DBCE1D38B0.roa
Signing time: Mon 25 May 2026 05:01:37 +0000
ROA not before: Mon 25 May 2026 05:01:32 +0000
ROA not after: Fri 26 Feb 2027 05:01:32 +0000
asID: 41095
IP address blocks: 156.231.56.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112981 (0x1b955)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 05:01:32 2026 GMT
Not After : Feb 26 05:01:32 2027 GMT
Subject: CN=6a13d7b1-4180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fe:ab:cd:df:15:16:f6:c0:19:2c:d0:ce:51:
06:85:0a:57:48:f8:a4:fc:21:b1:23:45:29:03:58:
f1:f2:b6:1d:64:2a:6e:6f:04:4a:17:df:49:d9:99:
bd:f4:f5:02:f2:17:9d:75:20:c6:85:39:56:fa:a5:
64:07:f3:2b:e8:3f:16:6d:93:d5:70:e1:ed:ed:ad:
b1:1b:e8:59:ed:1f:73:7e:fd:c0:d6:32:f6:96:e9:
ec:0f:16:4c:14:bd:ae:a2:74:27:15:ad:c0:37:e6:
40:2d:94:51:68:2f:20:01:6b:43:12:1b:2b:0d:69:
91:5f:fa:27:46:a4:13:c6:16:01:46:63:4d:e3:e3:
27:f4:78:ca:d9:28:e5:6f:b5:f0:25:53:e4:bb:34:
11:38:22:8e:cb:a6:f2:79:54:d2:b3:9d:68:b3:7e:
6b:44:ea:55:a0:c9:56:94:f7:f0:fe:b1:e2:72:f8:
4b:30:85:42:d5:03:48:7f:66:8a:92:75:00:e4:f7:
a1:5b:5d:41:9e:0f:9b:77:06:ef:21:60:58:37:95:
46:4e:6d:dc:e2:9e:8a:07:1a:eb:bc:80:a5:d7:02:
b8:83:7a:e2:4f:be:a1:10:0f:1a:be:c6:8e:24:6f:
4e:06:6e:37:94:92:b3:e6:77:2e:82:9a:db:f7:7a:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:19:3D:B5:2E:97:56:14:56:E1:31:35:2C:8B:31:03:84:49:61:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEC99FA457F611F19EC301DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.56.0/23
Signature Algorithm: sha256WithRSAEncryption
86:bc:52:13:24:51:3f:3c:e5:a9:b7:c9:82:0e:09:37:c3:1e:
78:cf:44:44:00:5b:87:96:de:a3:b8:7e:bf:a2:ff:58:1e:0f:
c3:75:14:77:75:7f:38:fa:79:41:2f:f8:df:e5:2c:2d:b4:be:
c7:9d:35:18:f9:b7:95:05:62:ed:f9:77:58:c9:18:5f:48:5a:
01:87:6e:55:e7:49:02:75:83:d5:48:02:11:22:14:d2:eb:51:
41:f6:93:68:3d:e0:86:e6:ab:ee:8d:56:83:57:a6:2b:72:9f:
10:29:15:62:58:fb:4d:26:ef:3d:c7:ea:97:2a:a8:36:a1:14:
fa:3f:9d:ee:f3:de:1e:c4:f2:03:51:99:20:ec:64:c9:a9:47:
da:9d:e5:11:66:6e:4c:10:75:67:2c:cb:60:14:3f:33:09:e7:
82:88:1e:ac:1d:fb:0a:24:c3:d5:33:41:60:50:1b:4a:37:11:
66:3e:85:dc:48:8b:2c:aa:27:b2:ea:a2:71:86:b9:f4:4c:a9:
77:af:04:69:a0:56:e5:08:dd:6f:71:58:d7:c9:83:91:53:a4:
1f:c9:eb:aa:c6:1b:ee:fd:63:bc:57:3b:2a:7b:5d:ec:f0:96:
a4:6f:e4:83:09:e9:5d:1f:d1:ea:36:f3:c6:12:09:0e:8a:5a:
c1:d8:be:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAblVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI1MDUwMTMyWhcNMjcwMjI2MDUwMTMyWjAYMRYw
FAYDVQQDEw02YTEzZDdiMS00MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnv6rzd8VFvbAGSzQzlEGhQpXSPik/CGxI0UpA1jx8rYdZCpubwRKF99J
2Zm99PUC8heddSDGhTlW+qVkB/Mr6D8WbZPVcOHt7a2xG+hZ7R9zfv3A1jL2luns
DxZMFL2uonQnFa3AN+ZALZRRaC8gAWtDEhsrDWmRX/onRqQTxhYBRmNN4+Mn9HjK
2Sjlb7XwJVPkuzQROCKOy6byeVTSs51os35rROpVoMlWlPfw/rHicvhLMIVC1QNI
f2aKknUA5PehW11Bng+bdwbvIWBYN5VGTm3c4p6KBxrrvICl1wK4g3riT76hEA8a
vsaOJG9OBm43lJKz5ncugprb93pf9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOkZ
PbUul1YUVuExNSyLMQOESWGBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRUM5OUZBNDU3RjYxMUYxOUVDMzAxREJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOc4MA0GCSqGSIb3DQEBCwUA
A4IBAQCGvFITJFE/POWpt8mCDgk3wx54z0REAFuHlt6juH6/ov9YHg/DdRR3dX84
+nlBL/jf5SwttL7HnTUY+beVBWLt+XdYyRhfSFoBh25V50kCdYPVSAIRIhTS61FB
9pNoPeCG5qvujVaDV6Yrcp8QKRViWPtNJu89x+qXKqg2oRT6P53u894exPIDUZkg
7GTJqUfaneURZm5MEHVnLMtgFD8zCeeCiB6sHfsKJMPVM0FgUBtKNxFmPoXcSIss
qiey6qJxhrn0TKl3rwRpoFblCN1vcVjXyYORU6Qfyeuqxhvu/WO8Vzsqe13s8Jak
b+SDCeldH9HqNvPGEgkOilrB2L5P
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:52 2026 by rpki-client