Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6DDE9A0756211F1AA1F84EBCE1D38B0.roa
File: D6DDE9A0756211F1AA1F84EBCE1D38B0.roa (raw, json)
Hash identifier: 1OCQTVYzZbaLAfA6wxXFVmLJBNPqcwFnhahvUDpboHw=
Subject key identifier: 50:DB:E3:7E:79:F4:7C:DC:34:66:2C:A8:8B:34:DB:25:7E:9F:A5:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C20C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6DDE9A0756211F1AA1F84EBCE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:38:00 +0000
ROA not before: Wed 01 Jul 2026 15:37:55 +0000
ROA not after: Sun 09 Aug 2026 15:37:55 +0000
asID: 44559
IP address blocks: 156.246.21.0/24 maxlen: 24
156.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115212 (0x1c20c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 15:37:55 2026 GMT
Not After : Aug 9 15:37:55 2026 GMT
Subject: CN=6a453458-22db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:46:f8:ab:98:71:9d:cf:85:0f:26:b3:ce:
ad:bd:ae:0e:6c:87:5f:ef:95:bb:1f:2b:39:d4:81:
06:a5:f0:8a:7d:52:32:83:2d:18:27:3e:7e:71:49:
30:63:0f:30:49:82:10:f0:88:66:ed:da:61:92:f9:
d3:cb:23:13:0e:fd:23:98:03:5f:e6:1f:34:9a:e7:
c5:fc:f5:fd:37:e9:b7:0b:70:be:4a:6c:b4:33:93:
12:5d:96:f1:0b:52:6c:1c:39:0b:1a:9f:9e:74:96:
1f:2f:bc:a0:fa:bc:5c:a2:be:64:21:fb:2d:42:98:
d4:7d:ca:f6:c2:e3:bc:0b:6f:28:ab:2a:7c:8d:2a:
af:8f:32:46:83:fb:9e:08:0b:d6:a5:01:f1:89:9f:
8c:6a:cc:b6:29:f5:93:1b:6b:f3:7c:f6:91:be:f0:
d1:05:59:b2:eb:13:71:23:32:a9:1c:e0:b6:76:c0:
e5:fa:d2:5a:7a:5b:a3:f0:98:79:d2:2a:e2:71:d9:
16:46:ff:d9:b9:25:7b:24:b2:62:07:8c:62:d0:62:
70:e8:cc:eb:46:fe:e2:eb:36:20:43:84:10:5b:a3:
01:6a:59:a0:b2:ef:01:ac:80:fa:60:ad:3a:0d:a2:
05:2f:a6:71:0f:66:69:e8:24:11:f0:6f:90:56:76:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DB:E3:7E:79:F4:7C:DC:34:66:2C:A8:8B:34:DB:25:7E:9F:A5:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6DDE9A0756211F1AA1F84EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.21.0/24
156.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:e2:4f:07:58:a8:40:08:24:03:ad:7c:60:ed:4b:ec:ab:79:
1f:44:77:af:0c:2e:12:44:b1:98:4b:5a:19:f2:cf:21:7d:f9:
d9:8e:87:90:f3:1f:41:93:91:19:2f:2d:9d:8c:0a:bc:ae:18:
02:97:30:9c:3f:4c:61:15:73:93:7a:39:c0:25:b9:b3:d3:9c:
c7:f1:6c:e5:2e:46:39:db:00:82:79:00:78:26:e8:a5:de:1d:
2e:1c:5d:64:95:f3:d9:08:c8:a3:91:0a:75:42:45:c1:c9:a4:
db:cc:18:1d:8d:36:bc:15:da:3e:51:e1:8a:3f:a7:1a:8c:0b:
69:1e:74:dd:a4:e1:df:7b:51:e5:bb:cb:34:0b:e1:9f:e9:39:
60:7a:19:05:c0:0f:53:b4:b9:0a:d5:ff:cd:92:c0:d3:33:63:
2d:62:e9:b8:ff:ee:bf:7c:b5:70:c6:9e:ea:39:c6:89:d4:75:
9c:e0:9e:1a:26:40:f0:2b:e9:4b:44:40:fa:ec:0b:e8:d9:e2:
ee:fa:52:79:69:4d:fe:68:e6:bb:af:e9:d5:c7:0f:f0:67:73:
d3:96:d8:e6:8f:4f:81:13:37:33:9f:87:2b:d3:3a:0a:4d:6c:
5f:fc:1d:17:fc:a5:3c:84:0e:e0:39:82:7f:42:2b:57:8a:17:
d5:2e:c6:6e
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcIMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAxMTUzNzU1WhcNMjYwODA5MTUzNzU1WjAYMRYw
FAYDVQQDEw02YTQ1MzQ1OC0yMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwDtG+KuYcZ3PhQ8ms86tva4ObIdf75W7Hys51IEGpfCKfVIygy0YJz5+
cUkwYw8wSYIQ8Ihm7dphkvnTyyMTDv0jmANf5h80mufF/PX9N+m3C3C+Smy0M5MS
XZbxC1JsHDkLGp+edJYfL7yg+rxcor5kIfstQpjUfcr2wuO8C28oqyp8jSqvjzJG
g/ueCAvWpQHxiZ+Masy2KfWTG2vzfPaRvvDRBVmy6xNxIzKpHOC2dsDl+tJaeluj
8Jh50iricdkWRv/ZuSV7JLJiB4xi0GJw6MzrRv7i6zYgQ4QQW6MBalmgsu8BrID6
YK06DaIFL6ZxD2Zp6CQR8G+QVnYI+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDb
43559HzcNGYsqIs02yV+n6WIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENkRERTlBMDc1NjIxMUYxQUExRjg0RUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnPYVAwQAnPYfMA0GCSqGSIb3
DQEBCwUAA4IBAQAf4k8HWKhACCQDrXxg7Uvsq3kfRHevDC4SRLGYS1oZ8s8hffnZ
joeQ8x9Bk5EZLy2djAq8rhgClzCcP0xhFXOTejnAJbmz05zH8WzlLkY52wCCeQB4
Juil3h0uHF1klfPZCMijkQp1QkXByaTbzBgdjTa8Fdo+UeGKP6cajAtpHnTdpOHf
e1Hlu8s0C+Gf6TlgehkFwA9TtLkK1f/NksDTM2MtYum4/+6/fLVwxp7qOcaJ1HWc
4J4aJkDwK+lLRED67Avo2eLu+lJ5aU3+aOa7r+nVxw/wZ3PTltjmj0+BEzczn4cr
0zoKTWxf/B0X/KU8hA7gOYJ/QitXihfVLsZu
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client