Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DA95265CC911F1A8FB93ACCE1D38B0.roa
File: D7DA95265CC911F1A8FB93ACCE1D38B0.roa (raw, json)
Hash identifier: NWb+/hyYcjOYfKthV8dXV16DACG+gy8nYfOPAjSQiLs=
Subject key identifier: EB:9F:F2:3E:F1:AC:43:A3:C1:DE:A0:21:1D:2F:05:F2:40:F8:49:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DA95265CC911F1A8FB93ACCE1D38B0.roa
Signing time: Sun 31 May 2026 08:22:21 +0000
ROA not before: Sun 31 May 2026 08:22:15 +0000
ROA not after: Tue 08 Jun 2027 08:22:15 +0000
asID: 133115
IP address blocks: 156.245.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113404 (0x1bafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 08:22:15 2026 GMT
Not After : Jun 8 08:22:15 2027 GMT
Subject: CN=6a1befbd-1b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:da:55:b3:4f:d0:1d:59:4b:4f:4f:45:95:
13:95:03:b6:1b:ef:5c:56:9d:51:16:55:2c:ae:eb:
3b:e6:49:5b:5f:57:da:17:d9:23:f4:79:e2:57:67:
fa:e4:cd:eb:c2:b2:5f:ce:99:82:a5:9a:d9:2a:6f:
c8:39:7a:b6:1a:cd:a2:fb:d0:83:89:c3:13:ae:39:
3b:e6:cb:e5:aa:28:83:02:c8:a3:27:f9:f1:ec:59:
6c:c6:72:d3:db:f8:02:82:a4:5a:a9:c9:4c:b1:dc:
84:d3:87:7f:1d:0a:d5:8d:8f:7f:95:4e:50:9e:c1:
dc:a5:ed:67:4a:d8:0e:9b:50:12:de:c6:31:00:ea:
64:da:ce:76:9b:bb:4a:4b:3e:13:76:c0:00:8c:b2:
f0:c4:d4:36:59:64:ab:6e:f0:c2:06:7b:a5:fc:00:
5b:23:90:5c:11:2c:3c:a2:8b:a2:73:98:e7:eb:cf:
a1:cc:0b:4e:db:68:ba:8d:3a:81:6f:ba:0b:03:75:
20:e0:1d:85:1a:94:e2:ec:04:05:cf:21:2f:6f:3a:
7b:ab:9c:75:7d:1c:8b:63:fc:d0:a4:1b:f0:4b:b4:
ef:c7:ec:2a:22:f9:1d:00:05:1f:10:96:9f:ee:fd:
8a:00:b7:1a:27:2f:34:14:04:4a:1c:6e:a0:ef:24:
0c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9F:F2:3E:F1:AC:43:A3:C1:DE:A0:21:1D:2F:05:F2:40:F8:49:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7DA95265CC911F1A8FB93ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c0:c8:59:64:c3:c1:ca:eb:8c:e1:0e:15:12:6b:b1:96:a3:
9b:4c:9c:d0:b2:01:83:7a:6c:e8:b2:14:32:a2:04:d1:dc:51:
35:fd:7e:a5:27:da:31:e3:b1:84:e3:6a:1a:4c:3c:38:d9:dd:
81:51:b4:05:8e:68:57:7f:ce:dd:ee:ef:4b:ea:a6:6f:06:bf:
f7:07:fb:70:01:c6:a2:07:0a:1a:13:5c:d7:db:a9:e0:8e:ea:
de:0f:5f:f2:d4:25:00:d0:6c:60:a3:ac:1b:a8:44:47:c6:f4:
20:7e:a4:32:40:c4:6f:21:5e:91:3a:d2:6d:41:fe:75:ec:6a:
c9:e8:16:a9:09:82:31:27:9e:c8:f3:40:16:16:5f:8b:87:33:
f5:17:58:31:89:0d:52:d1:02:1c:8d:10:78:b1:bf:28:43:e0:
aa:be:8b:80:2d:4d:00:d3:99:50:0b:c0:73:cf:db:a9:be:8d:
51:03:97:a8:89:49:b6:0f:19:5b:b1:29:f9:42:62:0a:f7:3c:
2e:82:15:6a:ab:64:58:0f:9a:93:ff:57:f8:7f:de:df:8f:f3:
3b:2a:c1:af:82:f6:ed:cd:6e:be:e3:3b:89:c0:6e:72:37:10:
d9:63:44:2a:7b:38:fd:73:c4:97:2c:d8:cd:94:03:16:d6:4d:
1e:40:53:e5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbr8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTMxMDgyMjE1WhcNMjcwNjA4MDgyMjE1WjAYMRYw
FAYDVQQDEw02YTFiZWZiZC0xYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzsXaVbNP0B1ZS09PRZUTlQO2G+9cVp1RFlUsrus75klbX1faF9kj9Hni
V2f65M3rwrJfzpmCpZrZKm/IOXq2Gs2i+9CDicMTrjk75svlqiiDAsijJ/nx7Fls
xnLT2/gCgqRaqclMsdyE04d/HQrVjY9/lU5QnsHcpe1nStgOm1AS3sYxAOpk2s52
m7tKSz4TdsAAjLLwxNQ2WWSrbvDCBnul/ABbI5BcESw8oouic5jn68+hzAtO22i6
jTqBb7oLA3Ug4B2FGpTi7AQFzyEvbzp7q5x1fRyLY/zQpBvwS7Tvx+wqIvkdAAUf
EJaf7v2KALcaJy80FARKHG6g7yQM0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOuf
8j7xrEOjwd6gIR0vBfJA+Em/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EN0RBOTUyNjVDQzkxMUYxQThGQjkzQUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPUHMA0GCSqGSIb3DQEBCwUA
A4IBAQCDwMhZZMPByuuM4Q4VEmuxlqObTJzQsgGDemzoshQyogTR3FE1/X6lJ9ox
47GE42oaTDw42d2BUbQFjmhXf87d7u9L6qZvBr/3B/twAcaiBwoaE1zX26ngjure
D1/y1CUA0Gxgo6wbqERHxvQgfqQyQMRvIV6ROtJtQf517GrJ6BapCYIxJ57I80AW
Fl+LhzP1F1gxiQ1S0QIcjRB4sb8oQ+CqvouALU0A05lQC8Bzz9upvo1RA5eoiUm2
DxlbsSn5QmIK9zwughVqq2RYD5qT/1f4f97fj/M7KsGvgvbtzW6+4zuJwG5yNxDZ
Y0Qqezj9c8SXLNjNlAMW1k0eQFPl
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:53 2026 by rpki-client