Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D82204EA510411F185669309CF1D38B0.roa
File: D82204EA510411F185669309CF1D38B0.roa (raw, json)
Hash identifier: EXxTfKNmreMc/qZqx8npyQBv0hEj6I7XLV4yTUYQMzs=
Subject key identifier: CD:CC:6F:00:22:D3:D4:7D:F9:E6:A2:68:BB:28:45:C5:5D:1E:A0:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B50D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D82204EA510411F185669309CF1D38B0.roa
Signing time: Sat 16 May 2026 08:54:28 +0000
ROA not before: Sat 16 May 2026 08:54:23 +0000
ROA not after: Tue 23 Jun 2026 08:54:23 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 23 May 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111885 (0x1b50d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 08:54:23 2026 GMT
Not After : Jun 23 08:54:23 2026 GMT
Subject: CN=6a0830c4-ebe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:89:82:52:a0:04:42:d0:53:7e:ef:1d:cd:
f9:85:e0:37:3e:cb:55:59:b1:e3:df:24:54:11:2b:
88:e0:dd:d6:1a:6d:32:65:b4:fd:89:93:ee:85:0d:
25:16:f0:fa:68:22:8f:46:e5:38:b7:6a:2a:b2:32:
6a:4d:99:a9:8b:c7:4d:96:3e:c2:13:7d:54:3e:d0:
bc:2b:81:a4:41:27:ae:8b:f7:7d:95:4a:ec:8a:fa:
52:0f:5e:59:a2:c7:77:6c:2f:78:5e:01:81:26:04:
fe:49:4a:2c:c6:50:54:10:e4:d6:2c:60:56:90:ac:
a0:27:6c:c8:a9:64:c0:c1:0a:a9:d7:ae:3f:ec:92:
f2:67:a8:d6:de:43:a2:f0:3d:33:e6:1f:1b:ec:d4:
52:cd:2f:2a:51:61:20:68:b7:9c:01:dc:1d:a3:08:
af:f3:8c:e7:44:8e:88:31:65:1e:ff:e0:b5:81:cb:
9c:3a:c1:fc:36:2c:b9:b6:b6:2c:a4:ee:7a:02:a1:
fd:2e:db:e7:07:98:c0:a6:bd:e7:21:41:11:5b:9d:
67:c2:f1:6c:01:dc:5a:7a:33:e4:4b:23:e7:42:94:
70:f0:b3:26:f7:ae:fb:72:58:a6:74:30:79:4b:5e:
c5:8c:2a:f0:05:ca:59:44:64:99:50:2d:b8:75:c6:
44:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CC:6F:00:22:D3:D4:7D:F9:E6:A2:68:BB:28:45:C5:5D:1E:A0:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D82204EA510411F185669309CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a3:d9:5a:6f:92:34:1c:37:c1:a7:82:b6:30:d4:68:d2:54:b8:
27:bf:a9:2f:5a:42:ec:9a:28:bb:43:1d:24:67:f8:2e:4b:38:
16:32:1d:3a:be:14:5f:45:55:98:8f:e7:62:2f:c9:7c:53:7d:
74:f3:01:4f:91:17:b9:4c:c5:2e:94:14:92:8e:3d:76:05:eb:
cf:c9:f0:99:1e:c8:de:bf:cb:5e:68:2d:0c:c0:4f:be:ab:a8:
db:dd:4a:87:7c:8b:27:1d:4d:3b:7b:80:9e:c8:95:46:29:f9:
00:8e:75:52:86:3f:38:3b:2e:7d:05:bc:c6:ae:ee:7b:07:af:
e1:e6:3b:16:99:6e:b7:7a:16:1c:48:c3:04:f4:bc:c9:99:57:
79:c5:61:a5:d3:15:83:bf:cf:16:e9:57:25:e3:12:39:b5:fa:
8e:d7:fd:b2:a7:e2:5b:0d:8c:90:68:dc:7e:9c:53:88:38:2c:
8b:6a:c9:a2:4b:58:69:a0:20:f3:fb:29:b1:21:10:a5:ff:56:
ce:f9:e5:2b:f5:ce:24:7b:5e:27:f5:8e:86:8f:83:5b:2a:34:
2b:71:31:09:b5:42:46:27:87:0d:bb:37:d7:63:54:94:68:aa:
68:44:2a:4e:05:c5:5e:eb:6a:29:8a:d4:37:70:6d:e3:aa:97:
8f:1c:21:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbUNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE2MDg1NDIzWhcNMjYwNjIzMDg1NDIzWjAYMRYw
FAYDVQQDEw02YTA4MzBjNC1lYmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApE+JglKgBELQU37vHc35heA3PstVWbHj3yRUESuI4N3WGm0yZbT9iZPu
hQ0lFvD6aCKPRuU4t2oqsjJqTZmpi8dNlj7CE31UPtC8K4GkQSeui/d9lUrsivpS
D15Zosd3bC94XgGBJgT+SUosxlBUEOTWLGBWkKygJ2zIqWTAwQqp164/7JLyZ6jW
3kOi8D0z5h8b7NRSzS8qUWEgaLecAdwdowiv84znRI6IMWUe/+C1gcucOsH8Niy5
trYspO56AqH9LtvnB5jApr3nIUERW51nwvFsAdxaejPkSyPnQpRw8LMm9677clim
dDB5S17FjCrwBcpZRGSZUC24dcZEYwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM3M
bwAi09R9+eaiaLsoRcVdHqC+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EODIyMDRFQTUxMDQxMUYxODU2NjkzMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQCj2VpvkjQcN8GngrYw1GjSVLgnv6kvWkLsmii7Qx0kZ/guSzgWMh06vhRf
RVWYj+diL8l8U3108wFPkRe5TMUulBSSjj12BevPyfCZHsjev8teaC0MwE++q6jb
3UqHfIsnHU07e4CeyJVGKfkAjnVShj84Oy59BbzGru57B6/h5jsWmW63ehYcSMME
9LzJmVd5xWGl0xWDv88W6Vcl4xI5tfqO1/2yp+JbDYyQaNx+nFOIOCyLasmiS1hp
oCDz+ymxIRCl/1bO+eUr9c4ke14n9Y6Gj4NbKjQrcTEJtUJGJ4cNuzfXY1SUaKpo
RCpOBcVe62opitQ3cG3jqpePHCFr
-----END CERTIFICATE-----
Generated at Thu May 21 15:00:05 2026 by rpki-client