Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD27A5A73E811F1916675EFCE1D38B0.roa
File: DBD27A5A73E811F1916675EFCE1D38B0.roa (raw, json)
Hash identifier: lEIggq0W66o3TZtbGYEzod19IHbPCLYxe9kTcgecGG8=
Subject key identifier: A1:9B:FD:52:30:FF:67:B2:9D:80:2C:15:5E:75:49:EC:7D:A0:11:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C19C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD27A5A73E811F1916675EFCE1D38B0.roa
Signing time: Mon 29 Jun 2026 18:32:19 +0000
ROA not before: Mon 29 Jun 2026 18:32:13 +0000
ROA not after: Mon 31 Aug 2026 18:32:13 +0000
asID: 399077
IP address blocks: 156.251.7.0/24 maxlen: 24
156.251.8.0/24 maxlen: 24
156.251.9.0/24 maxlen: 24
156.251.10.0/24 maxlen: 24
156.251.11.0/24 maxlen: 24
156.251.12.0/24 maxlen: 24
156.251.13.0/24 maxlen: 24
156.251.14.0/24 maxlen: 24
156.251.15.0/24 maxlen: 24
156.251.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115100 (0x1c19c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 18:32:13 2026 GMT
Not After : Aug 31 18:32:13 2026 GMT
Subject: CN=6a42ba32-07f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:3d:69:6e:b7:14:ac:ac:56:b0:02:83:51:
04:0a:85:fb:73:5b:d8:6d:4c:5f:55:07:de:e8:e1:
b6:a6:9e:d3:2f:ed:23:00:a7:b9:c1:f0:1a:52:bf:
af:e8:84:70:79:f9:af:40:b4:f9:a7:93:b3:90:26:
8b:b5:09:8d:a1:a4:c6:99:44:60:66:6a:85:44:d1:
62:11:f9:7c:1a:a9:d7:4f:f5:4f:83:e4:ed:3e:85:
b7:1b:81:7c:cf:f6:f4:34:c7:f8:2e:68:12:8d:62:
c9:1b:e4:a4:59:4e:63:52:0d:2e:f8:59:1c:bb:48:
ac:68:30:42:c2:20:e9:4e:51:cc:97:e5:f6:3a:2c:
37:51:de:0b:a3:92:65:76:4b:ed:d8:bc:ca:c0:96:
46:c7:e7:36:be:29:d4:6f:2d:28:ec:b6:23:a0:a6:
eb:ac:ba:8e:4d:0c:62:d0:99:b7:5a:48:30:f4:18:
3f:33:0d:f1:87:1b:82:08:cd:e3:d0:16:bd:74:a5:
a0:6a:58:d9:2e:0f:74:a6:bb:dc:bf:74:2d:25:da:
bd:5d:c8:c1:8a:74:52:65:64:9c:e2:ac:9c:eb:a1:
b9:0e:b8:a9:9d:1b:fb:69:52:94:4a:55:a5:00:24:
17:14:58:86:e2:0f:ba:59:0f:ab:f5:04:6c:b0:ed:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:FD:52:30:FF:67:B2:9D:80:2C:15:5E:75:49:EC:7D:A0:11:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD27A5A73E811F1916675EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.251.7.0-156.251.16.255
Signature Algorithm: sha256WithRSAEncryption
b4:28:fb:61:ee:b1:38:92:b7:e5:e6:ca:45:3d:42:1e:9a:a9:
8f:46:5c:3d:49:60:cb:8a:46:cc:e2:e7:84:d1:2a:8e:07:de:
55:a7:d7:3e:1f:b2:84:54:58:92:55:6a:5d:24:5b:56:74:c2:
45:37:e2:5a:fb:56:ee:fe:2f:07:9b:d0:6a:0a:12:5f:6e:d4:
d7:c9:d3:4d:0f:6a:9a:42:dc:c9:b4:9b:b2:4f:11:1e:b4:07:
fc:f7:ae:ee:d3:df:d8:94:56:28:81:13:f5:f8:d9:67:01:19:
c2:43:82:10:02:da:cc:05:fb:70:34:36:a1:67:cd:72:b3:2b:
4e:75:5c:2c:4a:36:f0:e2:24:ff:ce:49:9d:0b:ad:0e:2d:50:
a6:86:9b:66:23:d1:9d:7e:ed:60:54:f8:70:02:08:df:75:71:
b7:96:59:33:94:d0:88:35:4d:98:6e:d9:54:cf:16:da:b0:1b:
e5:c9:a9:85:a8:ae:8c:8a:e7:cf:20:8a:ba:34:f1:29:d8:57:
b5:21:e6:11:db:75:f0:c1:1c:dd:9d:dc:93:74:e4:6b:0b:09:
b3:a4:f5:bf:7b:5a:75:4c:cf:2d:25:62:48:73:fd:41:c2:81:
2a:08:ff:9c:1a:bc:30:6a:f4:e6:46:bf:b0:15:73:26:68:5a:
8b:0c:1e:cf
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcGcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI5MTgzMjEzWhcNMjYwODMxMTgzMjEzWjAYMRYw
FAYDVQQDEw02YTQyYmEzMi0wN2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwVE9aW63FKysVrACg1EECoX7c1vYbUxfVQfe6OG2pp7TL+0jAKe5wfAa
Ur+v6IRwefmvQLT5p5OzkCaLtQmNoaTGmURgZmqFRNFiEfl8GqnXT/VPg+TtPoW3
G4F8z/b0NMf4LmgSjWLJG+SkWU5jUg0u+Fkcu0isaDBCwiDpTlHMl+X2Oiw3Ud4L
o5Jldkvt2LzKwJZGx+c2vinUby0o7LYjoKbrrLqOTQxi0Jm3Wkgw9Bg/Mw3xhxuC
CM3j0Ba9dKWgaljZLg90prvcv3QtJdq9XcjBinRSZWSc4qyc66G5DripnRv7aVKU
SlWlACQXFFiG4g+6WQ+r9QRssO0BNwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKGb
/VIw/2eynYAsFV51Sex9oBHPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQkQyN0E1QTczRTgxMUYxOTE2Njc1RUZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc+wcDBACc+xAwDQYJKoZI
hvcNAQELBQADggEBALQo+2HusTiSt+XmykU9Qh6aqY9GXD1JYMuKRszi54TRKo4H
3lWn1z4fsoRUWJJVal0kW1Z0wkU34lr7Vu7+Lweb0GoKEl9u1NfJ000PappC3Mm0
m7JPER60B/z3ru7T39iUViiBE/X42WcBGcJDghAC2swF+3A0NqFnzXKzK051XCxK
NvDiJP/OSZ0LrQ4tUKaGm2Yj0Z1+7WBU+HACCN91cbeWWTOU0Ig1TZhu2VTPFtqw
G+XJqYWoroyK588giro08SnYV7Uh5hHbdfDBHN2d3JN05GsLCbOk9b97WnVMzy0l
Ykhz/UHCgSoI/5wavDBq9OZGv7AVcyZoWosMHs8=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:57 2026 by rpki-client