Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCDB32686A3611F1B34E53C5CE1D38B0.roa
File: DCDB32686A3611F1B34E53C5CE1D38B0.roa (raw, json)
Hash identifier: xV+Vf9n6N/FyoWHV6lU5E9VW4lBUfA7M22YwatC3YUk=
Subject key identifier: DE:44:C5:C3:48:02:1F:C3:09:CE:DA:58:63:EE:EA:2A:E7:FA:1B:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCDB32686A3611F1B34E53C5CE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:25:30 +0000
ROA not before: Wed 17 Jun 2026 10:25:25 +0000
ROA not after: Wed 22 Jul 2026 10:25:25 +0000
asID: 141718
IP address blocks: 156.225.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114330 (0x1be9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 10:25:25 2026 GMT
Not After : Jul 22 10:25:25 2026 GMT
Subject: CN=6a327619-00bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:a2:2e:d9:4a:59:6c:a2:f4:ca:2e:36:c7:
8d:7b:c0:0f:c1:84:16:90:f1:ea:45:35:d3:8b:95:
a8:ab:b8:44:af:46:77:67:77:af:ac:98:7e:8d:32:
91:35:07:1d:6b:e3:ba:ad:8b:55:84:ef:49:f8:50:
ef:7c:52:3b:37:16:cf:b8:68:f8:2e:e4:54:f3:c9:
bc:1b:c0:09:80:fc:e0:71:a5:aa:44:14:5d:7a:52:
a3:34:0e:82:13:96:d5:1f:d0:eb:62:2b:97:d3:4f:
fd:78:63:11:a4:14:18:9f:ca:2a:51:ef:34:99:be:
5a:7d:01:13:e7:b6:c6:96:7c:18:bf:33:99:07:6e:
3a:f7:7a:38:c2:46:1e:7e:4e:f8:03:9e:72:2d:ac:
ec:25:24:41:43:e9:f9:5a:c9:8a:57:e0:c6:d4:5a:
1a:c0:a5:7c:d0:99:e2:6c:7a:aa:4f:0d:a3:0c:31:
e7:4b:23:46:02:06:8e:5e:d9:3e:ca:3f:d8:b8:66:
9d:38:61:56:26:bd:b4:b4:e6:8b:46:e3:72:97:8c:
cd:51:fb:be:7e:64:a7:c3:1b:0d:f6:cc:1e:b5:29:
ca:a8:d1:da:8b:64:77:19:5a:b3:91:44:81:5d:54:
0f:08:d5:03:3b:f0:2f:f9:ab:72:b1:3f:15:87:59:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:44:C5:C3:48:02:1F:C3:09:CE:DA:58:63:EE:EA:2A:E7:FA:1B:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCDB32686A3611F1B34E53C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.68.0/24
Signature Algorithm: sha256WithRSAEncryption
41:56:cd:05:cb:b6:a7:46:84:b4:a6:24:f9:f1:f7:88:66:c2:
ac:78:47:90:39:69:b8:38:c1:01:1e:77:23:9f:30:d1:3a:f2:
ec:4a:61:9d:e5:83:97:41:38:59:ef:c0:f9:bc:d8:0f:9d:88:
a1:49:f1:00:c6:26:ed:71:ae:5c:a2:ac:8c:03:1f:54:1d:44:
05:cb:6c:7d:59:05:26:95:68:12:d5:37:e2:46:13:24:55:2a:
fa:7b:e1:01:18:ea:7f:45:92:cf:47:74:8a:76:50:47:ee:53:
7d:a5:ce:c3:32:b5:0b:fc:68:a1:46:17:39:62:6d:fe:41:51:
d0:e4:bb:79:51:70:2b:f1:51:f0:af:d0:27:e4:fc:60:9a:e3:
f6:a4:47:4a:ba:e5:f4:85:60:02:10:95:9b:c0:4d:2e:6d:42:
e1:25:2e:1e:f6:03:9e:04:44:90:27:d2:b0:ff:66:55:14:ff:
e4:0a:36:41:a5:8e:8d:e5:38:f4:e0:f2:e9:cf:a9:4e:83:f3:
c6:3c:cc:16:4a:ad:77:44:1b:31:f5:b8:22:36:8b:8e:14:70:
ed:39:2c:bc:90:c8:93:7c:cf:fb:4b:43:d1:79:52:af:0b:b4:
04:e8:99:4b:94:57:04:b2:07:79:13:84:04:69:72:9d:20:4c:
f2:1d:44:ee
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb6aMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE3MTAyNTI1WhcNMjYwNzIyMTAyNTI1WjAYMRYw
FAYDVQQDEw02YTMyNzYxOS0wMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3QGiLtlKWWyi9MouNseNe8APwYQWkPHqRTXTi5Woq7hEr0Z3Z3evrJh+
jTKRNQcda+O6rYtVhO9J+FDvfFI7NxbPuGj4LuRU88m8G8AJgPzgcaWqRBRdelKj
NA6CE5bVH9DrYiuX00/9eGMRpBQYn8oqUe80mb5afQET57bGlnwYvzOZB24693o4
wkYefk74A55yLazsJSRBQ+n5WsmKV+DG1FoawKV80JnibHqqTw2jDDHnSyNGAgaO
Xtk+yj/YuGadOGFWJr20tOaLRuNyl4zNUfu+fmSnwxsN9swetSnKqNHai2R3GVqz
kUSBXVQPCNUDO/Av+atysT8Vh1nVcwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFN5E
xcNIAh/DCc7aWGPu6irn+huUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0RCMzI2ODZBMzYxMUYxQjM0RTUzQzVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFEMA0GCSqGSIb3DQEBCwUA
A4IBAQBBVs0Fy7anRoS0piT58feIZsKseEeQOWm4OMEBHncjnzDROvLsSmGd5YOX
QThZ78D5vNgPnYihSfEAxibtca5coqyMAx9UHUQFy2x9WQUmlWgS1TfiRhMkVSr6
e+EBGOp/RZLPR3SKdlBH7lN9pc7DMrUL/GihRhc5Ym3+QVHQ5Lt5UXAr8VHwr9An
5PxgmuP2pEdKuuX0hWACEJWbwE0ubULhJS4e9gOeBESQJ9Kw/2ZVFP/kCjZBpY6N
5Tj04PLpz6lOg/PGPMwWSq13RBsx9bgiNouOFHDtOSy8kMiTfM/7S0PReVKvC7QE
6JlLlFcEsgd5E4QEaXKdIEzyHUTu
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:55 2026 by rpki-client