Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCED1276569511F1B6F869F4CE1D38B0.roa
File: DCED1276569511F1B6F869F4CE1D38B0.roa (raw, json)
Hash identifier: UdibcwZxhiWJymH1vKySf4xf38rJiL5G0dBufNRZHb0=
Subject key identifier: 81:7A:3E:B7:79:47:5C:B0:83:0C:2B:3D:54:EA:4E:81:E1:E0:C7:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B889
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCED1276569511F1B6F869F4CE1D38B0.roa
Signing time: Sat 23 May 2026 10:55:08 +0000
ROA not before: Sat 23 May 2026 10:55:04 +0000
ROA not after: Tue 16 Jun 2026 10:55:04 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 32
156.247.32.0/24 maxlen: 32
156.247.33.0/24 maxlen: 32
156.247.34.0/24 maxlen: 32
156.247.35.0/24 maxlen: 32
156.247.36.0/24 maxlen: 32
156.247.37.0/24 maxlen: 32
156.247.38.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112777 (0x1b889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 10:55:04 2026 GMT
Not After : Jun 16 10:55:04 2026 GMT
Subject: CN=6a11878c-b6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0f:de:cf:a6:c1:17:6c:3c:f5:ce:b1:d0:52:
69:1f:7a:47:2a:b6:92:ae:38:b2:c2:fa:86:76:a5:
2a:bf:ad:04:2d:18:c0:c7:b5:45:1a:06:e3:67:92:
b8:f0:24:5e:a9:4f:cf:09:64:24:e9:10:12:03:54:
cf:a0:df:3c:17:e5:c8:22:40:df:21:a0:f8:50:42:
55:39:2a:65:71:12:e7:d9:9e:b7:3b:13:b5:1c:b0:
1f:a1:05:0e:49:0e:11:9e:f1:f8:91:1c:62:ea:75:
b1:c5:ab:ee:5e:07:a0:32:e1:6b:a2:59:72:57:75:
d1:b5:00:60:fe:8b:d2:68:b9:d4:ad:78:f5:5d:a5:
8b:7e:47:bf:88:82:b0:31:6e:46:14:bf:54:d1:02:
9a:58:8d:aa:9b:d3:49:27:9e:cd:e5:6f:7d:7c:53:
e0:2a:5d:66:a0:54:3b:66:6b:6d:11:af:37:e5:f9:
35:ad:32:2c:be:91:1c:61:1d:b9:ee:51:20:dd:1b:
e6:0b:58:27:f2:4b:e7:c2:72:3a:21:45:70:c3:09:
fc:71:1c:f7:82:b1:34:aa:b8:25:4c:46:a3:49:e7:
73:df:1a:b1:62:3b:17:b5:60:a0:40:e7:2f:4a:da:
dd:7b:7e:b3:05:53:37:7a:7b:ad:8b:a9:01:b9:6c:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:3E:B7:79:47:5C:B0:83:0C:2B:3D:54:EA:4E:81:E1:E0:C7:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCED1276569511F1B6F869F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
04:9a:5d:5b:04:86:8c:77:5b:3f:da:76:49:1a:45:ba:59:2a:
6f:84:be:bb:33:e0:26:8c:a0:f7:d8:b6:83:23:a0:b0:22:75:
f8:05:f0:a4:46:27:1a:53:e7:76:74:bf:0c:9d:06:43:1e:60:
a2:35:da:8e:e3:e1:f0:d2:40:f7:fb:c6:ed:91:d5:3d:48:d1:
2d:a1:53:54:89:d3:95:73:63:d1:d8:56:5d:15:be:9d:7f:31:
59:80:c1:df:c4:a6:20:c4:a1:ac:a8:3c:bb:bd:e1:f4:22:e6:
0b:3e:34:50:ed:3d:f1:3c:48:cd:23:b4:cc:e4:a4:e3:b9:15:
72:c4:a5:4d:87:8d:ed:2a:43:2b:d2:3d:37:7e:b4:00:1c:5f:
fe:8f:ef:4a:45:4b:44:72:91:2a:67:ec:95:3d:46:36:b1:87:
d0:98:19:7e:37:b8:73:98:63:2e:b9:91:0f:58:6c:05:15:0e:
cd:4e:ea:89:ed:f5:44:cb:20:5c:7d:9b:c3:45:5b:6c:a9:9d:
44:f8:49:03:41:54:b1:8f:18:22:33:15:e0:9e:b0:0f:8a:38:
7a:44:b5:e6:c2:2e:ea:9d:f3:aa:cf:aa:71:f6:92:f6:12:08:
44:bb:03:10:89:22:f8:b2:45:57:64:d2:a5:30:24:d2:ef:7a:
84:99:a0:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbiJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIzMTA1NTA0WhcNMjYwNjE2MTA1NTA0WjAYMRYw
FAYDVQQDEw02YTExODc4Yy1iNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA/Q/ez6bBF2w89c6x0FJpH3pHKraSrjiywvqGdqUqv60ELRjAx7VFGgbj
Z5K48CReqU/PCWQk6RASA1TPoN88F+XIIkDfIaD4UEJVOSplcRLn2Z63OxO1HLAf
oQUOSQ4RnvH4kRxi6nWxxavuXgegMuFrollyV3XRtQBg/ovSaLnUrXj1XaWLfke/
iIKwMW5GFL9U0QKaWI2qm9NJJ57N5W99fFPgKl1moFQ7ZmttEa835fk1rTIsvpEc
YR257lEg3RvmC1gn8kvnwnI6IUVwwwn8cRz3grE0qrglTEajSedz3xqxYjsXtWCg
QOcvStrde36zBVM3enuti6kBuWywOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIF6
Prd5R1ywgwwrPVTqToHh4MdgMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0VEMTI3NjU2OTUxMUYxQjZGODY5RjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQAEml1bBIaMd1s/2nZJGkW6WSpvhL67M+AmjKD32LaDI6CwInX4BfCkRica
U+d2dL8MnQZDHmCiNdqO4+Hw0kD3+8btkdU9SNEtoVNUidOVc2PR2FZdFb6dfzFZ
gMHfxKYgxKGsqDy7veH0IuYLPjRQ7T3xPEjNI7TM5KTjuRVyxKVNh43tKkMr0j03
frQAHF/+j+9KRUtEcpEqZ+yVPUY2sYfQmBl+N7hzmGMuuZEPWGwFFQ7NTuqJ7fVE
yyBcfZvDRVtsqZ1E+EkDQVSxjxgiMxXgnrAPijh6RLXmwi7qnfOqz6px9pL2EghE
uwMQiSL4skVXZNKlMCTS73qEmaCX
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:01 2026 by rpki-client