Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF6D60685A6A11F1918F39C3CE1D38B0.roa
File: DF6D60685A6A11F1918F39C3CE1D38B0.roa (raw, json)
Hash identifier: IL6XEIkoBTjMJccsvMEumixEopZlyrFcM8gOAg7NeDc=
Subject key identifier: 06:EC:E1:46:63:AA:7D:3C:F0:D1:48:B5:6B:C5:77:85:AA:F4:27:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF6D60685A6A11F1918F39C3CE1D38B0.roa
Signing time: Thu 28 May 2026 07:57:29 +0000
ROA not before: Thu 28 May 2026 07:57:24 +0000
ROA not after: Wed 01 Jul 2026 07:57:24 +0000
asID: 44559
IP address blocks: 156.239.19.0/24 maxlen: 24
156.239.20.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.239.133.0/24 maxlen: 24
156.239.135.0/24 maxlen: 24
156.243.228.0/24 maxlen: 24
156.243.242.0/24 maxlen: 24
156.243.243.0/24 maxlen: 24
156.243.248.0/24 maxlen: 24
156.249.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113251 (0x1ba63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 07:57:24 2026 GMT
Not After : Jul 1 07:57:24 2026 GMT
Subject: CN=6a17f569-3dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b5:bf:86:7b:66:85:1d:72:83:b4:fe:1c:b7:
b1:46:49:45:23:d4:8c:57:60:03:df:7d:a7:f6:f1:
a0:50:9e:4e:e2:dc:7a:31:e7:b7:e9:81:4b:f6:d5:
21:11:22:0e:b2:a0:99:57:b2:6a:1d:0f:f7:5f:2d:
60:31:8d:bf:7b:88:14:cc:5e:c7:06:e0:1b:e3:bf:
8e:cc:0f:52:ac:43:4c:91:6f:7f:cb:59:0b:4d:e9:
83:1d:9f:52:cb:d2:e1:23:a9:af:38:8c:b9:a9:78:
01:5e:9e:04:35:e8:03:03:b7:6c:0f:97:db:1c:be:
65:95:33:85:e3:74:0e:e9:75:0c:c9:57:ce:b4:df:
ac:eb:56:df:37:e8:e6:1a:4a:cd:b9:b7:76:9c:40:
ec:2b:8c:67:c4:0b:78:fb:c3:a1:9a:9a:44:de:3f:
36:b6:da:80:37:f8:64:bc:36:95:3f:12:f1:e1:03:
36:56:35:f5:85:45:e3:94:0a:c2:71:d3:3c:78:ae:
8a:44:87:d3:69:3a:b2:d4:38:2b:33:8f:15:0d:70:
1b:32:1e:27:9c:a0:37:3e:95:32:ce:e2:6e:73:0f:
10:10:cc:0e:71:4e:f5:ac:bc:f4:c3:c4:dd:63:4f:
dc:29:9c:64:79:fe:0f:3c:1e:82:dc:17:b8:c4:57:
04:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EC:E1:46:63:AA:7D:3C:F0:D1:48:B5:6B:C5:77:85:AA:F4:27:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF6D60685A6A11F1918F39C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.19.0-156.239.20.255
156.239.132.0/23
156.239.135.0/24
156.243.228.0/24
156.243.242.0/23
156.243.248.0/24
156.249.102.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c0:93:e9:2d:30:e1:93:85:4c:41:43:76:28:07:1d:7d:34:
bf:1f:77:b3:d0:74:54:bc:f3:d9:cb:88:2a:c7:9d:5b:bb:73:
df:a5:24:cf:f4:1b:01:8e:87:98:2a:94:d7:ef:af:3a:47:83:
bd:d8:93:1d:56:26:aa:66:6b:d5:e4:a9:b1:0e:16:60:e6:5c:
7d:9e:3e:04:0e:34:36:e2:b1:cc:fe:39:a0:06:0a:51:13:dd:
ea:8e:07:21:4d:ff:e1:56:bc:07:9d:1e:d8:7a:cb:dd:36:43:
52:6b:4e:ff:c2:e4:01:e6:16:54:af:a5:82:1c:5f:6f:c9:99:
dc:61:68:92:b4:f4:d5:41:66:d0:5e:b6:df:76:22:8d:2d:61:
92:76:52:e9:66:e6:71:4d:5b:f6:e5:da:5b:a9:8c:ad:aa:fe:
8a:30:7f:4b:e4:5e:53:84:4e:4b:f9:5b:55:42:ff:34:72:d8:
bc:e8:07:08:e0:72:3b:7f:1d:ad:9c:8b:84:33:c3:9f:2e:04:
2d:e4:a8:30:27:a4:6e:ae:33:11:4f:de:81:0d:b4:ec:86:06:
38:80:cf:06:37:55:fb:b1:08:c0:01:c3:ad:0c:20:13:0f:07:
4a:9e:83:45:24:c3:54:15:4f:78:89:ff:41:ec:9b:6d:87:7b:
9c:a5:4a:41
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAbpjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MDc1NzI0WhcNMjYwNzAxMDc1NzI0WjAYMRYw
FAYDVQQDEw02YTE3ZjU2OS0zZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2rW/hntmhR1yg7T+HLexRklFI9SMV2AD332n9vGgUJ5O4tx6Mee36YFL
9tUhESIOsqCZV7JqHQ/3Xy1gMY2/e4gUzF7HBuAb47+OzA9SrENMkW9/y1kLTemD
HZ9Sy9LhI6mvOIy5qXgBXp4ENegDA7dsD5fbHL5llTOF43QO6XUMyVfOtN+s61bf
N+jmGkrNubd2nEDsK4xnxAt4+8OhmppE3j82ttqAN/hkvDaVPxLx4QM2VjX1hUXj
lArCcdM8eK6KRIfTaTqy1DgrM48VDXAbMh4nnKA3PpUyzuJucw8QEMwOcU71rLz0
w8TdY0/cKZxkef4PPB6C3Be4xFcEUwIDAQABo4ICzjCCAsowHQYDVR0OBBYEFAbs
4UZjqn088NFItWvFd4Wq9CcDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ERjZENjA2ODVBNkExMUYxOTE4RjM5QzNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBACc7xMDBACc7xQDBAGc74QD
BACc74cDBACc8+QDBAGc8/IDBACc8/gDBACc+WYwDQYJKoZIhvcNAQELBQADggEB
AGbAk+ktMOGThUxBQ3YoBx19NL8fd7PQdFS889nLiCrHnVu7c9+lJM/0GwGOh5gq
lNfvrzpHg73Ykx1WJqpma9XkqbEOFmDmXH2ePgQONDbiscz+OaAGClET3eqOByFN
/+FWvAedHth6y902Q1JrTv/C5AHmFlSvpYIcX2/JmdxhaJK09NVBZtBett92Io0t
YZJ2Uulm5nFNW/bl2lupjK2q/oowf0vkXlOETkv5W1VC/zRy2LzoBwjgcjt/Ha2c
i4Qzw58uBC3kqDAnpG6uMxFP3oENtOyGBjiAzwY3VfuxCMABw60MIBMPB0qeg0Uk
w1QVT3iJ/0Hsm22He5ylSkE=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:51 2026 by rpki-client