Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E269913052CA11F1A88891C9CE1D38B0.roa
File: E269913052CA11F1A88891C9CE1D38B0.roa (raw, json)
Hash identifier: lHV0E6sXKRsGB9dXJodf0JUIdwrg6V9RnbrzCuVAqSc=
Subject key identifier: AB:C5:AD:87:2C:6F:D4:A0:4C:E9:86:9B:F5:F1:6B:79:4D:67:F8:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B580
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E269913052CA11F1A88891C9CE1D38B0.roa
Signing time: Mon 18 May 2026 15:04:36 +0000
ROA not before: Mon 18 May 2026 15:04:31 +0000
ROA not after: Sat 08 Aug 2026 15:04:31 +0000
asID: 150706
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112000 (0x1b580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 18 15:04:31 2026 GMT
Not After : Aug 8 15:04:31 2026 GMT
Subject: CN=6a0b2a84-c1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c1:b2:16:9a:51:c9:dd:a9:e5:f7:98:75:bd:
48:36:e6:03:da:63:64:43:0b:4d:67:e5:07:3b:02:
2c:b3:c8:72:f8:13:06:7b:94:6c:9f:4e:c9:13:48:
0e:82:4e:5d:95:5f:cf:d9:7a:a2:1f:44:fa:1d:79:
39:2e:a5:14:34:49:f2:d1:93:59:bd:83:da:eb:99:
a6:1c:6c:54:bc:ad:32:44:5e:78:e8:b2:73:d0:91:
80:af:95:ba:d0:56:90:60:7b:15:f4:4d:9e:ac:d6:
4d:a5:29:60:89:fd:56:44:45:49:c4:93:bd:52:d7:
91:8b:a6:2d:77:83:a4:66:e3:2b:bc:72:6b:96:bc:
54:5a:21:fc:b2:2a:cb:d3:85:78:9b:a0:20:87:c8:
0f:37:14:be:08:06:1a:0c:a6:83:2e:7b:6c:82:84:
e3:b7:f3:0b:5e:3e:dd:51:ba:ab:f6:ea:5f:61:23:
6b:e4:fc:28:70:9b:20:fb:6a:0a:8a:a1:a1:c9:3e:
06:8d:56:98:2e:50:0d:83:57:ee:96:12:d1:1d:cb:
99:b5:20:82:cc:aa:d7:c1:ed:dd:4f:aa:8a:bf:82:
1a:1c:f8:37:7f:c2:1a:8c:d7:23:3f:a8:d7:f4:61:
ad:42:66:d0:62:9c:bf:25:10:ef:75:7d:4d:27:de:
26:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C5:AD:87:2C:6F:D4:A0:4C:E9:86:9B:F5:F1:6B:79:4D:67:F8:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E269913052CA11F1A88891C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
38:49:13:02:30:b0:37:40:19:e2:cd:3d:3f:40:46:08:7b:0d:
65:ca:de:38:bb:5f:4b:da:43:00:aa:a7:e0:da:25:a1:e8:dc:
5e:04:bd:d4:11:3f:8b:72:2d:c2:e7:56:38:af:3c:af:0e:c2:
30:2f:47:3e:e0:8b:1c:85:47:dd:ce:e4:27:af:a1:fd:98:e6:
47:1b:33:17:56:c8:b8:e1:aa:1d:c1:ec:ee:ce:80:5a:8b:25:
9e:6d:f0:1c:c7:44:ad:a0:ac:a4:22:89:36:f0:b9:fa:97:8b:
03:a0:8e:33:32:af:4e:62:a5:9f:d9:ff:50:9d:fa:5d:e0:59:
85:a5:9c:70:a3:0d:7e:78:ce:f8:0f:fb:e5:f3:0b:0a:8e:5f:
2b:42:84:26:c7:c4:76:98:2b:89:a8:c4:93:b9:79:f0:fe:be:
4e:19:3d:13:47:12:a5:93:ce:44:e5:e5:89:03:9e:c3:13:1c:
59:77:f0:54:99:1a:37:1f:69:22:b1:33:63:38:d7:c3:e9:cc:
a4:bc:26:31:ec:9d:7d:49:ff:cd:1e:cf:29:26:05:41:0b:c6:
c0:6c:bc:b4:c5:9e:d7:93:21:fb:06:c1:e0:23:0d:9e:53:b4:
24:fd:bd:fa:63:5e:0b:f6:70:e7:4a:22:6b:bd:0c:46:a9:b1:
90:54:21:ca
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbWAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE4MTUwNDMxWhcNMjYwODA4MTUwNDMxWjAYMRYw
FAYDVQQDEw02YTBiMmE4NC1jMWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxsGyFppRyd2p5feYdb1INuYD2mNkQwtNZ+UHOwIss8hy+BMGe5Rsn07J
E0gOgk5dlV/P2XqiH0T6HXk5LqUUNEny0ZNZvYPa65mmHGxUvK0yRF546LJz0JGA
r5W60FaQYHsV9E2erNZNpSlgif1WREVJxJO9UteRi6Ytd4OkZuMrvHJrlrxUWiH8
sirL04V4m6Agh8gPNxS+CAYaDKaDLntsgoTjt/MLXj7dUbqr9upfYSNr5PwocJsg
+2oKiqGhyT4GjVaYLlANg1fulhLRHcuZtSCCzKrXwe3dT6qKv4IaHPg3f8IajNcj
P6jX9GGtQmbQYpy/JRDvdX1NJ94mBQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKvF
rYcsb9SgTOmGm/Xxa3lNZ/ivMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMjY5OTEzMDUyQ0ExMUYxQTg4ODkxQzlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBADhJEwIwsDdAGeLNPT9ARgh7DWXK3ji7
X0vaQwCqp+DaJaHo3F4EvdQRP4tyLcLnVjivPK8OwjAvRz7gixyFR93O5Cevof2Y
5kcbMxdWyLjhqh3B7O7OgFqLJZ5t8BzHRK2grKQiiTbwufqXiwOgjjMyr05ipZ/Z
/1Cd+l3gWYWlnHCjDX54zvgP++XzCwqOXytChCbHxHaYK4moxJO5efD+vk4ZPRNH
EqWTzkTl5YkDnsMTHFl38FSZGjcfaSKxM2M418PpzKS8JjHsnX1J/80ezykmBUEL
xsBsvLTFnteTIfsGweAjDZ5TtCT9vfpjXgv2cOdKImu9DEapsZBUIco=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client