Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E461D4144F6611F199C5A3B7CE1D38B0.roa
File: E461D4144F6611F199C5A3B7CE1D38B0.roa (raw, json)
Hash identifier: ndZW0TrTD/LCICttJ9loGw8jWalYz5yQ0eUD/w+lqsQ=
Subject key identifier: 75:BF:DC:49:98:B7:44:B5:54:6A:E7:DC:F3:11:E0:7F:72:14:85:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B475
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E461D4144F6611F199C5A3B7CE1D38B0.roa
Signing time: Thu 14 May 2026 07:31:16 +0000
ROA not before: Thu 14 May 2026 07:31:12 +0000
ROA not after: Fri 03 Jul 2026 07:31:12 +0000
asID: 62563
IP address blocks: 156.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111733 (0x1b475)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:31:12 2026 GMT
Not After : Jul 3 07:31:12 2026 GMT
Subject: CN=6a057a44-0a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:d4:1c:38:0a:51:5c:8b:5c:50:ca:d4:7a:
3c:1a:da:9c:54:bf:e8:25:09:33:57:3d:42:ab:51:
2c:c4:42:be:f6:a6:be:d9:cb:fd:00:0c:05:e5:09:
cf:0e:d2:30:56:eb:4d:bd:5f:1d:d4:2e:4f:25:40:
ce:8c:8d:6d:7b:73:07:51:d3:e0:32:8b:d8:d3:b8:
a2:d3:64:16:9b:db:06:b9:cd:63:98:e5:36:0d:bf:
50:9a:8b:d8:d9:ea:47:cb:6a:9c:b6:b5:1c:c0:30:
26:52:c8:ef:93:d5:47:a1:32:dc:11:25:c3:5b:ed:
43:5e:53:aa:21:2f:ef:8a:0f:36:42:07:2d:8a:b9:
12:64:6f:0a:0d:aa:57:f5:f6:c1:69:ea:12:c0:70:
be:f2:da:8e:86:1e:49:a4:61:b2:1d:23:70:ed:6b:
36:0d:13:48:22:aa:7b:31:dd:ec:3f:cf:5a:4f:61:
78:c3:cd:ae:89:c1:3b:45:44:38:0f:68:bd:55:69:
fe:6a:fb:b9:7e:31:42:b7:55:fb:a9:8a:67:20:e0:
5e:17:d5:a5:4c:18:1f:21:57:4d:1e:df:70:ca:21:
89:db:22:b2:27:c5:3e:69:36:85:0f:c2:a5:d5:9c:
c6:3f:3e:35:46:fd:f8:f8:c1:a3:77:c6:75:bf:3f:
e7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BF:DC:49:98:B7:44:B5:54:6A:E7:DC:F3:11:E0:7F:72:14:85:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E461D4144F6611F199C5A3B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:09:d6:31:e3:4b:71:00:4c:b9:00:86:70:93:d0:97:a1:f0:
47:f5:81:e5:63:ae:36:bc:b5:2a:df:8e:62:ac:55:55:d9:01:
c3:dc:16:f7:57:e1:31:b7:8c:88:ae:73:97:10:fa:c6:0b:d3:
5d:d2:73:af:fa:25:dc:00:b7:de:68:35:59:25:4e:7d:b3:d8:
4f:81:1e:21:34:46:ab:1c:f6:0e:65:c0:14:d7:b5:c2:3e:4b:
5b:d8:b7:d2:5e:ec:f3:95:e8:55:90:49:c8:e9:7a:69:13:41:
2d:30:8d:57:e1:bc:b1:55:84:f8:96:14:e7:39:21:c1:95:10:
c3:f9:d6:49:df:a2:f6:77:3f:e0:7a:54:61:c2:58:57:83:8e:
33:e6:1f:3e:d6:2c:ed:76:c8:48:80:c7:99:e7:20:08:18:98:
bb:60:4d:c8:47:a5:4a:05:6c:ed:7c:bd:ae:3b:70:f4:91:a8:
6b:dc:a7:27:db:1e:cb:74:52:f5:ce:fc:77:d8:8e:b2:27:66:
02:e3:6f:f2:90:fc:d2:1a:d6:24:c3:c0:05:59:3c:48:72:f1:
7f:74:38:f4:f5:3e:cd:48:1c:91:34:80:1d:d5:26:b4:84:0c:
61:8c:f8:f9:d2:0a:bb:09:77:7e:55:9b:87:7b:66:24:c9:6d:
f1:c6:35:9b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbR1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE0MDczMTEyWhcNMjYwNzAzMDczMTEyWjAYMRYw
FAYDVQQDEw02YTA1N2E0NC0wYTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA19bUHDgKUVyLXFDK1Ho8GtqcVL/oJQkzVz1Cq1EsxEK+9qa+2cv9AAwF
5QnPDtIwVutNvV8d1C5PJUDOjI1te3MHUdPgMovY07ii02QWm9sGuc1jmOU2Db9Q
movY2epHy2qctrUcwDAmUsjvk9VHoTLcESXDW+1DXlOqIS/vig82QgctirkSZG8K
DapX9fbBaeoSwHC+8tqOhh5JpGGyHSNw7Ws2DRNIIqp7Md3sP89aT2F4w82uicE7
RUQ4D2i9VWn+avu5fjFCt1X7qYpnIOBeF9WlTBgfIVdNHt9wyiGJ2yKyJ8U+aTaF
D8Kl1ZzGPz41Rv34+MGjd8Z1vz/nswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHW/
3EmYt0S1VGrn3PMR4H9yFIXoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNDYxRDQxNDRGNjYxMUYxOTlDNUEzQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlEMA0GCSqGSIb3DQEBCwUA
A4IBAQC3CdYx40txAEy5AIZwk9CXofBH9YHlY642vLUq345irFVV2QHD3Bb3V+Ex
t4yIrnOXEPrGC9Nd0nOv+iXcALfeaDVZJU59s9hPgR4hNEarHPYOZcAU17XCPktb
2LfSXuzzlehVkEnI6XppE0EtMI1X4byxVYT4lhTnOSHBlRDD+dZJ36L2dz/gelRh
wlhXg44z5h8+1iztdshIgMeZ5yAIGJi7YE3IR6VKBWztfL2uO3D0kahr3Kcn2x7L
dFL1zvx32I6yJ2YC42/ykPzSGtYkw8AFWTxIcvF/dDj09T7NSByRNIAd1Sa0hAxh
jPj50gq7CXd+VZuHe2YkyW3xxjWb
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:51 2026 by rpki-client