Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E68E6C552311F1833FC619CF1D38B0.roa
File: E4E68E6C552311F1833FC619CF1D38B0.roa (raw, json)
Hash identifier: brdYNTa0NwF6+NglnX17fi/IimyAL/v0lWXjH6w4ifs=
Subject key identifier: B0:AB:14:93:08:40:32:B6:A7:F6:6D:43:0E:73:8B:00:7A:58:88:29
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B734
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E68E6C552311F1833FC619CF1D38B0.roa
Signing time: Thu 21 May 2026 14:46:48 +0000
ROA not before: Thu 21 May 2026 14:46:43 +0000
ROA not after: Tue 16 Jun 2026 14:46:43 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112436 (0x1b734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 14:46:43 2026 GMT
Not After : Jun 16 14:46:43 2026 GMT
Subject: CN=6a0f1ad8-560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:07:96:9f:61:61:21:0a:5c:5d:3c:86:f2:
70:cb:48:c0:65:8f:3f:a0:a9:de:96:62:ec:1f:b5:
99:8d:03:be:ce:21:60:e3:ea:09:87:0a:5f:6c:32:
1f:59:a0:fe:ac:49:53:67:21:e3:46:ea:62:59:ac:
b2:ab:47:d1:2b:bd:01:12:82:a4:75:20:fa:b9:e1:
26:78:86:47:56:82:67:c2:12:11:38:26:86:c1:54:
d8:50:c8:30:b0:de:96:72:aa:67:08:63:b6:b4:a6:
ff:5b:66:8b:44:e0:20:04:9b:39:8b:cd:6b:46:21:
e3:e9:17:17:10:e4:c4:e1:b1:49:95:d2:64:1b:0e:
4f:50:47:db:1a:1a:8f:33:2e:76:02:9c:60:7e:55:
6e:d5:37:08:c9:bc:b2:4a:c7:e4:6f:06:cc:1a:20:
73:2c:8e:11:3e:dc:eb:a6:cb:db:1b:57:b1:14:6d:
de:3b:5e:41:ad:a3:2f:36:6e:63:16:69:4d:3d:ab:
fa:ea:bb:be:2b:ca:6f:62:44:8d:3a:e0:d0:bf:f6:
21:6c:f8:6e:a0:03:06:77:a3:fc:02:42:6d:4d:14:
a2:4f:58:d0:f3:df:3c:36:0b:da:13:73:22:50:d3:
6e:93:34:27:ad:1e:b8:db:42:b9:8b:ff:d5:2f:67:
ba:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:14:93:08:40:32:B6:A7:F6:6D:43:0E:73:8B:00:7A:58:88:29
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4E68E6C552311F1833FC619CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
66:39:e0:2a:6f:4d:67:84:a3:da:b6:2d:a2:5c:d4:c5:22:70:
2e:a7:8b:34:bf:fe:41:8a:b1:31:b6:47:c4:8f:ad:fa:87:52:
95:17:8b:84:93:32:1a:7b:c0:8e:88:46:71:e3:2f:38:e3:bf:
95:a7:da:eb:07:cf:5f:07:f8:83:41:8f:25:72:13:b3:4e:b0:
13:02:f8:f2:de:a0:2e:af:7b:44:06:3e:6c:30:d0:04:9d:75:
9b:4b:cc:dc:82:a1:f8:28:62:39:13:0f:05:f4:59:59:ba:e7:
8a:a8:c6:c3:17:e3:81:87:af:76:dd:28:8d:4a:79:30:83:73:
0d:24:37:ce:ff:ec:ad:17:26:25:7d:37:a5:13:90:95:e1:c9:
be:4c:95:b6:2e:e7:3a:f7:bb:b6:ad:84:40:62:af:14:43:55:
23:c9:d0:82:6d:dd:25:67:01:72:df:32:fb:f8:d5:cb:ee:fd:
73:43:c3:4f:13:d1:85:16:e3:af:1b:15:b4:d3:2f:ca:9b:f2:
2c:bb:6c:b7:34:ae:ef:89:fe:b5:87:53:8f:4f:15:22:f8:0e:
5a:1b:3f:20:76:9e:58:c1:c9:1c:52:71:66:a7:1e:89:79:cf:
1e:61:8e:24:f0:01:e8:78:5e:43:e8:e5:b5:e7:a0:2d:76:e2:
f2:99:b1:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbc0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTQ0NjQzWhcNMjYwNjE2MTQ0NjQzWjAYMRYw
FAYDVQQDEw02YTBmMWFkOC01NjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw1cHlp9hYSEKXF08hvJwy0jAZY8/oKnelmLsH7WZjQO+ziFg4+oJhwpf
bDIfWaD+rElTZyHjRupiWayyq0fRK70BEoKkdSD6ueEmeIZHVoJnwhIROCaGwVTY
UMgwsN6WcqpnCGO2tKb/W2aLROAgBJs5i81rRiHj6RcXEOTE4bFJldJkGw5PUEfb
GhqPMy52ApxgflVu1TcIybyySsfkbwbMGiBzLI4RPtzrpsvbG1exFG3eO15BraMv
Nm5jFmlNPav66ru+K8pvYkSNOuDQv/YhbPhuoAMGd6P8AkJtTRSiT1jQ8988Ngva
E3MiUNNukzQnrR6420K5i//VL2e6hQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLCr
FJMIQDK2p/ZtQw5ziwB6WIgpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNEU2OEU2QzU1MjMxMUYxODMzRkM2MTlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOKwMA0GCSqGSIb3DQEBCwUA
A4IBAQBmOeAqb01nhKPati2iXNTFInAup4s0v/5BirExtkfEj636h1KVF4uEkzIa
e8COiEZx4y8447+Vp9rrB89fB/iDQY8lchOzTrATAvjy3qAur3tEBj5sMNAEnXWb
S8zcgqH4KGI5Ew8F9FlZuueKqMbDF+OBh6923SiNSnkwg3MNJDfO/+ytFyYlfTel
E5CV4cm+TJW2Luc697u2rYRAYq8UQ1UjydCCbd0lZwFy3zL7+NXL7v1zQ8NPE9GF
FuOvGxW00y/Km/Isu2y3NK7vif61h1OPTxUi+A5aGz8gdp5YwckcUnFmpx6Jec8e
YY4k8AHoeF5D6OW156AtduLymbEP
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:11 2026 by rpki-client