Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E55D1C1E716411F196676FA9CE1D38B0.roa
File: E55D1C1E716411F196676FA9CE1D38B0.roa (raw, json)
Hash identifier: /Gqo3HQQp6q9M4vejwQMWZyCcylOc8lCmX7wJ1uJrKk=
Subject key identifier: 5C:C3:B2:14:14:C0:1C:BE:4C:63:10:D0:D1:84:1C:EB:89:E2:5F:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E55D1C1E716411F196676FA9CE1D38B0.roa
Signing time: Fri 26 Jun 2026 13:42:39 +0000
ROA not before: Fri 26 Jun 2026 13:42:34 +0000
ROA not after: Mon 31 Aug 2026 13:42:34 +0000
asID: 399077
IP address blocks: 156.240.231.0/24 maxlen: 24
156.240.232.0/24 maxlen: 24
156.240.233.0/24 maxlen: 24
156.240.234.0/24 maxlen: 24
156.240.235.0/24 maxlen: 24
156.240.236.0/24 maxlen: 24
156.240.237.0/24 maxlen: 24
156.240.238.0/24 maxlen: 24
156.240.239.0/24 maxlen: 24
156.240.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114849 (0x1c0a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 13:42:34 2026 GMT
Not After : Aug 31 13:42:34 2026 GMT
Subject: CN=6a3e81cf-507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:ff:37:1b:7a:7a:f7:62:2a:85:c4:fe:b4:
90:e1:2a:4c:b1:c1:3b:0b:18:6c:b4:a1:f7:97:93:
cc:3e:29:07:23:5b:3c:d8:53:a7:c5:ab:88:d7:e0:
0c:c2:7b:16:55:6a:55:c6:13:fb:65:6a:5c:32:79:
af:21:f1:1c:40:6b:81:66:30:41:cd:60:7c:6e:64:
84:01:8b:7e:81:87:c6:fa:17:45:56:b6:54:da:82:
61:1a:50:50:81:e1:ee:d6:75:d8:c7:65:88:82:9b:
5b:6a:dd:17:9b:46:d9:1d:11:97:ca:6b:45:9f:a1:
ce:c6:31:cd:67:34:77:a3:7c:f4:1c:2d:73:e7:29:
cd:97:5f:2e:62:5f:23:d2:29:d4:ba:86:54:eb:7e:
00:0b:e0:7b:bf:62:4b:0d:58:1e:dc:98:46:5a:a7:
5a:a3:31:e2:15:d8:43:d9:80:6a:e8:69:06:92:53:
92:fb:b8:d9:cd:d9:2f:00:72:b9:a4:46:ff:5e:ee:
0c:36:05:30:a0:e9:01:e9:70:ba:01:b7:d9:50:c4:
18:72:50:2b:a8:c3:a8:b2:e0:7f:3c:02:65:60:51:
6d:69:45:19:21:13:f1:01:44:93:45:5a:04:a0:7d:
4d:38:68:3a:39:44:68:ea:a8:9e:5a:ea:d2:ee:c9:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C3:B2:14:14:C0:1C:BE:4C:63:10:D0:D1:84:1C:EB:89:E2:5F:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E55D1C1E716411F196676FA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.231.0-156.240.240.255
Signature Algorithm: sha256WithRSAEncryption
b0:47:8f:42:d8:f1:69:9d:34:29:f5:c8:20:e3:1b:34:41:3b:
57:78:9a:7f:c9:91:51:09:c8:f5:c3:0c:a2:f4:a5:ff:15:c5:
d4:da:40:e5:f7:29:5d:83:96:31:5f:eb:85:cb:66:2a:12:5e:
65:9f:ad:6a:e3:19:7f:47:20:25:4a:3e:58:d2:6b:59:b2:1b:
bb:4f:f8:6f:ed:31:b3:4c:fb:af:be:4b:3e:a3:c1:18:1f:bc:
fa:2e:16:f0:44:46:42:23:44:63:51:90:b3:19:24:11:4d:42:
69:3d:6a:af:a7:6b:2a:ee:4f:7a:29:cf:75:43:d2:7e:3a:dc:
e3:61:d8:75:1c:d7:93:58:89:a3:90:6c:78:f9:63:0c:ea:af:
61:61:00:2d:92:c7:bd:bb:01:e8:b6:aa:38:01:4b:2d:06:ef:
06:54:0c:2b:6c:8c:82:c9:11:2a:b6:90:ed:ce:03:da:93:d5:
f9:1a:0e:79:24:6e:7c:5c:05:ce:d5:03:81:bf:e0:b6:0f:71:
a8:65:e3:b4:a2:b8:3c:b4:c3:21:9e:5e:e6:61:5e:26:c7:b4:
d6:1c:9a:d5:77:e7:b2:32:ba:f6:c2:32:b3:f1:59:5f:18:71:
cc:57:71:73:0b:b3:3a:7c:17:dc:28:37:7c:88:8f:c0:eb:c0:
ee:48:e4:c9
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcChMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI2MTM0MjM0WhcNMjYwODMxMTM0MjM0WjAYMRYw
FAYDVQQDEw02YTNlODFjZi01MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsbL/Nxt6evdiKoXE/rSQ4SpMscE7CxhstKH3l5PMPikHI1s82FOnxauI
1+AMwnsWVWpVxhP7ZWpcMnmvIfEcQGuBZjBBzWB8bmSEAYt+gYfG+hdFVrZU2oJh
GlBQgeHu1nXYx2WIgptbat0Xm0bZHRGXymtFn6HOxjHNZzR3o3z0HC1z5ynNl18u
Yl8j0inUuoZU634AC+B7v2JLDVge3JhGWqdaozHiFdhD2YBq6GkGklOS+7jZzdkv
AHK5pEb/Xu4MNgUwoOkB6XC6AbfZUMQYclArqMOosuB/PAJlYFFtaUUZIRPxAUST
RVoEoH1NOGg6OURo6qieWurS7slt1QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFzD
shQUwBy+TGMQ0NGEHOuJ4l/ZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNTVEMUMxRTcxNjQxMUYxOTY2NzZGQTlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc8OcDBACc8PAwDQYJKoZI
hvcNAQELBQADggEBALBHj0LY8WmdNCn1yCDjGzRBO1d4mn/JkVEJyPXDDKL0pf8V
xdTaQOX3KV2DljFf64XLZioSXmWfrWrjGX9HICVKPljSa1myG7tP+G/tMbNM+6++
Sz6jwRgfvPouFvBERkIjRGNRkLMZJBFNQmk9aq+nayruT3opz3VD0n463ONh2HUc
15NYiaOQbHj5Ywzqr2FhAC2Sx727Aei2qjgBSy0G7wZUDCtsjILJESq2kO3OA9qT
1fkaDnkkbnxcBc7VA4G/4LYPcahl47SiuDy0wyGeXuZhXibHtNYcmtV357IyuvbC
MrPxWV8YccxXcXMLszp8F9woN3yIj8DrwO5I5Mk=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:59 2026 by rpki-client