Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9BB3244F6411F19AFB65AACE1D38B0.roa
File: EA9BB3244F6411F19AFB65AACE1D38B0.roa (raw, json)
Hash identifier: JTpOnjrryAnFXLdsTqsFAUZj8ROwNkZ5gUYDvbZIiXw=
Subject key identifier: E3:21:A0:40:47:76:2F:4C:F7:09:F2:0D:DC:91:76:6F:DC:89:61:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B471
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9BB3244F6411F19AFB65AACE1D38B0.roa
Signing time: Thu 14 May 2026 07:17:08 +0000
ROA not before: Thu 14 May 2026 07:17:03 +0000
ROA not after: Sun 28 Jun 2026 07:17:03 +0000
asID: 63023
IP address blocks: 156.229.119.0/24 maxlen: 24
156.229.239.0/24 maxlen: 24
156.233.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111729 (0x1b471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:17:03 2026 GMT
Not After : Jun 28 07:17:03 2026 GMT
Subject: CN=6a0576f4-0947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:20:d3:67:9b:fb:57:22:21:28:35:b8:d4:
ce:c9:5a:de:5c:e9:c5:ef:1b:b2:d3:74:57:1e:a1:
ad:85:b6:0a:22:52:95:8c:9f:bc:57:be:33:c8:4a:
f7:70:4e:ea:21:27:6c:48:f4:c6:6e:65:10:de:f1:
35:8e:dd:0d:81:da:a8:c9:a6:14:e9:3a:a2:7c:62:
eb:c8:61:36:42:72:ed:2a:7e:fb:ad:25:2a:b0:eb:
f6:af:70:41:66:5e:31:f3:01:83:fc:69:ee:c6:a9:
c1:9c:bf:f6:1e:21:59:96:bb:a0:8c:36:63:f0:44:
32:b3:65:17:59:8f:33:fd:73:4c:eb:d0:33:a5:79:
c0:3f:f6:be:7a:0a:b1:68:b6:2a:6a:e5:a9:8e:e9:
4e:2f:b5:2a:6d:b4:e2:72:1b:ec:95:4b:d5:ca:e4:
35:da:f8:57:0a:f1:f7:e6:32:c4:b4:ae:2d:32:1c:
41:ae:9f:83:85:60:ab:24:98:92:4c:ef:c7:3b:60:
b4:35:26:df:78:56:3d:4c:02:6b:74:c4:51:de:6f:
f9:86:95:b9:59:61:46:2e:ed:55:4d:0f:d7:af:02:
9b:8a:39:7f:c0:36:a1:9d:d8:7c:c3:65:3e:df:bf:
82:4e:4c:f6:57:24:30:a2:a7:0e:65:bf:34:d6:f2:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:A0:40:47:76:2F:4C:F7:09:F2:0D:DC:91:76:6F:DC:89:61:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9BB3244F6411F19AFB65AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.119.0/24
156.229.239.0/24
156.233.2.0/24
Signature Algorithm: sha256WithRSAEncryption
12:04:3c:b1:74:8f:ff:43:89:cc:77:ab:d1:7b:d9:67:61:e6:
2e:6c:a2:01:1e:41:be:25:cf:76:35:b4:7e:29:5a:70:85:20:
e9:6c:83:ac:ad:18:f4:04:d5:10:73:50:4d:34:54:13:e3:bc:
25:6e:ff:91:5b:62:bf:86:c6:d8:a7:da:51:6e:c2:15:dc:63:
26:75:8c:1e:79:30:5b:97:ea:b7:50:04:62:81:0e:0a:11:65:
96:4a:eb:fe:4d:6e:70:c6:64:99:27:9b:0a:da:0b:96:d3:cb:
0b:20:1e:79:aa:b4:60:13:f2:53:a7:1a:db:12:d9:0f:62:01:
50:64:44:8e:f5:12:b9:81:9a:1a:48:f4:22:0e:79:a5:79:20:
ac:6d:ad:73:2d:bb:14:20:8f:5e:1a:f3:cd:3b:5d:16:26:98:
26:1c:15:bf:d2:cb:5f:a0:67:b6:27:14:a6:ae:ef:7a:81:ad:
a2:60:b2:de:ff:a4:0b:d0:76:a0:75:39:61:97:5c:6d:e0:ab:
e4:a7:ca:da:40:86:d2:c1:57:47:10:bc:3c:f2:1d:e3:11:47:
7d:4c:4a:61:90:f7:99:37:ab:68:b3:29:5c:cf:d0:ed:c5:0f:
f7:c5:52:68:d7:f6:e0:59:9e:93:c7:e6:e8:14:68:a4:5e:29:
b2:0c:1b:9a
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAbRxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE0MDcxNzAzWhcNMjYwNjI4MDcxNzAzWjAYMRYw
FAYDVQQDEw02YTA1NzZmNC0wOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptYg02eb+1ciISg1uNTOyVreXOnF7xuy03RXHqGthbYKIlKVjJ+8V74z
yEr3cE7qISdsSPTGbmUQ3vE1jt0NgdqoyaYU6TqifGLryGE2QnLtKn77rSUqsOv2
r3BBZl4x8wGD/GnuxqnBnL/2HiFZlrugjDZj8EQys2UXWY8z/XNM69AzpXnAP/a+
egqxaLYqauWpjulOL7UqbbTichvslUvVyuQ12vhXCvH35jLEtK4tMhxBrp+DhWCr
JJiSTO/HO2C0NSbfeFY9TAJrdMRR3m/5hpW5WWFGLu1VTQ/XrwKbijl/wDahndh8
w2U+37+CTkz2VyQwoqcOZb801vIYMQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFOMh
oEBHdi9M9wnyDdyRdm/ciWG8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQTlCQjMyNDRGNjQxMUYxOUFGQjY1QUFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnOV3AwQAnOXvAwQAnOkCMA0G
CSqGSIb3DQEBCwUAA4IBAQASBDyxdI//Q4nMd6vRe9lnYeYubKIBHkG+Jc92NbR+
KVpwhSDpbIOsrRj0BNUQc1BNNFQT47wlbv+RW2K/hsbYp9pRbsIV3GMmdYweeTBb
l+q3UARigQ4KEWWWSuv+TW5wxmSZJ5sK2guW08sLIB55qrRgE/JTpxrbEtkPYgFQ
ZESO9RK5gZoaSPQiDnmleSCsba1zLbsUII9eGvPNO10WJpgmHBW/0stfoGe2JxSm
ru96ga2iYLLe/6QL0HagdTlhl1xt4Kvkp8raQIbSwVdHELw88h3jEUd9TEphkPeZ
N6tosylcz9DtxQ/3xVJo1/bgWZ6Tx+boFGikXimyDBua
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:11 2026 by rpki-client