Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CC25E554F11F1B0AD54A2CE1D38B0.roa
File: EE1CC25E554F11F1B0AD54A2CE1D38B0.roa (raw, json)
Hash identifier: z+JBD+mNdRwnjBH4g/Ctsqx2cYDySY2dkqdW9ELz504=
Subject key identifier: 09:BD:AF:28:B9:17:B3:14:84:EF:FF:89:3E:2B:0C:EB:71:74:EE:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CC25E554F11F1B0AD54A2CE1D38B0.roa
Signing time: Thu 21 May 2026 20:02:01 +0000
ROA not before: Thu 21 May 2026 20:01:57 +0000
ROA not after: Fri 26 Jun 2026 20:01:57 +0000
asID: 63139
IP address blocks: 156.225.112.0/24 maxlen: 24
156.225.113.0/24 maxlen: 24
156.225.114.0/24 maxlen: 24
156.225.116.0/24 maxlen: 24
156.225.117.0/24 maxlen: 24
156.225.118.0/24 maxlen: 24
156.225.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112561 (0x1b7b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 20:01:57 2026 GMT
Not After : Jun 26 20:01:57 2026 GMT
Subject: CN=6a0f64b9-e569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:ae:2d:09:51:c7:98:82:90:54:22:69:d2:
43:ff:57:c6:c5:f6:ac:4b:a2:bc:29:37:c1:ce:55:
1a:dd:17:cb:eb:33:2a:86:8d:7c:a0:44:d1:59:30:
71:b1:c5:26:d9:a1:74:07:e7:83:69:fe:cf:11:ac:
c0:68:91:96:0e:db:da:50:79:c0:02:24:76:f2:46:
4e:44:d3:f7:e9:8b:21:26:40:86:38:eb:d9:c1:ef:
5f:6c:9b:ef:1c:1f:52:e4:d9:d1:d8:13:93:19:60:
1c:bf:78:9a:ef:5d:7b:60:cc:1a:40:31:f5:17:ff:
f2:05:37:47:ef:23:4c:90:2e:6a:aa:bd:c2:7b:b9:
76:03:88:75:7b:cf:d6:87:c4:9f:fb:85:4f:c6:3e:
28:03:30:be:2f:8c:ca:8c:b0:ef:a7:86:42:d9:81:
53:b1:32:a9:39:11:7c:85:31:ed:f2:3f:8c:13:8a:
25:73:cd:50:40:73:30:6f:fa:d4:46:b9:74:95:09:
0d:8c:2d:1e:3b:0f:cc:81:2e:a4:ef:e7:48:d2:fe:
24:b7:79:d4:3e:23:1d:43:04:14:9d:e5:99:89:df:
19:43:f4:d7:25:01:81:e2:27:06:2d:75:2a:97:ed:
75:fc:80:67:bd:7a:ed:97:ee:92:2a:60:1c:8a:47:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BD:AF:28:B9:17:B3:14:84:EF:FF:89:3E:2B:0C:EB:71:74:EE:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE1CC25E554F11F1B0AD54A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.112.0-156.225.114.255
156.225.116.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:01:1c:e1:3e:2e:9e:6a:53:58:fb:6f:2c:94:b0:58:6c:33:
da:b8:a3:3d:59:0a:08:55:e0:68:43:c9:9d:26:4c:b1:a3:69:
70:cb:bc:da:ee:40:64:2a:72:40:99:ce:98:af:d6:61:53:85:
ae:4b:e9:1b:84:20:a5:3e:db:90:5e:9c:b5:f2:fb:e4:3e:b5:
0b:a1:45:85:f6:e8:40:3a:d0:c5:69:9a:6e:55:2b:77:58:9f:
86:bc:75:66:5e:00:ff:e6:8e:7c:bd:72:9a:cb:f7:49:84:70:
79:1d:98:42:3d:bd:85:e7:cf:bf:c7:35:a2:63:9e:db:0b:b3:
5d:df:6e:17:f8:b3:4a:9b:0b:d9:d7:03:9a:18:9a:cf:44:e3:
f0:1d:be:22:5b:d2:12:01:e3:11:44:f0:f9:0f:f9:26:54:f2:
9b:b1:9a:2f:3d:97:d4:17:7f:d9:93:2d:6e:16:32:ac:2c:68:
df:b0:03:29:4b:a8:0e:ff:4e:a2:8d:10:4c:52:85:19:f4:f4:
22:fa:13:ff:e5:a4:ad:8b:da:e2:8f:64:05:5f:09:82:dc:4d:
21:b0:5b:2c:74:99:90:67:b6:46:69:16:75:1b:a5:ba:c0:d4:
cf:60:5d:95:5d:6b:42:ff:43:6b:33:07:2d:e2:21:a6:9e:1b:
3c:ef:0b:5f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbexMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMjAwMTU3WhcNMjYwNjI2MjAwMTU3WjAYMRYw
FAYDVQQDEw02YTBmNjRiOS1lNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApR2uLQlRx5iCkFQiadJD/1fGxfasS6K8KTfBzlUa3RfL6zMqho18oETR
WTBxscUm2aF0B+eDaf7PEazAaJGWDtvaUHnAAiR28kZORNP36YshJkCGOOvZwe9f
bJvvHB9S5NnR2BOTGWAcv3ia7117YMwaQDH1F//yBTdH7yNMkC5qqr3Ce7l2A4h1
e8/Wh8Sf+4VPxj4oAzC+L4zKjLDvp4ZC2YFTsTKpORF8hTHt8j+ME4olc81QQHMw
b/rURrl0lQkNjC0eOw/MgS6k7+dI0v4kt3nUPiMdQwQUneWZid8ZQ/TXJQGB4icG
LXUql+11/IBnvXrtl+6SKmAcikcIuQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAm9
ryi5F7MUhO//iT4rDOtxdO6aMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTFDQzI1RTU1NEYxMUYxQjBBRDU0QTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBASc4XADBACc4XIDBAKc4XQw
DQYJKoZIhvcNAQELBQADggEBAF0BHOE+Lp5qU1j7byyUsFhsM9q4oz1ZCghV4GhD
yZ0mTLGjaXDLvNruQGQqckCZzpiv1mFTha5L6RuEIKU+25BenLXy++Q+tQuhRYX2
6EA60MVpmm5VK3dYn4a8dWZeAP/mjny9cprL90mEcHkdmEI9vYXnz7/HNaJjntsL
s13fbhf4s0qbC9nXA5oYms9E4/AdviJb0hIB4xFE8PkP+SZU8puxmi89l9QXf9mT
LW4WMqwsaN+wAylLqA7/TqKNEExShRn09CL6E//lpK2L2uKPZAVfCYLcTSGwWyx0
mZBntkZpFnUbpbrA1M9gXZVda0L/Q2szBy3iIaaeGzzvC18=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:59 2026 by rpki-client