Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F41D0F88699511F1AD34CAEACE1D38B0.roa
File: F41D0F88699511F1AD34CAEACE1D38B0.roa (raw, json)
Hash identifier: 3qTngqpFBHtJMQPNSuOkk2qnRmowgdQ7Hj9XELlCmMk=
Subject key identifier: C1:83:66:68:4C:EA:51:BA:7C:38:B0:AA:04:3B:B6:40:80:2A:3C:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F41D0F88699511F1AD34CAEACE1D38B0.roa
Signing time: Tue 16 Jun 2026 15:13:39 +0000
ROA not before: Tue 16 Jun 2026 15:13:35 +0000
ROA not after: Fri 24 Jul 2026 15:13:35 +0000
asID: 214413
IP address blocks: 156.229.56.0/22 maxlen: 24
156.233.216.0/22 maxlen: 24
156.239.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114220 (0x1be2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 15:13:35 2026 GMT
Not After : Jul 24 15:13:35 2026 GMT
Subject: CN=6a316823-ebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:ee:23:61:75:1a:ef:ae:b8:0d:a6:77:75:
cc:5e:82:b9:f6:1f:52:35:78:40:1a:b7:6b:81:bb:
f6:59:1d:05:68:51:3f:fd:e5:ab:0c:4f:0b:3e:a6:
fb:e1:d1:32:ef:48:db:3f:c0:e2:b5:db:92:37:9f:
1f:5e:6a:75:b9:22:76:e1:62:88:85:b3:08:6f:e8:
48:e3:c1:83:af:56:1f:83:e9:8f:5f:54:f9:3d:ee:
53:69:d4:ee:65:88:34:e6:94:8e:c7:f1:15:41:b8:
fa:38:e0:9f:3f:9d:8d:04:21:96:1e:03:9b:3f:44:
09:48:cf:d9:7d:78:eb:c2:e4:4f:68:fa:93:0e:70:
f0:1a:26:b2:d0:af:cb:f8:52:ce:c2:a5:8a:ca:37:
74:74:05:9e:67:a4:b2:7e:32:10:59:a2:2b:87:7d:
3f:90:65:42:dc:40:b2:28:74:6d:f8:7e:a4:03:da:
fc:eb:9d:c5:7d:42:7f:e2:5f:35:a3:e6:0d:9f:01:
bd:d6:88:07:1b:c7:1d:ce:3d:80:2c:1e:a4:bf:a5:
d3:2e:85:b8:88:41:2c:ed:77:91:77:c7:ef:a0:f1:
f0:18:95:66:06:9d:de:0e:a8:fd:70:06:ee:3a:1b:
3f:17:8e:de:61:d4:f2:a0:aa:f2:5f:3f:35:0b:f4:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:66:68:4C:EA:51:BA:7C:38:B0:AA:04:3B:B6:40:80:2A:3C:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F41D0F88699511F1AD34CAEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.56.0/22
156.233.216.0/22
156.239.128.0/22
Signature Algorithm: sha256WithRSAEncryption
76:40:dd:31:88:98:84:37:e0:74:3a:56:38:ed:c0:0d:33:86:
21:d2:93:ae:9d:7f:62:a0:fe:0d:86:e7:76:54:0e:45:be:ca:
68:f3:c2:dc:b3:8c:bf:b0:ef:cb:b7:7f:6d:dd:5c:7a:ca:e6:
07:9d:f2:8a:54:ac:ba:81:38:78:e1:36:8d:d6:51:2a:25:5a:
82:12:05:a1:9f:f8:86:70:68:41:58:73:a3:ef:d9:68:b6:47:
16:b4:14:3e:f0:84:3a:2f:bf:77:04:df:55:9a:d5:7e:07:b1:
c5:97:8e:b2:bf:de:85:34:fc:d0:c5:37:34:78:1a:04:e4:93:
57:cf:04:f4:c1:79:2b:d1:ff:2e:49:e6:be:0a:ac:69:6e:79:
f5:85:72:1e:cd:0f:0d:94:25:a4:8d:33:28:94:fe:a8:ad:f3:
a3:10:de:d1:fd:e1:19:77:c2:69:0a:24:eb:82:06:57:dd:24:
da:20:d1:c4:36:ff:c3:ec:37:cb:b6:9c:2a:d0:6b:d2:b7:58:
4b:ab:39:cc:2e:2c:fe:d1:48:2f:47:71:d7:c9:a8:eb:1b:b1:
ff:04:03:ad:3a:40:d2:aa:a7:28:71:64:bc:fe:d1:2b:f9:4a:
6b:d7:38:4d:14:5c:f3:bc:76:04:d5:cb:6b:da:f2:e5:45:0a:
b5:b8:72:31
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAb4sMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MTUxMzM1WhcNMjYwNzI0MTUxMzM1WjAYMRYw
FAYDVQQDEw02YTMxNjgyMy1lYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwnfuI2F1Gu+uuA2md3XMXoK59h9SNXhAGrdrgbv2WR0FaFE//eWrDE8L
Pqb74dEy70jbP8DitduSN58fXmp1uSJ24WKIhbMIb+hI48GDr1Yfg+mPX1T5Pe5T
adTuZYg05pSOx/EVQbj6OOCfP52NBCGWHgObP0QJSM/ZfXjrwuRPaPqTDnDwGiay
0K/L+FLOwqWKyjd0dAWeZ6SyfjIQWaIrh30/kGVC3ECyKHRt+H6kA9r8653FfUJ/
4l81o+YNnwG91ogHG8cdzj2ALB6kv6XTLoW4iEEs7XeRd8fvoPHwGJVmBp3eDqj9
cAbuOhs/F47eYdTyoKryXz81C/RDAQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFMGD
ZmhM6lG6fDiwqgQ7tkCAKjy0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNDFEMEY4ODY5OTUxMUYxQUQzNENBRUFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOU4AwQCnOnYAwQCnO+AMA0G
CSqGSIb3DQEBCwUAA4IBAQB2QN0xiJiEN+B0OlY47cANM4Yh0pOunX9ioP4Nhud2
VA5Fvspo88Lcs4y/sO/Lt39t3Vx6yuYHnfKKVKy6gTh44TaN1lEqJVqCEgWhn/iG
cGhBWHOj79lotkcWtBQ+8IQ6L793BN9VmtV+B7HFl46yv96FNPzQxTc0eBoE5JNX
zwT0wXkr0f8uSea+Cqxpbnn1hXIezQ8NlCWkjTMolP6orfOjEN7R/eEZd8JpCiTr
ggZX3STaINHENv/D7DfLtpwq0GvSt1hLqznMLiz+0UgvR3HXyajrG7H/BAOtOkDS
qqcocWS8/tEr+Upr1zhNFFzzvHYE1ctr2vLlRQq1uHIx
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:39 2026 by rpki-client