Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C1BCBA535911F1B2E240B8CE1D38B0.roa
File: F9C1BCBA535911F1B2E240B8CE1D38B0.roa (raw, json)
Hash identifier: Zzbshtmh36uWvXO41CQMliSa12w1R3MHL3KRs7C+USU=
Subject key identifier: 4A:9A:05:D1:C6:AA:D5:2C:CE:32:AA:EC:62:14:34:14:CE:FA:40:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C1BCBA535911F1B2E240B8CE1D38B0.roa
Signing time: Tue 19 May 2026 08:08:53 +0000
ROA not before: Tue 19 May 2026 08:08:49 +0000
ROA not after: Fri 14 May 2027 08:08:49 +0000
asID: 135097
IP address blocks: 156.224.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112055 (0x1b5b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 08:08:49 2026 GMT
Not After : May 14 08:08:49 2027 GMT
Subject: CN=6a0c1a95-2b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:fa:b4:1a:39:91:d8:a7:36:3b:c9:c1:59:
63:44:46:ef:b0:88:d7:6f:63:7e:5f:50:c2:ab:03:
92:70:c4:08:bd:a4:5c:b8:90:25:99:ce:52:31:d3:
93:95:90:38:69:64:e7:8e:7f:95:b6:cc:56:72:92:
19:0b:3c:b8:ea:48:aa:b9:5b:2a:cb:c9:6f:f9:47:
24:29:bf:99:cf:38:a1:8a:f2:29:9b:a6:dd:9b:e2:
2c:30:c9:de:bb:c0:70:5f:2c:d7:27:ff:02:4a:aa:
0d:f1:14:c5:bf:cd:ba:99:99:91:3b:e4:6b:68:25:
f4:2c:0a:c3:b1:4c:e4:14:5e:5f:1b:aa:34:67:e9:
34:d0:ab:82:20:16:1e:c0:88:a3:cd:56:e1:87:b0:
26:7d:2a:a6:99:d9:84:67:7d:51:6a:fe:ef:2e:5e:
52:fb:9b:ec:5b:e7:df:e5:24:cb:ee:68:2c:1a:7b:
a8:6b:cb:95:6b:4e:a3:9e:15:6e:d3:94:13:7b:52:
69:08:06:50:bc:08:ee:04:49:d6:55:26:ee:e5:54:
77:82:6c:2a:5d:d1:06:40:56:be:92:68:8c:a3:07:
e8:d2:a8:76:7e:0b:2d:7e:48:10:47:ab:57:25:6d:
d1:83:f3:3c:70:a5:57:e7:1a:29:45:c9:88:62:b4:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9A:05:D1:C6:AA:D5:2C:CE:32:AA:EC:62:14:34:14:CE:FA:40:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9C1BCBA535911F1B2E240B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.128.0/17
Signature Algorithm: sha256WithRSAEncryption
78:67:ba:5a:9d:bc:58:89:2e:ee:c5:20:df:fc:17:64:f0:68:
97:2b:e0:97:90:7d:a3:62:25:30:ff:d4:e0:61:50:03:ff:c0:
67:23:07:91:7c:63:e9:37:18:2f:c3:e6:6f:36:ed:83:4b:e1:
47:8a:50:74:d8:f5:f1:53:0c:86:df:52:bb:a2:79:00:9a:40:
cb:1f:cf:cc:7a:bf:8f:4f:de:33:70:6b:14:b8:8e:14:8b:e9:
e2:8b:92:4d:a2:fd:2d:7f:ff:b7:97:ad:64:8d:fb:10:da:71:
98:7e:91:0e:1b:56:9e:88:45:cc:f8:55:14:9f:ce:22:c1:23:
c3:ca:ce:70:c1:2b:ad:7a:36:3a:3c:3e:fa:fa:40:e6:7f:f6:
28:e6:1d:8f:b1:a3:10:30:b2:70:49:60:cb:a3:9f:e2:bf:90:
1b:fc:2a:0f:1a:62:b2:bf:1e:29:ab:c1:5c:86:4b:54:c2:bd:
f6:72:d2:c8:b4:f4:7f:3c:66:e9:54:9b:e5:ae:a7:67:e3:4a:
3f:4b:e2:03:c9:29:a2:3d:9a:19:5b:43:de:14:ba:65:86:a6:
f5:94:3e:4c:7c:15:5b:67:dc:6a:ea:18:ba:65:ae:64:62:5c:
a5:63:65:5a:51:a4:db:ee:3d:c2:3b:cb:ba:ad:d5:23:8b:c2:
54:bc:0a:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbW3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTE5MDgwODQ5WhcNMjcwNTE0MDgwODQ5WjAYMRYw
FAYDVQQDEw02YTBjMWE5NS0yYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAppb6tBo5kdinNjvJwVljREbvsIjXb2N+X1DCqwOScMQIvaRcuJAlmc5S
MdOTlZA4aWTnjn+VtsxWcpIZCzy46kiquVsqy8lv+UckKb+ZzzihivIpm6bdm+Is
MMneu8BwXyzXJ/8CSqoN8RTFv826mZmRO+RraCX0LArDsUzkFF5fG6o0Z+k00KuC
IBYewIijzVbhh7AmfSqmmdmEZ31Rav7vLl5S+5vsW+ff5STL7mgsGnuoa8uVa06j
nhVu05QTe1JpCAZQvAjuBEnWVSbu5VR3gmwqXdEGQFa+kmiMowfo0qh2fgstfkgQ
R6tXJW3Rg/M8cKVX5xopRcmIYrRNowIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEqa
BdHGqtUszjKq7GIUNBTO+kCuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOUMxQkNCQTUzNTkxMUYxQjJFMjQwQjhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHnOCAMA0GCSqGSIb3DQEBCwUA
A4IBAQB4Z7panbxYiS7uxSDf/Bdk8GiXK+CXkH2jYiUw/9TgYVAD/8BnIweRfGPp
Nxgvw+ZvNu2DS+FHilB02PXxUwyG31K7onkAmkDLH8/Mer+PT94zcGsUuI4Ui+ni
i5JNov0tf/+3l61kjfsQ2nGYfpEOG1aeiEXM+FUUn84iwSPDys5wwSutejY6PD76
+kDmf/Yo5h2PsaMQMLJwSWDLo5/iv5Ab/CoPGmKyvx4pq8FchktUwr32ctLItPR/
PGbpVJvlrqdn40o/S+IDySmiPZoZW0PeFLplhqb1lD5MfBVbZ9xq6hi6Za5kYlyl
Y2VaUaTb7j3CO8u6rdUji8JUvAoP
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:07 2026 by rpki-client