Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FADF84F21F9111F1B6CD16E0DAE4EC9C.roa
File: FADF84F21F9111F1B6CD16E0DAE4EC9C.roa (raw, json)
Hash identifier: dcK9DQXMf2lPLJHbbUqNdwFHhhwUznZsAEpsV1NxRRc=
Subject key identifier: 9A:2D:61:04:8E:4E:7C:8E:9D:01:F7:D9:54:02:47:C6:E9:67:56:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A510
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FADF84F21F9111F1B6CD16E0DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 10:38:47 +0000
ROA not before: Sat 14 Mar 2026 10:38:41 +0000
ROA not after: Sun 31 May 2026 10:38:41 +0000
asID: 399077
IP address blocks: 156.240.204.0/24 maxlen: 24
156.240.205.0/24 maxlen: 24
156.240.206.0/24 maxlen: 24
156.240.207.0/24 maxlen: 24
156.240.208.0/24 maxlen: 24
156.240.209.0/24 maxlen: 24
156.240.210.0/24 maxlen: 24
156.240.211.0/24 maxlen: 24
156.240.212.0/24 maxlen: 24
156.240.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107792 (0x1a510)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 10:38:41 2026 GMT
Not After : May 31 10:38:41 2026 GMT
Subject: CN=69b53ab7-6c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:1a:4f:06:62:3d:47:a9:43:5e:6d:ea:cc:
02:a8:a7:f2:ea:15:33:05:5e:66:a9:fb:2b:45:c1:
24:87:42:68:99:d3:19:d0:c0:2e:ce:f8:bf:e9:f2:
7b:72:f9:68:cc:40:5e:39:c9:f5:76:6d:bc:eb:f8:
30:a1:e6:b0:a2:e9:45:77:d0:11:27:3c:6a:45:25:
a9:e6:b5:ee:0f:e0:09:5a:0f:b7:c9:dd:1e:0d:e7:
b6:f6:d0:72:c4:79:f6:84:09:19:14:ee:ec:5f:f5:
87:85:60:92:81:da:86:4f:1f:b4:28:2b:04:e4:93:
4c:7a:a7:c5:43:20:9f:d9:60:14:6f:4c:68:58:da:
d4:96:da:2d:92:61:96:b8:b5:25:75:17:1f:26:ad:
bb:9d:73:48:81:48:0c:96:61:61:45:86:e7:58:c0:
87:0b:37:a2:02:3d:f7:b1:43:4c:b1:e7:a9:18:48:
22:6f:6c:37:af:5c:dc:57:ae:0b:8f:73:a0:37:92:
f7:f6:a3:c7:7a:fa:e0:66:38:ce:58:d6:e3:eb:76:
4c:7d:da:d5:f5:39:e9:ad:c8:e1:57:16:20:66:bd:
bd:5b:5e:bc:55:a9:08:e3:41:5e:7b:0e:35:7e:32:
42:ad:30:b5:73:c4:63:3a:74:43:f6:8b:ab:5e:bf:
35:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2D:61:04:8E:4E:7C:8E:9D:01:F7:D9:54:02:47:C6:E9:67:56:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FADF84F21F9111F1B6CD16E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.204.0-156.240.213.255
Signature Algorithm: sha256WithRSAEncryption
30:ce:82:bf:0f:a0:ae:8f:3e:56:7d:8c:05:78:fd:c6:2c:dd:
84:c2:4e:de:88:38:90:57:3b:16:9c:4a:8d:8d:aa:b5:d1:3d:
e0:a5:6e:6c:b5:f6:eb:79:01:c5:bb:fc:0f:36:4f:17:ef:dd:
31:b4:27:8f:05:6e:e7:61:fd:d6:6b:ab:98:a9:59:91:93:0b:
fe:45:98:7b:b4:2e:f0:e7:17:de:d0:d3:22:1f:e5:30:89:1b:
15:d1:59:ac:87:d3:33:e1:2b:2d:f9:5b:3a:9e:46:78:f9:d4:
91:90:d9:5a:bd:b6:c8:7e:17:85:ae:ca:7c:9e:a3:2b:d1:f3:
57:d1:d1:91:6b:e2:44:71:85:7e:70:c9:e4:9e:6c:4a:e3:ec:
2e:8e:3c:01:68:36:3c:aa:6e:5b:02:8b:6f:03:84:c1:69:f2:
d5:04:a3:1d:37:9e:83:02:c3:d8:3f:86:66:d8:76:d2:fd:cb:
bd:eb:4e:b7:5d:76:25:b3:db:d3:d7:17:d4:06:77:f6:d2:60:
a6:bd:dc:e9:b6:48:0a:fe:39:53:12:73:bf:7d:2c:6e:af:9a:
2d:e2:e0:7f:66:dc:4e:82:7a:f1:ec:2d:5e:9b:8b:6a:22:57:
7e:c6:71:ab:e6:5f:e4:6b:ae:e7:7e:77:93:8d:4c:63:ac:97:
72:9e:12:64
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaUQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE0MTAzODQxWhcNMjYwNTMxMTAzODQxWjAYMRYw
FAYDVQQDEw02OWI1M2FiNy02YzVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArioaTwZiPUepQ15t6swCqKfy6hUzBV5mqfsrRcEkh0JomdMZ0MAuzvi/
6fJ7cvlozEBeOcn1dm286/gwoeawoulFd9ARJzxqRSWp5rXuD+AJWg+3yd0eDee2
9tByxHn2hAkZFO7sX/WHhWCSgdqGTx+0KCsE5JNMeqfFQyCf2WAUb0xoWNrUltot
kmGWuLUldRcfJq27nXNIgUgMlmFhRYbnWMCHCzeiAj33sUNMseepGEgib2w3r1zc
V64Lj3OgN5L39qPHevrgZjjOWNbj63ZMfdrV9TnprcjhVxYgZr29W168VakI40Fe
ew41fjJCrTC1c8RjOnRD9ourXr81ewIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJot
YQSOTnyOnQH32VQCR8bpZ1bvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQURGODRGMjFGOTExMUYxQjZDRDE2RTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc8MwDBAGc8NQwDQYJKoZI
hvcNAQELBQADggEBADDOgr8PoK6PPlZ9jAV4/cYs3YTCTt6IOJBXOxacSo2NqrXR
PeClbmy19ut5AcW7/A82Txfv3TG0J48Fbudh/dZrq5ipWZGTC/5FmHu0LvDnF97Q
0yIf5TCJGxXRWayH0zPhKy35WzqeRnj51JGQ2Vq9tsh+F4WuynyeoyvR81fR0ZFr
4kRxhX5wyeSebErj7C6OPAFoNjyqblsCi28DhMFp8tUEox03noMCw9g/hmbYdtL9
y73rTrdddiWz29PXF9QGd/bSYKa93Om2SAr+OVMSc799LG6vmi3i4H9m3E6CevHs
LV6bi2oiV37GcavmX+Rrrud+d5ONTGOsl3KeEmQ=
-----END CERTIFICATE-----
Generated at Sat Mar 21 21:28:18 2026 by rpki-client