Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB5DA6CC58E711F1A7572B14CF1D38B0.roa
File: FB5DA6CC58E711F1A7572B14CF1D38B0.roa (raw, json)
Hash identifier: SFlqoeItg2w2Ck4eE0MfbGXAuicWWIqo5k3y1xOidxU=
Subject key identifier: F0:07:F0:9D:B9:8B:21:4C:CE:17:DC:FB:BC:E7:BF:AE:0D:40:66:FF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB5DA6CC58E711F1A7572B14CF1D38B0.roa
Signing time: Tue 26 May 2026 09:48:01 +0000
ROA not before: Tue 26 May 2026 09:47:52 +0000
ROA not after: Sun 28 Jun 2026 09:47:52 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113111 (0x1b9d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 09:47:52 2026 GMT
Not After : Jun 28 09:47:52 2026 GMT
Subject: CN=6a156c51-4c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:27:5a:92:23:a4:45:46:f9:6f:ea:5b:2c:
32:52:3a:09:3a:83:dc:04:cf:d1:3e:2b:3a:21:e3:
72:b9:4f:cb:a3:90:26:9b:93:42:de:be:cc:c8:01:
c7:ef:40:83:a7:4b:50:d0:68:6e:d9:32:2d:55:f9:
1f:4a:6a:08:eb:53:75:91:54:5f:28:87:eb:f1:23:
8c:2b:7c:d7:e5:d2:22:c4:f3:c4:1e:d2:e5:c6:64:
7a:62:26:3f:ca:d7:e9:b8:21:66:23:5f:7c:9c:db:
55:dc:10:6c:e0:28:76:dd:50:3f:84:b5:5e:e6:3d:
a0:ed:ea:49:d7:ce:13:99:52:15:68:f6:c4:bf:2d:
c1:d2:79:f6:15:4f:40:71:8b:da:9f:fb:84:c3:53:
07:45:fe:61:f5:32:2f:d2:63:de:6d:32:20:82:aa:
00:be:c9:ce:79:d6:cf:72:9b:82:df:4d:3c:4c:2a:
3b:16:5b:1c:b9:c3:10:64:fc:89:87:70:48:19:0b:
70:a2:cd:72:44:04:1a:87:7e:43:44:77:10:52:94:
74:e6:ed:42:3b:73:5f:83:56:dc:6b:97:ac:3b:82:
a2:ba:f7:26:17:ae:83:0c:97:70:64:9a:9a:75:13:
07:b3:9a:d2:36:e6:b9:b2:a7:a2:50:5d:80:a2:4b:
3e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:F0:9D:B9:8B:21:4C:CE:17:DC:FB:BC:E7:BF:AE:0D:40:66:FF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB5DA6CC58E711F1A7572B14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.147.255
Signature Algorithm: sha256WithRSAEncryption
95:a3:4d:c5:9d:87:14:b5:0d:88:6a:09:a4:d4:0a:f5:e8:81:
d9:2e:cb:93:08:9f:ca:9f:3f:26:b1:1c:b1:a2:cb:23:5f:16:
f0:31:82:5a:7d:5b:53:96:46:a6:85:31:6b:af:6e:4c:e3:07:
81:d2:2c:d7:44:15:f5:52:ad:b6:09:4c:e7:2d:d2:d4:5b:ad:
7a:92:5c:ff:65:93:12:c4:a9:a0:10:18:0f:d8:bf:51:7d:13:
fb:ef:bf:43:b9:20:de:73:44:7b:b5:dd:a1:25:02:02:87:1d:
d8:55:a0:1d:19:f5:72:88:60:6a:c7:10:7f:13:8c:52:c4:a3:
74:e7:7c:8f:ff:a4:42:f5:10:05:bd:68:8b:16:26:be:fb:e4:
3b:a8:86:24:6b:54:e9:6f:f4:35:79:99:65:b1:17:43:a1:18:
70:27:a2:2c:15:64:65:31:21:04:48:8c:ac:df:94:47:60:68:
7d:b7:bf:bf:91:28:cb:02:4b:67:70:b4:eb:e4:42:37:13:0f:
3b:7c:80:c0:98:8e:84:52:cf:2b:f2:18:c8:b6:1e:43:cd:1d:
89:95:50:a5:49:90:b0:78:9d:5c:90:67:34:f2:0f:a9:30:09:
f5:24:84:5b:a0:b3:a6:34:4c:ea:5d:24:a7:b9:54:52:5e:91:
23:1d:5f:f0
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbnXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI2MDk0NzUyWhcNMjYwNjI4MDk0NzUyWjAYMRYw
FAYDVQQDEw02YTE1NmM1MS00YzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs1QnWpIjpEVG+W/qWywyUjoJOoPcBM/RPis6IeNyuU/Lo5Amm5NC3r7M
yAHH70CDp0tQ0Ghu2TItVfkfSmoI61N1kVRfKIfr8SOMK3zX5dIixPPEHtLlxmR6
YiY/ytfpuCFmI198nNtV3BBs4Ch23VA/hLVe5j2g7epJ184TmVIVaPbEvy3B0nn2
FU9AcYvan/uEw1MHRf5h9TIv0mPebTIggqoAvsnOedbPcpuC3008TCo7FlscucMQ
ZPyJh3BIGQtwos1yRAQah35DRHcQUpR05u1CO3Nfg1bca5esO4KiuvcmF66DDJdw
ZJqadRMHs5rSNua5sqeiUF2Aoks+0wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPAH
8J25iyFMzhfc+7znv64NQGb/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQjVEQTZDQzU4RTcxMUYxQTc1NzJCMTRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec9oADBAKc9pAwDQYJKoZI
hvcNAQELBQADggEBAJWjTcWdhxS1DYhqCaTUCvXogdkuy5MIn8qfPyaxHLGiyyNf
FvAxglp9W1OWRqaFMWuvbkzjB4HSLNdEFfVSrbYJTOct0tRbrXqSXP9lkxLEqaAQ
GA/Yv1F9E/vvv0O5IN5zRHu13aElAgKHHdhVoB0Z9XKIYGrHEH8TjFLEo3TnfI//
pEL1EAW9aIsWJr775DuohiRrVOlv9DV5mWWxF0OhGHAnoiwVZGUxIQRIjKzflEdg
aH23v7+RKMsCS2dwtOvkQjcTDzt8gMCYjoRSzyvyGMi2HkPNHYmVUKVJkLB4nVyQ
ZzTyD6kwCfUkhFugs6Y0TOpdJKe5VFJekSMdX/A=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:05 2026 by rpki-client