Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEA508211311F1B2E240A9DAE4EC9C.roa
File: 05EEA508211311F1B2E240A9DAE4EC9C.roa (raw, json)
Hash identifier: z+dHZ1TZ2Y3GsYyCctlS2DA+7rlbGFSVS7jzL2hfOro=
Subject key identifier: C8:A5:A7:F3:79:41:D2:AF:B4:34:DD:C8:D6:E8:11:F3:8D:04:39:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A58C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEA508211311F1B2E240A9DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 08:35:02 +0000
ROA not before: Mon 16 Mar 2026 08:34:57 +0000
ROA not after: Fri 16 Mar 2029 08:34:57 +0000
asID: 17561
IP address blocks: 156.247.193.0/24 maxlen: 24
156.247.194.0/24 maxlen: 24
156.247.195.0/24 maxlen: 24
156.247.196.0/24 maxlen: 24
156.247.197.0/24 maxlen: 24
156.247.198.0/24 maxlen: 24
156.247.199.0/24 maxlen: 24
156.247.200.0/24 maxlen: 24
156.247.201.0/24 maxlen: 24
156.247.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107916 (0x1a58c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 08:34:57 2026 GMT
Not After : Mar 16 08:34:57 2029 GMT
Subject: CN=69b7c0b6-914c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:37:71:bb:6b:db:0b:45:27:dc:f5:27:59:cd:
67:3d:9d:aa:93:a3:53:dc:83:46:a7:c2:0b:d0:24:
42:ab:df:87:23:49:30:dd:30:b9:bc:4b:d9:5b:7c:
5c:ae:c5:ae:14:c3:1a:a4:7d:b4:da:12:1d:56:3c:
b2:63:c2:7f:33:71:85:55:5b:a0:96:e5:b2:b7:3a:
cc:91:9e:f9:3e:55:32:60:1f:ee:ce:47:96:33:f7:
d4:ba:47:b8:37:88:5a:41:22:0a:20:b8:fe:ed:d7:
32:0b:d1:7f:58:7e:fc:05:52:fd:4e:61:61:09:e1:
8d:19:0c:30:7f:c3:a1:3c:de:2b:e5:1d:62:a8:86:
05:78:1d:e7:e0:ea:f5:ab:81:3c:e7:3f:b2:be:95:
e7:41:72:a4:b3:a2:8a:1c:6b:2d:68:a3:68:82:c7:
90:2c:39:bc:44:f2:be:30:3d:43:0d:26:f9:f2:1f:
0b:dd:4f:a6:5c:81:1c:ff:7d:e7:56:d2:c3:87:2c:
c5:a0:fd:94:0b:d2:cc:ff:ca:9b:9c:e4:63:d6:95:
9b:5a:72:43:4b:90:c3:48:fa:3e:a2:42:c2:95:4d:
af:cc:b0:e3:c8:23:df:87:1f:24:8e:72:5e:0e:f0:
be:6d:c5:8e:e1:87:5e:d7:6c:79:cc:18:41:c9:07:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A5:A7:F3:79:41:D2:AF:B4:34:DD:C8:D6:E8:11:F3:8D:04:39:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05EEA508211311F1B2E240A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.193.0-156.247.202.255
Signature Algorithm: sha256WithRSAEncryption
15:a7:cd:53:f2:11:55:5c:97:82:4f:2e:df:97:30:e1:71:5b:
8b:6b:0d:d0:b9:52:3a:9e:5e:84:25:03:f4:68:ed:c1:3a:ad:
01:9c:d2:7b:7e:61:ad:50:10:9c:b2:53:0c:9d:6a:e6:7d:2d:
4d:03:ea:72:f3:e5:3e:ad:cb:d6:1e:7b:71:c0:d2:a1:aa:a3:
c8:80:9f:48:ea:be:be:cf:53:53:f0:c8:f9:47:6a:54:c2:50:
df:49:b1:a1:d0:6f:a9:1e:e9:63:53:fd:ed:67:c5:0c:8c:05:
e2:fe:50:ce:08:b9:ae:57:66:e2:c0:6c:66:fa:6b:8d:d6:6d:
3b:3e:0c:40:08:ec:64:85:0d:f6:3e:44:ab:9a:e7:61:d3:a8:
83:e7:25:8a:5c:7e:c1:28:0b:1b:d4:a7:28:58:f1:4f:ed:ab:
b6:45:6c:e0:1e:07:51:06:76:2b:d6:fe:48:0e:1d:07:54:4e:
fd:2c:3b:9e:c2:9a:92:a1:54:5c:72:9b:02:d2:2c:62:ec:55:
77:be:39:24:3e:d9:d2:74:3b:1d:7f:c1:81:e7:8c:70:93:82:
3c:f5:17:e1:65:8a:8b:4f:51:1f:58:b7:2d:57:df:b3:bd:83:
b4:18:7e:9c:27:57:bc:c8:ad:b5:e0:91:1b:77:de:bd:1c:6f:
a0:ad:0a:52
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaWMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE2MDgzNDU3WhcNMjkwMzE2MDgzNDU3WjAYMRYw
FAYDVQQDEw02OWI3YzBiNi05MTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvDdxu2vbC0Un3PUnWc1nPZ2qk6NT3INGp8IL0CRCq9+HI0kw3TC5vEvZ
W3xcrsWuFMMapH202hIdVjyyY8J/M3GFVVugluWytzrMkZ75PlUyYB/uzkeWM/fU
uke4N4haQSIKILj+7dcyC9F/WH78BVL9TmFhCeGNGQwwf8OhPN4r5R1iqIYFeB3n
4Or1q4E85z+yvpXnQXKks6KKHGstaKNogseQLDm8RPK+MD1DDSb58h8L3U+mXIEc
/33nVtLDhyzFoP2UC9LM/8qbnORj1pWbWnJDS5DDSPo+okLClU2vzLDjyCPfhx8k
jnJeDvC+bcWO4Yde12x5zBhByQdx5QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMil
p/N5QdKvtDTdyNboEfONBDmmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNUVFQTUwODIxMTMxMUYxQjJFMjQwQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc98EDBACc98owDQYJKoZI
hvcNAQELBQADggEBABWnzVPyEVVcl4JPLt+XMOFxW4trDdC5UjqeXoQlA/Ro7cE6
rQGc0nt+Ya1QEJyyUwydauZ9LU0D6nLz5T6ty9Yee3HA0qGqo8iAn0jqvr7PU1Pw
yPlHalTCUN9JsaHQb6ke6WNT/e1nxQyMBeL+UM4Iua5XZuLAbGb6a43WbTs+DEAI
7GSFDfY+RKua52HTqIPnJYpcfsEoCxvUpyhY8U/tq7ZFbOAeB1EGdivW/kgOHQdU
Tv0sO57CmpKhVFxymwLSLGLsVXe+OSQ+2dJ0Ox1/wYHnjHCTgjz1F+FliotPUR9Y
ty1X37O9g7QYfpwnV7zIrbXgkRt33r0cb6CtClI=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:51 2026 by rpki-client