Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12A13C32479E11F1AAA322DECE1D38B0.roa
File: 12A13C32479E11F1AAA322DECE1D38B0.roa (raw, json)
Hash identifier: 7n9L4gnJOPFtW4TYNTyjJc5IWpAOPRPrdx688CFHICs=
Subject key identifier: 8B:3E:2D:AC:B9:9F:1F:B6:02:7C:EE:CE:EC:86:52:D0:C2:F8:BF:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B16D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12A13C32479E11F1AAA322DECE1D38B0.roa
Signing time: Mon 04 May 2026 09:46:07 +0000
ROA not before: Mon 04 May 2026 09:46:02 +0000
ROA not after: Tue 11 May 2027 09:46:02 +0000
asID: 133929
IP address blocks: 156.224.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110957 (0x1b16d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 09:46:02 2026 GMT
Not After : May 11 09:46:02 2027 GMT
Subject: CN=69f86adf-a654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:df:b8:c1:94:17:82:88:b7:85:68:02:09:c6:
78:88:de:3a:92:18:55:5b:ae:a6:72:e0:32:c3:af:
d3:4d:e5:d1:33:81:17:33:34:dc:7a:80:23:c1:1b:
9c:c0:a7:e6:c8:0e:99:f7:68:01:b2:35:c3:76:a3:
03:98:b5:63:8d:57:c3:7b:30:74:31:a8:32:d6:51:
df:9a:4a:d0:59:0e:13:4a:7d:00:83:cd:a6:c9:7e:
e6:c1:4a:90:9c:4a:49:c8:1d:b6:44:87:df:a6:ae:
a1:57:8a:7d:e5:58:d1:7b:5c:92:8f:3e:0f:2e:92:
81:b2:80:36:82:c8:b8:a2:02:97:37:80:82:f2:ff:
37:6b:af:bb:4c:92:7c:0f:bb:ab:e4:04:eb:9f:15:
7c:54:52:26:94:df:f7:8a:37:eb:4f:42:df:0c:fc:
73:81:cf:cb:5c:6d:68:dd:8c:6a:9a:9d:90:d4:73:
18:fd:08:24:5a:72:b4:16:fe:f0:1a:6c:97:68:8b:
8b:97:76:06:49:87:8f:95:bc:af:c3:2c:27:7e:93:
97:b0:b0:40:b6:a8:21:19:79:b8:9b:d4:40:19:c7:
4c:d5:72:c9:de:4e:0a:b6:29:5c:ae:a8:18:4f:88:
9b:79:3b:2c:09:a1:c7:ea:4a:2a:27:24:29:ee:bb:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3E:2D:AC:B9:9F:1F:B6:02:7C:EE:CE:EC:86:52:D0:C2:F8:BF:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12A13C32479E11F1AAA322DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.224.1.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fc:71:38:aa:e5:6a:c4:89:be:45:78:c2:94:3e:a7:da:60:
54:d0:2a:33:74:ba:95:d6:94:a1:46:36:44:5d:03:34:fa:39:
58:ae:1f:f3:e3:cf:8a:31:1d:24:7d:dd:f7:a3:5c:c5:56:59:
df:b8:f9:0f:58:b2:19:89:42:3f:aa:73:e0:a7:9d:43:7f:5c:
99:45:f7:b7:fc:c2:63:86:ec:f6:1e:84:df:fa:11:88:6c:38:
93:04:40:8f:0c:23:ae:86:f8:19:40:75:f4:60:2b:56:b5:b9:
1a:80:c4:93:ec:b2:b9:3a:b1:97:c8:69:20:ae:92:df:7f:e0:
90:c5:89:c9:d2:66:06:c8:23:55:b4:88:10:60:1b:fe:b9:18:
6f:86:70:b9:57:05:ec:f3:b1:1a:1d:c7:e3:2a:d2:33:2f:4f:
0b:ec:7a:22:08:f0:85:75:0f:ce:eb:17:c2:61:62:6f:67:54:
ad:ce:49:cb:95:63:d7:02:ac:eb:e0:9d:24:28:c3:ed:10:93:
8e:f5:6b:bd:2a:3c:83:7b:1d:60:52:2c:a7:aa:07:72:77:6a:
b9:1f:ef:47:78:0c:fd:5b:9c:34:fe:03:86:8b:bf:41:21:60:
a7:ee:c4:b2:83:45:02:86:28:d1:ec:ce:56:32:16:b0:16:4d:
91:0e:26:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbFtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA0MDk0NjAyWhcNMjcwNTExMDk0NjAyWjAYMRYw
FAYDVQQDEw02OWY4NmFkZi1hNjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr9+4wZQXgoi3hWgCCcZ4iN46khhVW66mcuAyw6/TTeXRM4EXMzTceoAj
wRucwKfmyA6Z92gBsjXDdqMDmLVjjVfDezB0Magy1lHfmkrQWQ4TSn0Ag82myX7m
wUqQnEpJyB22RIffpq6hV4p95VjRe1ySjz4PLpKBsoA2gsi4ogKXN4CC8v83a6+7
TJJ8D7ur5ATrnxV8VFImlN/3ijfrT0LfDPxzgc/LXG1o3Yxqmp2Q1HMY/QgkWnK0
Fv7wGmyXaIuLl3YGSYePlbyvwywnfpOXsLBAtqghGXm4m9RAGcdM1XLJ3k4Ktilc
rqgYT4ibeTssCaHH6koqJyQp7ru/owIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIs+
Lay5nx+2AnzuzuyGUtDC+L+tMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMkExM0MzMjQ3OUUxMUYxQUFBMzIyREVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOABMA0GCSqGSIb3DQEBCwUA
A4IBAQCs/HE4quVqxIm+RXjClD6n2mBU0CozdLqV1pShRjZEXQM0+jlYrh/z48+K
MR0kfd33o1zFVlnfuPkPWLIZiUI/qnPgp51Df1yZRfe3/MJjhuz2HoTf+hGIbDiT
BECPDCOuhvgZQHX0YCtWtbkagMST7LK5OrGXyGkgrpLff+CQxYnJ0mYGyCNVtIgQ
YBv+uRhvhnC5VwXs87EaHcfjKtIzL08L7HoiCPCFdQ/O6xfCYWJvZ1StzknLlWPX
Aqzr4J0kKMPtEJOO9Wu9KjyDex1gUiynqgdyd2q5H+9HeAz9W5w0/gOGi79BIWCn
7sSyg0UChijR7M5WMhawFk2RDiae
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:04 2026 by rpki-client