Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17BD5132861511F1AC4170FBCE1D38B0.roa
File: 17BD5132861511F1AC4170FBCE1D38B0.roa (raw, json)
Hash identifier: JPgJVGWMnJdEWMrOPOeMad6mSoADxso6MsHXrmf2MBU=
Subject key identifier: B0:61:EB:54:C8:A1:25:6C:AC:D5:03:30:78:2F:4A:2B:D8:41:99:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17BD5132861511F1AC4170FBCE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:34:18 +0000
ROA not before: Wed 22 Jul 2026 21:34:14 +0000
ROA not after: Thu 27 Aug 2026 21:34:14 +0000
asID: 63139
IP address blocks: 156.227.199.0/24 maxlen: 24
156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
156.227.224.0/23 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.227.252.0/22 maxlen: 24
156.229.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116665 (0x1c7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 21:34:14 2026 GMT
Not After : Aug 27 21:34:14 2026 GMT
Subject: CN=6a61375a-33b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:06:46:4d:94:dd:ec:8e:27:db:a2:77:d1:
a3:b4:41:57:8a:8c:5a:70:a9:d7:6d:b5:5d:ef:e9:
b7:b2:9c:5c:37:3a:1b:4f:a8:a9:c6:4b:6f:1d:1c:
e8:c8:f3:fa:cf:ae:76:e7:b8:17:7a:49:24:b5:39:
57:88:c7:67:61:d9:4b:8a:d8:12:5e:63:f7:92:58:
07:7a:60:37:b1:f3:30:52:54:9d:f1:e9:b2:66:51:
83:46:85:46:7c:ad:48:9e:b9:09:51:a3:f4:08:d2:
34:74:b0:ed:9a:94:0f:d3:b6:82:60:a7:cc:49:2b:
76:98:4d:07:52:a3:a6:9c:8e:e5:a1:0d:6a:16:10:
0d:9c:a5:47:e3:c8:ed:85:47:5c:97:13:a0:26:6b:
8e:fb:37:31:77:d8:d7:b5:76:98:41:7a:aa:6d:ec:
58:04:da:ff:00:d4:2e:fb:46:5b:fb:c2:b3:0a:65:
ad:17:d2:d0:75:39:ec:c1:71:9e:df:f6:cd:80:b5:
78:bc:96:8a:96:41:e4:dd:aa:4c:b4:40:fe:a8:54:
b3:19:b3:6c:20:55:dd:d0:4e:ab:00:dc:90:8f:76:
ea:e2:3d:1b:96:64:56:5d:9e:91:1b:8f:54:49:8b:
06:b6:a5:30:28:dd:9c:11:6c:60:09:cc:6d:b7:96:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:EB:54:C8:A1:25:6C:AC:D5:03:30:78:2F:4A:2B:D8:41:99:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17BD5132861511F1AC4170FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.199.0-156.227.202.255
156.227.220.0-156.227.231.255
156.227.252.0/22
156.229.2.0/23
Signature Algorithm: sha256WithRSAEncryption
10:0f:fe:51:3c:c1:03:37:dc:f4:cc:c7:94:72:14:42:bf:2a:
ed:a9:d4:0f:eb:6c:83:e6:f1:4d:7e:9b:d2:66:94:90:a6:0f:
b0:fe:42:56:7b:10:95:21:77:1f:2f:f7:54:d6:2a:0e:c6:38:
3e:7d:16:4e:75:de:23:6d:d3:7f:ff:b3:ce:f0:0f:8f:14:b3:
fc:2b:01:d9:c1:11:c8:8e:23:88:72:20:aa:a8:cf:c4:37:01:
9f:0a:28:df:8b:5e:8a:5a:4f:a7:24:a0:fb:8d:a3:c8:8a:67:
5a:5d:e8:80:c8:dd:a9:4f:b8:9c:80:a5:59:d5:a9:d7:40:e5:
7a:6d:ba:79:43:b5:34:d4:73:84:de:be:e1:30:de:c1:f9:d4:
5d:6a:8d:68:a3:df:a6:69:c6:60:77:42:71:56:79:84:ac:d3:
11:87:3e:8e:07:ba:a6:8d:9e:eb:d7:10:31:f1:2c:4f:4d:d0:
03:08:ce:75:c2:a2:ee:1c:65:57:df:a8:b2:d1:42:6c:bf:4b:
67:f0:1a:c0:ea:46:89:06:e2:60:69:7c:d5:17:de:15:36:0f:
6c:24:2c:f8:a4:be:e4:35:3c:53:c3:2f:4d:0a:3c:9a:3a:2e:
fd:f6:2f:34:fb:88:9f:de:ab:44:5b:99:fc:bb:7f:75:42:40:
a8:42:b3:c1
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAce5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMjEzNDE0WhcNMjYwODI3MjEzNDE0WjAYMRYw
FAYDVQQDEw02YTYxMzc1YS0zM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvT0GRk2U3eyOJ9uid9GjtEFXioxacKnXbbVd7+m3spxcNzobT6ipxktv
HRzoyPP6z65257gXekkktTlXiMdnYdlLitgSXmP3klgHemA3sfMwUlSd8emyZlGD
RoVGfK1InrkJUaP0CNI0dLDtmpQP07aCYKfMSSt2mE0HUqOmnI7loQ1qFhANnKVH
48jthUdclxOgJmuO+zcxd9jXtXaYQXqqbexYBNr/ANQu+0Zb+8KzCmWtF9LQdTns
wXGe3/bNgLV4vJaKlkHk3apMtED+qFSzGbNsIFXd0E6rANyQj3bq4j0blmRWXZ6R
G49USYsGtqUwKN2cEWxgCcxtt5ZvmQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFLBh
61TIoSVsrNUDMHgvSivYQZmxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xN0JENTEzMjg2MTUxMUYxQUM0MTcwRkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBACc48cDBACc48owDAMEApzj
3AMEA5zj4AMEApzj/AMEAZzlAjANBgkqhkiG9w0BAQsFAAOCAQEAEA/+UTzBAzfc
9MzHlHIUQr8q7anUD+tsg+bxTX6b0maUkKYPsP5CVnsQlSF3Hy/3VNYqDsY4Pn0W
TnXeI23Tf/+zzvAPjxSz/CsB2cERyI4jiHIgqqjPxDcBnwoo34teilpPpySg+42j
yIpnWl3ogMjdqU+4nIClWdWp10Dlem26eUO1NNRzhN6+4TDewfnUXWqNaKPfpmnG
YHdCcVZ5hKzTEYc+jge6po2e69cQMfEsT03QAwjOdcKi7hxlV9+ostFCbL9LZ/Aa
wOpGiQbiYGl81RfeFTYPbCQs+KS+5DU8U8MvTQo8mjou/fYvNPuIn96rRFuZ/Lt/
dUJAqEKzwQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:15:05 2026 by rpki-client