Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0E253E45A411F196E8E3CACE1D38B0.roa
File: 1B0E253E45A411F196E8E3CACE1D38B0.roa (raw, json)
Hash identifier: z7LgNZ6qKXQZ32gUIWaKzdYrApEN77aL+3JIbqdqeUY=
Subject key identifier: A0:A9:40:E4:A7:99:7B:EF:60:81:BD:AF:6E:F0:1A:42:3B:51:2E:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0FE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0E253E45A411F196E8E3CACE1D38B0.roa
Signing time: Fri 01 May 2026 21:24:16 +0000
ROA not before: Fri 01 May 2026 21:24:11 +0000
ROA not after: Fri 12 Jun 2026 21:24:11 +0000
asID: 140925
IP address blocks: 156.238.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110846 (0x1b0fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:24:11 2026 GMT
Not After : Jun 12 21:24:11 2026 GMT
Subject: CN=69f51a00-2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cf:a9:d6:bf:36:34:6c:4a:6c:e0:64:11:63:
8c:a6:e4:07:16:10:9a:89:50:44:15:a5:01:28:e7:
4d:05:69:a5:8c:a7:e1:d6:99:33:8d:d2:95:90:a4:
cd:6d:c2:4e:e6:fa:d9:08:bc:ab:32:c7:da:96:4b:
43:8e:69:c3:ab:b0:ff:a4:43:72:97:24:38:77:5f:
7b:3e:0e:f3:e0:0d:b1:ae:1f:df:85:ac:89:45:a9:
48:af:5f:b8:1b:db:74:4f:45:e7:3e:c9:da:b1:68:
17:24:72:a9:7c:ee:9c:94:3c:3e:ef:07:8a:f1:f9:
90:79:08:4a:50:50:e3:03:fe:2e:51:77:9c:57:e9:
06:4e:74:89:07:6c:e5:54:05:ad:82:9e:bb:84:fa:
75:e9:b1:d9:1f:8b:ea:20:2c:09:52:16:bd:a5:28:
dd:82:14:e9:14:a0:52:ce:7f:d8:4b:89:99:f6:c7:
c6:f2:8e:de:ca:93:66:da:57:d2:b3:a6:31:20:1f:
a9:ac:a5:5d:b3:e7:d5:38:95:4c:a3:24:93:fc:c8:
0b:1a:e3:6f:88:36:05:ea:a1:4a:bf:3c:c9:7d:d0:
69:29:fd:5e:c9:8c:5e:ef:f3:34:bc:96:9e:66:3f:
0e:2f:ef:e4:4b:d2:94:53:12:22:93:d6:8f:3a:ef:
69:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A9:40:E4:A7:99:7B:EF:60:81:BD:AF:6E:F0:1A:42:3B:51:2E:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B0E253E45A411F196E8E3CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:90:d7:27:61:c6:77:8c:eb:82:6a:ae:76:33:b5:a1:27:3c:
89:5d:7c:de:18:57:5e:4f:74:1d:28:69:88:05:61:9e:38:a2:
0a:58:94:be:5c:99:ef:3c:ab:5a:fa:17:7b:df:21:51:31:a5:
38:b5:31:15:f9:1c:2c:c6:00:28:93:6f:b9:0c:34:6c:29:ad:
13:55:41:8e:e6:1d:41:e3:8d:8b:0a:18:cc:ba:98:40:35:e4:
45:ea:37:00:ef:53:d5:87:e0:5a:3a:d2:88:d5:ff:53:43:01:
ac:9e:d6:d2:b5:23:d1:68:e3:b9:4d:65:05:e5:ae:9e:3a:f0:
67:0e:dd:7f:60:6c:6b:89:e3:cc:5f:ac:c2:23:f6:80:31:95:
65:39:65:cc:4e:57:37:0d:fd:2f:32:25:5f:de:1d:9d:88:ba:
9b:d1:a4:3b:29:7b:6d:fd:6e:08:19:89:af:53:cb:01:a0:fe:
0e:88:c9:20:22:b0:94:07:fb:33:c9:06:97:4b:30:24:0f:f0:
41:15:92:83:04:50:45:7a:ef:7f:13:d1:ba:03:32:e9:4b:30:
d6:39:cc:da:f0:0e:e7:38:4f:26:72:75:1e:33:c2:b6:63:e1:
b4:0a:ef:f6:43:ba:aa:17:2d:04:39:4f:1d:36:b4:64:9b:a3:
71:e7:1f:f3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbD+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMjEyNDExWhcNMjYwNjEyMjEyNDExWjAYMRYw
FAYDVQQDEw02OWY1MWEwMC0yZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxs+p1r82NGxKbOBkEWOMpuQHFhCaiVBEFaUBKOdNBWmljKfh1pkzjdKV
kKTNbcJO5vrZCLyrMsfalktDjmnDq7D/pENylyQ4d197Pg7z4A2xrh/fhayJRalI
r1+4G9t0T0XnPsnasWgXJHKpfO6clDw+7weK8fmQeQhKUFDjA/4uUXecV+kGTnSJ
B2zlVAWtgp67hPp16bHZH4vqICwJUha9pSjdghTpFKBSzn/YS4mZ9sfG8o7eypNm
2lfSs6YxIB+prKVds+fVOJVMoyST/MgLGuNviDYF6qFKvzzJfdBpKf1eyYxe7/M0
vJaeZj8OL+/kS9KUUxIik9aPOu9pFwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKCp
QOSnmXvvYIG9r27wGkI7US5yMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xQjBFMjUzRTQ1QTQxMUYxOTZFOEUzQ0FDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5wMA0GCSqGSIb3DQEBCwUA
A4IBAQBekNcnYcZ3jOuCaq52M7WhJzyJXXzeGFdeT3QdKGmIBWGeOKIKWJS+XJnv
PKta+hd73yFRMaU4tTEV+RwsxgAok2+5DDRsKa0TVUGO5h1B442LChjMuphANeRF
6jcA71PVh+BaOtKI1f9TQwGsntbStSPRaOO5TWUF5a6eOvBnDt1/YGxriePMX6zC
I/aAMZVlOWXMTlc3Df0vMiVf3h2diLqb0aQ7KXtt/W4IGYmvU8sBoP4OiMkgIrCU
B/szyQaXSzAkD/BBFZKDBFBFeu9/E9G6AzLpSzDWOcza8A7nOE8mcnUeM8K2Y+G0
Cu/2Q7qqFy0EOU8dNrRkm6Nx5x/z
-----END CERTIFICATE-----
Generated at Wed May 13 11:56:25 2026 by rpki-client