Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BA90A7A3E6611F19AAA0FA8CE1D38B0.roa
File: 2BA90A7A3E6611F19AAA0FA8CE1D38B0.roa (raw, json)
Hash identifier: NIgQJiOeP6qhC4n45PA/iqeLtFs79uInJV53zyW7k5M=
Subject key identifier: F8:B2:BC:3D:EB:23:E1:5B:A7:B9:DB:D7:5A:12:DB:8F:B5:65:E3:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BA90A7A3E6611F19AAA0FA8CE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:13:17 +0000
ROA not before: Wed 22 Apr 2026 16:13:12 +0000
ROA not after: Tue 09 Jun 2026 16:13:12 +0000
asID: 395793
IP address blocks: 156.225.15.0/24 maxlen: 24
156.228.15.0/24 maxlen: 24
156.228.62.0/24 maxlen: 24
156.228.210.0/24 maxlen: 24
156.228.211.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110137 (0x1ae39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:13:12 2026 GMT
Not After : Jun 9 16:13:12 2026 GMT
Subject: CN=69e8f39d-672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:3d:f7:08:e0:1c:ea:80:df:8d:cb:0c:07:
64:71:73:6a:c5:61:9e:3d:15:7b:34:59:ef:08:83:
2b:50:f8:ff:67:d8:f4:a7:58:08:0b:e2:cd:94:a6:
6c:81:7e:67:b4:ab:8e:6e:e0:8d:04:92:d3:53:f9:
cc:47:d6:cb:3d:e6:6a:bc:f9:c2:64:16:db:76:dc:
26:a5:b2:4d:a2:d5:0e:35:4e:0f:35:21:b9:73:5b:
d1:46:6c:37:f0:cd:3a:a5:a2:1a:48:fd:48:68:a3:
90:42:f1:1f:40:28:df:c7:c9:10:6a:a1:8a:f8:6b:
98:27:18:78:86:51:d9:76:c5:49:b4:0c:fd:0f:1b:
7e:90:1d:71:c7:e2:7a:5a:a7:1f:b8:8d:37:33:a0:
78:6e:5b:3c:00:93:40:b8:ae:be:b9:40:dd:a6:b4:
25:6b:7e:99:5b:3a:e8:4a:1a:88:1e:93:eb:db:7a:
7b:0f:05:45:6c:d7:1f:5b:3c:74:6a:3f:d4:b4:69:
ce:23:56:eb:c0:e8:cc:52:da:dc:12:4d:4c:6f:0f:
f6:0b:e9:cc:5a:96:4d:2b:61:76:12:12:19:80:59:
ce:83:02:9e:86:eb:e5:06:c3:08:bb:ee:3f:4a:a4:
96:f3:bb:63:3c:96:10:87:be:ae:88:12:56:b0:56:
b6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:BC:3D:EB:23:E1:5B:A7:B9:DB:D7:5A:12:DB:8F:B5:65:E3:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BA90A7A3E6611F19AAA0FA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.15.0/24
156.228.15.0/24
156.228.62.0/24
156.228.210.0/23
156.243.251.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
ae:30:ca:07:74:ac:79:2f:35:d2:62:12:66:87:27:90:94:d8:
c0:c9:42:2e:7c:08:13:07:71:7e:c1:23:5c:48:d3:55:57:d9:
62:59:4d:0e:2e:e2:f3:83:2a:b7:f9:5b:d9:52:1d:d0:4d:88:
93:9e:c1:1e:f7:13:80:0c:1d:0b:be:60:d7:ce:c6:5b:ca:c5:
79:f1:55:e9:c3:d9:5d:8c:39:38:89:6a:f2:0e:43:db:b3:95:
76:91:0d:d0:06:1b:e2:ff:32:86:ab:63:0d:9b:15:01:d5:b7:
e1:d4:d0:03:a6:a2:29:df:49:1d:04:5c:a3:65:ff:49:d5:a1:
9d:c7:35:07:79:32:61:7d:75:34:14:c4:ae:da:45:9f:16:42:
f4:a3:83:3a:c3:ff:c8:4a:16:a3:61:7d:6b:8e:f4:a8:a8:5f:
56:00:57:85:44:fa:e1:43:a6:29:41:20:cd:32:40:9b:f1:25:
98:43:1d:2b:56:b0:68:21:80:e7:71:c1:ae:02:24:ec:83:47:
ba:d6:eb:6e:2e:35:9b:9f:ed:14:e3:36:78:62:70:63:ae:6e:
e4:48:e3:af:ba:45:ee:eb:00:ac:21:03:c7:6f:ad:ee:cb:3f:
aa:10:25:c8:d9:2f:1e:26:79:7e:23:39:ea:5a:f5:74:ec:f0:
88:38:0a:a8
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAa45MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTYxMzEyWhcNMjYwNjA5MTYxMzEyWjAYMRYw
FAYDVQQDEw02OWU4ZjM5ZC02NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxcQ99wjgHOqA343LDAdkcXNqxWGePRV7NFnvCIMrUPj/Z9j0p1gIC+LN
lKZsgX5ntKuObuCNBJLTU/nMR9bLPeZqvPnCZBbbdtwmpbJNotUONU4PNSG5c1vR
Rmw38M06paIaSP1IaKOQQvEfQCjfx8kQaqGK+GuYJxh4hlHZdsVJtAz9Dxt+kB1x
x+J6WqcfuI03M6B4bls8AJNAuK6+uUDdprQla36ZWzroShqIHpPr23p7DwVFbNcf
Wzx0aj/UtGnOI1brwOjMUtrcEk1Mbw/2C+nMWpZNK2F2EhIZgFnOgwKehuvlBsMI
u+4/SqSW87tjPJYQh76uiBJWsFa20wIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFPiy
vD3rI+Fbp7nb11oS24+1ZeOAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQkE5MEE3QTNFNjYxMUYxOUFBQTBGQThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAnOEPAwQAnOQPAwQAnOQ+AwQB
nOTSMAwDBACc8/sDBAGc8/wwDQYJKoZIhvcNAQELBQADggEBAK4wygd0rHkvNdJi
EmaHJ5CU2MDJQi58CBMHcX7BI1xI01VX2WJZTQ4u4vODKrf5W9lSHdBNiJOewR73
E4AMHQu+YNfOxlvKxXnxVenD2V2MOTiJavIOQ9uzlXaRDdAGG+L/MoarYw2bFQHV
t+HU0AOmoinfSR0EXKNl/0nVoZ3HNQd5MmF9dTQUxK7aRZ8WQvSjgzrD/8hKFqNh
fWuO9KioX1YAV4VE+uFDpilBIM0yQJvxJZhDHStWsGghgOdxwa4CJOyDR7rW624u
NZuf7RTjNnhicGOubuRI46+6Re7rAKwhA8dvre7LP6oQJcjZLx4meX4jOepa9XTs
8Ig4Cqg=
-----END CERTIFICATE-----
Generated at Wed May 13 11:47:26 2026 by rpki-client