Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DFC8428861411F18C5133F7CE1D38B0.roa
File: 2DFC8428861411F18C5133F7CE1D38B0.roa (raw, json)
Hash identifier: iIoDPPRRuUrGCh6pvQTAjslqTMUhjr8x+wyfUXiOdws=
Subject key identifier: B3:FA:A5:71:4F:42:66:9D:B7:29:1A:0F:15:D5:78:89:FF:43:31:5A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C7B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DFC8428861411F18C5133F7CE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:27:46 +0000
ROA not before: Wed 22 Jul 2026 21:27:42 +0000
ROA not after: Thu 27 Aug 2026 21:27:42 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116663 (0x1c7b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 21:27:42 2026 GMT
Not After : Aug 27 21:27:42 2026 GMT
Subject: CN=6a6135d2-d2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:59:91:6b:0a:73:8d:e4:17:1d:1a:5c:63:
83:05:ae:95:ff:b7:82:b1:2e:5b:99:44:09:ff:05:
c5:08:42:b1:20:a4:c9:15:bc:76:5a:86:60:ae:e4:
da:32:8d:bd:b1:69:99:15:35:ae:ca:e7:49:33:b7:
d5:32:21:48:3c:dd:a2:06:17:26:da:d5:30:75:ed:
f5:a3:ae:06:d6:0b:85:6e:83:d8:80:4a:24:0c:51:
b8:d7:48:93:37:93:a4:f6:6b:fb:25:f1:69:08:57:
9b:7b:12:54:f7:2b:ce:83:0b:f6:4d:0f:7c:d9:74:
73:c5:f5:74:cd:3d:2e:b0:37:05:56:26:6d:f3:f9:
bd:dd:bb:30:69:d8:64:e5:e4:d4:d6:9f:65:a3:55:
6b:33:aa:d9:d5:18:e0:ad:86:33:ea:3d:47:82:02:
63:de:5d:b3:79:00:56:ab:ab:24:62:bc:1f:da:66:
ea:42:e8:40:b4:f3:d9:0f:eb:0c:71:c7:b4:1f:21:
4f:58:07:45:51:21:5c:be:24:0f:20:e5:ba:49:94:
68:dd:72:55:bf:3e:7b:15:40:ab:3e:a2:1a:db:ac:
1f:36:d7:45:8f:16:a6:e1:75:cb:9b:a3:fa:f1:32:
83:88:47:80:9e:09:82:3a:bf:4b:44:bc:2d:0b:99:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:A5:71:4F:42:66:9D:B7:29:1A:0F:15:D5:78:89:FF:43:31:5A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2DFC8428861411F18C5133F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.225.126.0/24
156.227.193.0/24
156.227.199.0/24
156.229.51.0/24
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f2:dc:b4:78:00:b7:25:32:21:06:b0:22:42:52:7c:45:31:
53:a0:07:6f:e5:88:6c:38:0a:fd:28:23:6f:e1:94:a0:20:a7:
3d:4b:c4:30:1b:d7:28:60:b4:d0:81:fd:a0:05:be:77:28:df:
eb:8e:99:7c:f9:27:5a:81:49:1f:4e:f8:5b:97:e6:d5:e2:e7:
84:c7:7a:9b:0e:81:29:c8:60:a6:0e:0f:04:20:df:40:77:ee:
86:75:a6:32:62:17:fa:ef:e7:88:e5:c3:d5:71:25:cf:b5:ec:
ce:15:0b:36:8c:54:cc:3f:b6:cd:60:88:ee:49:f6:83:66:66:
76:f0:c9:54:b8:ef:90:2d:25:59:d7:82:a5:a2:2d:81:78:b0:
1b:a0:e2:e1:30:3c:28:6a:48:5c:28:17:3d:8d:d0:4b:36:82:
97:56:f5:c0:3c:6a:65:ba:e8:e9:ee:9e:c0:7d:0f:ac:b9:ee:
fd:44:a0:38:f0:f7:e2:1d:c0:7f:35:70:15:84:e6:c6:f3:48:
a6:c2:33:39:96:53:27:e1:3a:3f:09:ab:d1:be:2b:3f:cb:e2:
91:a5:c8:9e:9c:f7:14:f8:0f:b3:d8:2f:99:66:f8:fc:a1:38:
25:93:ba:68:ab:26:dd:50:b8:30:51:62:d2:1f:e8:c0:dc:77:
e9:a9:10:ed
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAce3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMjEyNzQyWhcNMjYwODI3MjEyNzQyWjAYMRYw
FAYDVQQDEw02YTYxMzVkMi1kMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr3ZZkWsKc43kFx0aXGODBa6V/7eCsS5bmUQJ/wXFCEKxIKTJFbx2WoZg
ruTaMo29sWmZFTWuyudJM7fVMiFIPN2iBhcm2tUwde31o64G1guFboPYgEokDFG4
10iTN5Ok9mv7JfFpCFebexJU9yvOgwv2TQ982XRzxfV0zT0usDcFViZt8/m93bsw
adhk5eTU1p9lo1VrM6rZ1RjgrYYz6j1HggJj3l2zeQBWq6skYrwf2mbqQuhAtPPZ
D+sMcce0HyFPWAdFUSFcviQPIOW6SZRo3XJVvz57FUCrPqIa26wfNtdFjxam4XXL
m6P68TKDiEeAngmCOr9LRLwtC5l+IwIDAQABo4ICwDCCArwwHQYDVR0OBBYEFLP6
pXFPQmadtykaDxXVeIn/QzFaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yREZDODQyODg2MTQxMUYxOEM1MTMzRjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAnOF1AwQAnOF+AwQAnOPBAwQA
nOPHAwQAnOUzAwQAnOVAMA0GCSqGSIb3DQEBCwUAA4IBAQBm8ty0eAC3JTIhBrAi
QlJ8RTFToAdv5YhsOAr9KCNv4ZSgIKc9S8QwG9coYLTQgf2gBb53KN/rjpl8+Sda
gUkfTvhbl+bV4ueEx3qbDoEpyGCmDg8EIN9Ad+6GdaYyYhf67+eI5cPVcSXPtezO
FQs2jFTMP7bNYIjuSfaDZmZ28MlUuO+QLSVZ14Kloi2BeLAboOLhMDwoakhcKBc9
jdBLNoKXVvXAPGpluujp7p7AfQ+sue79RKA48PfiHcB/NXAVhObG80imwjM5llMn
4To/CavRvis/y+KRpcienPcU+A+z2C+ZZvj8oTglk7poqybdULgwUWLSH+jA3Hfp
qRDt
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:58 2026 by rpki-client