Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F4C914244011F1A180D5AADAE4EC9C.roa
File: 30F4C914244011F1A180D5AADAE4EC9C.roa (raw, json)
Hash identifier: sKy7j0PxSktD22x8bLfI0hyAFUqnrBUSagupB8Yo6vY=
Subject key identifier: 58:9B:F4:80:A5:F9:19:67:27:04:32:67:60:29:24:48:5C:2C:71:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A620
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F4C914244011F1A180D5AADAE4EC9C.roa
Signing time: Fri 20 Mar 2026 09:35:55 +0000
ROA not before: Fri 20 Mar 2026 09:35:49 +0000
ROA not after: Sun 26 Apr 2026 09:35:49 +0000
asID: 63139
IP address blocks: 156.227.199.0/24 maxlen: 24
156.227.203.0/24 maxlen: 24
156.229.29.0/24 maxlen: 24
156.229.30.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
156.229.44.0/23 maxlen: 24
156.229.46.0/24 maxlen: 24
156.229.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108064 (0x1a620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 09:35:49 2026 GMT
Not After : Apr 26 09:35:49 2026 GMT
Subject: CN=69bd14fb-fb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:31:23:77:89:d6:c9:95:53:fa:bc:83:16:73:
c0:23:23:78:6a:17:66:7b:a1:3c:aa:3f:bb:3c:6d:
73:ed:1d:1c:7d:0f:28:94:b2:9b:a9:f9:22:71:41:
38:d5:32:6a:e6:04:10:8d:ec:e4:77:e3:ac:ca:9f:
a2:59:75:ce:66:39:b9:04:4d:d5:22:0f:f5:36:81:
b1:d0:31:7a:8c:fa:3a:14:35:92:87:dc:7b:24:ee:
a6:df:d0:8d:93:1b:d7:42:22:dd:b5:9e:6f:4e:9f:
52:29:55:65:2f:50:32:55:1c:7f:17:2d:b3:3c:de:
87:08:14:d9:84:9a:bc:ae:86:19:49:a0:43:1b:62:
f5:fb:ed:83:ec:27:76:da:86:9e:df:79:93:e3:e9:
1b:45:52:56:76:eb:2f:67:1b:1c:a1:35:d1:e9:0b:
7d:e0:a7:fc:08:35:f5:ef:c4:5b:56:b4:7f:ce:a1:
50:18:3d:c4:a3:bb:14:1b:3b:88:15:a8:b1:38:f2:
f8:ac:2c:f8:ba:91:e4:c6:54:35:0c:6f:e6:31:54:
6b:5d:1c:42:82:0e:79:e6:f3:0e:ea:db:59:76:b3:
cb:4e:29:3d:ba:46:91:b9:c3:53:61:e8:f7:e3:a3:
2c:37:3e:f7:17:4a:b3:98:2a:ee:4e:3f:d7:0b:0a:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9B:F4:80:A5:F9:19:67:27:04:32:67:60:29:24:48:5C:2C:71:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30F4C914244011F1A180D5AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.199.0/24
156.227.203.0/24
156.229.29.0-156.229.31.255
156.229.40.0-156.229.46.255
156.229.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:73:09:b0:32:f1:fd:8f:ba:a0:38:78:2a:50:e9:9b:d9:d2:
a2:91:29:18:bf:44:a5:12:19:24:91:09:1c:79:36:cc:9e:4a:
1b:15:50:4b:2d:55:04:b9:82:26:d7:36:7c:33:b5:58:99:fd:
d1:fb:ab:63:f4:7a:5f:98:1b:fd:39:06:09:4c:36:4e:1c:0b:
9f:68:c9:83:ae:5f:6d:fa:d8:b0:ea:7a:ca:0e:96:d5:d3:f2:
ed:26:95:4a:47:f0:ce:1b:7e:5c:18:8e:ca:2b:65:d2:83:ee:
57:c7:7e:e7:ef:42:a5:e4:d6:61:7f:90:3d:b6:e6:6c:c6:aa:
8e:4a:a5:6a:bc:a3:bf:cf:fe:50:3c:5a:6b:26:e4:ae:33:81:
fe:2f:f0:df:04:07:05:18:76:de:03:54:47:79:fa:75:41:7d:
c1:9f:cc:45:f5:4d:dd:38:cf:5d:f2:29:0e:00:63:17:2d:0d:
7d:39:a2:fb:79:44:a9:de:31:a4:74:01:87:cc:e5:43:93:fa:
fa:42:f9:51:6a:1c:79:1c:af:b1:97:0a:09:e4:a7:6b:5a:78:
49:29:60:7a:58:fa:30:a7:3e:e9:c3:6e:f3:f6:3b:00:7a:5b:
32:c1:8a:f9:55:a8:f4:44:35:26:93:34:5d:b3:da:ca:d5:85:
b2:41:e9:84
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIDAaYgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIwMDkzNTQ5WhcNMjYwNDI2MDkzNTQ5WjAYMRYw
FAYDVQQDEw02OWJkMTRmYi1mYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3TEjd4nWyZVT+ryDFnPAIyN4ahdme6E8qj+7PG1z7R0cfQ8olLKbqfki
cUE41TJq5gQQjezkd+Osyp+iWXXOZjm5BE3VIg/1NoGx0DF6jPo6FDWSh9x7JO6m
39CNkxvXQiLdtZ5vTp9SKVVlL1AyVRx/Fy2zPN6HCBTZhJq8roYZSaBDG2L1++2D
7Cd22oae33mT4+kbRVJWdusvZxscoTXR6Qt94Kf8CDX178RbVrR/zqFQGD3Eo7sU
GzuIFaixOPL4rCz4upHkxlQ1DG/mMVRrXRxCgg555vMO6ttZdrPLTik9ukaRucNT
Yej346MsNz73F0qzmCruTj/XCwoNvwIDAQABo4ICyjCCAsYwHQYDVR0OBBYEFFib
9ICl+RlnJwQyZ2ApJEhcLHEzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMEY0QzkxNDI0NDAxMUYxQTE4MEQ1QUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAnOPHAwQAnOPLMAwDBACc5R0D
BAWc5QAwDAMEA5zlKAMEAJzlLgMEAJzlMTANBgkqhkiG9w0BAQsFAAOCAQEAHXMJ
sDLx/Y+6oDh4KlDpm9nSopEpGL9EpRIZJJEJHHk2zJ5KGxVQSy1VBLmCJtc2fDO1
WJn90furY/R6X5gb/TkGCUw2ThwLn2jJg65fbfrYsOp6yg6W1dPy7SaVSkfwzht+
XBiOyitl0oPuV8d+5+9CpeTWYX+QPbbmbMaqjkqlaryjv8/+UDxaaybkrjOB/i/w
3wQHBRh23gNUR3n6dUF9wZ/MRfVN3TjPXfIpDgBjFy0NfTmi+3lEqd4xpHQBh8zl
Q5P6+kL5UWoceRyvsZcKCeSna1p4SSlgelj6MKc+6cNu8/Y7AHpbMsGK+VWo9EQ1
JpM0XbPaytWFskHphA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:16 2026 by rpki-client