Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3433ABDC3E8411F19AA1EADBCE1D38B0.roa
File: 3433ABDC3E8411F19AA1EADBCE1D38B0.roa (raw, json)
Hash identifier: hXoqYZQCY+bPdBj+1MDPrAoHBucVDRbZZ92cJVGFChM=
Subject key identifier: 16:5D:50:DD:0F:64:90:8B:12:4E:5A:69:13:B6:40:8A:25:65:DD:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3433ABDC3E8411F19AA1EADBCE1D38B0.roa
Signing time: Wed 22 Apr 2026 19:48:16 +0000
ROA not before: Wed 22 Apr 2026 19:48:11 +0000
ROA not after: Thu 28 May 2026 19:48:11 +0000
asID: 44559
IP address blocks: 156.246.150.0/24 maxlen: 24
156.246.151.0/24 maxlen: 24
156.246.152.0/24 maxlen: 24
156.246.153.0/24 maxlen: 24
156.246.154.0/24 maxlen: 24
156.246.155.0/24 maxlen: 24
156.246.156.0/24 maxlen: 24
156.246.157.0/24 maxlen: 24
156.246.158.0/24 maxlen: 24
156.246.159.0/24 maxlen: 24
156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110168 (0x1ae58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 19:48:11 2026 GMT
Not After : May 28 19:48:11 2026 GMT
Subject: CN=69e92600-f3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2f:13:f8:c8:cf:fb:ea:2c:79:bc:0c:69:ad:
f5:42:8d:c2:0b:2f:04:c5:0c:b1:b1:00:4d:c5:6e:
db:0a:ac:6c:98:67:1a:bc:58:98:ed:46:e0:d6:47:
54:f9:af:1b:b3:5c:83:9f:eb:2a:b4:60:a5:1b:c1:
f4:b7:cd:ff:8c:13:11:d8:b9:a5:fa:63:2d:f6:e5:
dd:35:c6:62:85:48:20:20:84:35:47:8b:cd:4e:b1:
fa:41:9d:49:26:1b:d1:49:d8:83:e3:1d:27:c3:2b:
c5:a5:12:5c:b9:e2:04:d1:b5:dc:1e:ad:6c:fd:d7:
99:70:d0:0c:8d:c7:56:55:6d:ef:1b:24:b5:8f:dd:
34:9b:ce:eb:12:6e:cf:0a:a0:8c:1a:05:cf:9c:ff:
d5:a8:57:0a:f6:9c:0e:2f:23:f5:2c:cc:da:fb:67:
25:5b:4c:e1:ac:81:f5:72:cd:61:a7:d0:77:d9:b7:
4c:56:80:07:f2:a0:b6:45:04:a9:db:d1:08:f2:39:
51:2c:d3:21:5d:30:2a:a1:28:b7:32:40:31:47:2b:
e4:66:37:e3:c3:4b:61:f1:29:04:c8:a7:f4:0d:3a:
b6:3f:94:53:bc:24:41:ec:74:23:d2:13:dd:b6:7f:
1d:50:34:12:22:f1:d0:ed:b3:1f:ce:be:a2:68:29:
32:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5D:50:DD:0F:64:90:8B:12:4E:5A:69:13:B6:40:8A:25:65:DD:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3433ABDC3E8411F19AA1EADBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.150.0-156.246.159.255
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.249.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
40:dd:9c:87:63:39:5b:44:90:e8:10:ff:76:5a:5f:5a:89:ba:
a7:6c:c9:2a:3d:7b:3a:93:80:e4:65:82:2e:13:b7:d4:94:3b:
1b:6a:08:e3:c6:c7:f3:df:a9:20:01:94:e2:82:89:a0:1c:05:
14:47:bb:24:6b:c7:5a:8d:56:bd:7e:62:e2:7a:03:d5:b9:01:
c8:bf:44:a2:b2:ba:af:c3:19:aa:b5:bc:03:c5:3e:2d:06:07:
df:4a:18:a6:45:fa:39:a0:8d:99:a9:64:93:84:d7:3f:ba:e9:
dd:ec:80:23:06:dd:37:6f:de:fe:f9:06:27:53:be:62:94:73:
68:2f:2e:2f:b0:33:61:fd:20:2b:0f:ff:2e:e4:41:82:2b:c4:
84:af:32:27:5e:52:17:29:3c:bf:1c:81:33:22:74:4d:83:fe:
a8:0d:53:5b:48:a2:6c:7f:2a:71:d5:4a:44:1c:68:af:88:9a:
0a:83:d8:81:d5:a5:38:17:7c:87:15:ce:74:67:34:49:75:ef:
19:19:56:da:a4:ab:5d:0f:90:aa:1e:11:7b:a4:16:c0:7e:f0:
54:bd:a8:b8:53:17:58:89:84:5f:99:94:84:5d:ca:19:ea:c7:
a8:bb:d0:88:8a:51:16:b8:6a:cb:9d:50:38:b8:ab:2f:63:fe:
3b:f1:b5:36
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgIDAa5YMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTk0ODExWhcNMjYwNTI4MTk0ODExWjAYMRYw
FAYDVQQDEw02OWU5MjYwMC1mM2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3y8T+MjP++osebwMaa31Qo3CCy8ExQyxsQBNxW7bCqxsmGcavFiY7Ubg
1kdU+a8bs1yDn+sqtGClG8H0t83/jBMR2Lml+mMt9uXdNcZihUggIIQ1R4vNTrH6
QZ1JJhvRSdiD4x0nwyvFpRJcueIE0bXcHq1s/deZcNAMjcdWVW3vGyS1j900m87r
Em7PCqCMGgXPnP/VqFcK9pwOLyP1LMza+2clW0zhrIH1cs1hp9B32bdMVoAH8qC2
RQSp29EI8jlRLNMhXTAqoSi3MkAxRyvkZjfjw0th8SkEyKf0DTq2P5RTvCRB7HQj
0hPdtn8dUDQSIvHQ7bMfzr6iaCkysQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFBZd
UN0PZJCLEk5aaRO2QIolZd2XMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNDMzQUJEQzNFODQxMUYxOUFBMUVBREJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEgGCCsGAQUFBwEHAQH/BDkwNzA1BAIAATAvMAwDBAGc9pYDBAWc9oADBACc9qEw
DAMEAJz2owMEAJz2pDALAwQAnPb5AwMAnPYwDQYJKoZIhvcNAQELBQADggEBAEDd
nIdjOVtEkOgQ/3ZaX1qJuqdsySo9ezqTgORlgi4Tt9SUOxtqCOPGx/PfqSABlOKC
iaAcBRRHuyRrx1qNVr1+YuJ6A9W5Aci/RKKyuq/DGaq1vAPFPi0GB99KGKZF+jmg
jZmpZJOE1z+66d3sgCMG3Tdv3v75BidTvmKUc2gvLi+wM2H9ICsP/y7kQYIrxISv
MideUhcpPL8cgTMidE2D/qgNU1tIomx/KnHVSkQcaK+ImgqD2IHVpTgXfIcVznRn
NEl17xkZVtqkq10PkKoeEXukFsB+8FS9qLhTF1iJhF+ZlIRdyhnqx6i70IiKURa4
asudUDi4qy9j/jvxtTY=
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:55 2026 by rpki-client