Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9B27FA4A0611F1A6E527FECE1D38B0.roa
File: 4F9B27FA4A0611F1A6E527FECE1D38B0.roa (raw, json)
Hash identifier: aDJEvqV48d1AH0cMpmbql1L7lcCdxCEEJK+l3OHF6jk=
Subject key identifier: 9A:FA:BF:B4:83:0B:10:EC:46:3C:97:90:C5:71:37:C0:2B:9E:9D:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B23E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9B27FA4A0611F1A6E527FECE1D38B0.roa
Signing time: Thu 07 May 2026 11:17:19 +0000
ROA not before: Thu 07 May 2026 11:17:14 +0000
ROA not after: Fri 15 May 2026 11:17:14 +0000
asID: 137443
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/21 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111166 (0x1b23e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 11:17:14 2026 GMT
Not After : May 15 11:17:14 2026 GMT
Subject: CN=69fc74bf-4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:d1:78:d9:cd:ed:15:3f:16:a9:c5:95:79:
a3:eb:69:c4:55:57:16:63:7d:4f:53:fc:f0:77:f7:
84:c9:a9:77:2f:dd:3d:c8:83:e2:98:06:e2:66:10:
c4:be:40:6c:ee:ce:15:a3:b4:bf:64:33:7c:00:30:
e4:31:30:2d:21:29:fd:68:1c:cf:9d:46:45:0d:3d:
8c:40:96:de:8a:bb:f4:be:44:4c:4f:89:c2:bd:7e:
8c:39:3d:5c:15:33:d3:5f:ee:ce:38:a2:24:3c:37:
28:f7:66:03:61:04:d4:a8:1a:10:a1:d7:94:aa:e3:
13:b7:ce:e5:58:86:4b:91:22:85:7a:81:6c:e0:d4:
d6:82:22:5d:b5:0b:19:3b:2d:d8:32:e6:e5:4e:a4:
31:0a:19:cc:f9:e4:7e:36:78:0c:30:6e:e5:35:c1:
8c:67:93:93:55:08:97:05:3c:0f:c4:fe:bf:2f:73:
d9:03:ef:76:19:3e:79:dc:d5:a3:42:fc:13:21:2d:
38:95:9c:d9:b6:03:e1:7c:1c:67:05:86:2a:22:20:
28:05:20:98:55:72:bf:50:7b:c8:df:b9:b7:d7:ef:
40:c9:0a:6b:8a:90:a2:2d:39:26:06:ba:25:0c:f6:
0d:0e:c5:43:2f:6a:56:84:63:04:3e:79:b6:3e:7b:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:BF:B4:83:0B:10:EC:46:3C:97:90:C5:71:37:C0:2B:9E:9D:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9B27FA4A0611F1A6E527FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:41:65:82:45:b1:9c:df:d2:13:13:35:84:62:8a:6f:48:01:
73:7e:c4:31:e0:5b:92:9d:be:41:f2:3d:a2:27:28:fd:a3:3e:
ee:68:19:9e:ad:c9:25:05:56:d8:ca:41:7a:ea:c7:81:87:da:
48:9b:d7:91:24:65:cc:1b:06:c6:8d:dc:04:e3:46:c6:77:d7:
4d:44:ac:17:b4:1a:1d:25:81:bf:3c:6e:3c:61:38:20:54:ec:
b3:60:0e:eb:7d:51:44:c2:48:c6:e4:9f:5f:b5:a5:7d:f0:67:
71:5b:82:70:58:7e:ff:71:45:5e:4a:ee:46:35:de:15:c9:57:
c6:f5:07:02:7e:b5:e9:07:bd:a6:2b:d1:c6:a6:f9:e0:b0:54:
3b:9a:48:47:36:b4:f0:95:4c:75:e4:33:97:22:c0:60:1f:c3:
76:15:a6:13:d0:d4:64:5b:56:f5:fb:c2:f1:26:65:38:fc:6a:
f8:48:a3:91:0a:8c:c2:1a:d4:3e:70:7a:69:58:7e:32:30:30:
7d:74:14:f2:8e:2f:da:99:a5:63:2a:2c:e8:5a:d3:5e:a1:50:
c4:7d:48:25:98:72:6f:02:16:fd:d2:f4:48:02:71:16:d4:7f:
f3:ed:14:35:4c:8f:89:88:74:dd:9c:fe:30:62:48:40:5d:7c:
49:87:61:b1
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAbI+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA3MTExNzE0WhcNMjYwNTE1MTExNzE0WjAYMRYw
FAYDVQQDEw02OWZjNzRiZi00NzMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoiTReNnN7RU/FqnFlXmj62nEVVcWY31PU/zwd/eEyal3L909yIPimAbi
ZhDEvkBs7s4Vo7S/ZDN8ADDkMTAtISn9aBzPnUZFDT2MQJbeirv0vkRMT4nCvX6M
OT1cFTPTX+7OOKIkPDco92YDYQTUqBoQodeUquMTt87lWIZLkSKFeoFs4NTWgiJd
tQsZOy3YMublTqQxChnM+eR+NngMMG7lNcGMZ5OTVQiXBTwPxP6/L3PZA+92GT55
3NWjQvwTIS04lZzZtgPhfBxnBYYqIiAoBSCYVXK/UHvI37m31+9AyQpripCiLTkm
BrolDPYNDsVDL2pWhGMEPnm2PnvCsQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJr6
v7SDCxDsRjyXkMVxN8Arnp3NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RjlCMjdGQTRBMDYxMUYxQTZFNTI3RkVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAC5BZYJFsZzf0hMTNYRiim9IAXN+xDHg
W5KdvkHyPaInKP2jPu5oGZ6tySUFVtjKQXrqx4GH2kib15EkZcwbBsaN3ATjRsZ3
101ErBe0Gh0lgb88bjxhOCBU7LNgDut9UUTCSMbkn1+1pX3wZ3FbgnBYfv9xRV5K
7kY13hXJV8b1BwJ+tekHvaYr0cam+eCwVDuaSEc2tPCVTHXkM5ciwGAfw3YVphPQ
1GRbVvX7wvEmZTj8avhIo5EKjMIa1D5wemlYfjIwMH10FPKOL9qZpWMqLOha016h
UMR9SCWYcm8CFv3S9EgCcRbUf/PtFDVMj4mIdN2c/jBiSEBdfEmHYbE=
-----END CERTIFICATE-----
Generated at Wed May 13 12:20:59 2026 by rpki-client