Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5756634E1DF911F1B700858EDAE4EC9C.roa
File: 5756634E1DF911F1B700858EDAE4EC9C.roa (raw, json)
Hash identifier: 3qfE9R7xrYIlcdCrR7KuLN2rWWw6RuAkS18E0Hezpbs=
Subject key identifier: 5F:D7:B1:48:A6:BB:71:0B:F5:BA:C7:D7:4C:E6:B4:7E:77:11:44:E2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A48A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5756634E1DF911F1B700858EDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:53:38 +0000
ROA not before: Thu 12 Mar 2026 09:53:33 +0000
ROA not after: Fri 17 Apr 2026 09:53:33 +0000
asID: 22773
IP address blocks: 156.233.41.0/24 maxlen: 24
156.233.42.0/24 maxlen: 24
156.233.44.0/23 maxlen: 24
156.233.47.0/24 maxlen: 24
156.233.56.0/24 maxlen: 24
156.233.58.0/24 maxlen: 24
156.233.60.0/23 maxlen: 24
156.233.63.0/24 maxlen: 24
156.239.148.0/24 maxlen: 24
156.248.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107658 (0x1a48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 09:53:33 2026 GMT
Not After : Apr 17 09:53:33 2026 GMT
Subject: CN=69b28d22-956b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:92:66:12:eb:3d:ba:e8:be:12:53:30:f6:
1f:33:b1:c7:e8:8c:6f:00:a1:e5:a2:e1:94:e9:41:
3a:b7:00:4a:67:25:08:b9:ab:38:91:20:64:c7:81:
a4:2a:da:18:09:44:19:2f:ba:b4:32:1a:59:a8:14:
02:ae:37:98:48:09:59:d0:c7:74:9c:85:72:28:1b:
13:b8:ed:e1:2c:52:5c:a9:27:16:c5:2d:57:38:6d:
e3:f5:95:c5:55:35:b5:5e:fa:5c:45:2d:d7:1a:71:
db:27:87:a7:90:63:08:e6:c1:1e:74:2c:ca:60:3d:
3f:72:3f:de:39:c3:de:77:9d:17:ad:b2:b8:86:3a:
cc:52:9a:a9:6e:a9:7d:29:18:39:a6:07:ae:37:79:
9b:05:72:e7:8a:96:1d:c0:34:68:87:a6:c7:02:a3:
b7:94:72:bf:5a:93:c5:b3:72:16:8a:0e:a5:0d:48:
4c:c3:61:83:75:8c:a8:7e:ef:b5:57:e6:b8:c3:33:
80:a9:96:2a:46:5d:85:88:34:8f:cf:c1:f5:c1:24:
09:ca:29:92:b2:99:90:70:2a:d3:43:e0:c2:d6:6a:
f6:84:cf:78:3c:e2:af:38:33:b5:9b:01:1b:ba:e3:
2a:4b:8f:fd:cf:49:c9:85:06:a9:7d:18:14:ab:fd:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:B1:48:A6:BB:71:0B:F5:BA:C7:D7:4C:E6:B4:7E:77:11:44:E2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5756634E1DF911F1B700858EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.41.0-156.233.42.255
156.233.44.0/23
156.233.47.0/24
156.233.56.0/24
156.233.58.0/24
156.233.60.0/23
156.233.63.0/24
156.239.148.0/24
156.248.4.0/24
Signature Algorithm: sha256WithRSAEncryption
85:af:cf:3d:1a:a8:75:bd:87:95:fe:9c:e8:c7:be:dd:3e:b0:
0b:9d:b1:9e:e1:01:62:10:39:db:2f:1d:95:3d:2d:a5:dd:6d:
48:5e:c6:0a:0b:8d:09:e1:3f:fa:71:02:16:83:a6:51:53:e8:
94:b8:0c:9a:b7:46:1d:ad:10:f2:c5:a2:09:4b:fc:aa:66:fc:
01:35:c4:62:6a:38:5c:d1:07:e4:89:10:56:f2:9f:75:a5:08:
b3:08:98:64:35:15:dd:f6:19:b6:95:83:02:48:29:1f:23:be:
fd:ad:64:08:a5:15:00:e1:0e:0d:ea:6f:5e:58:a5:33:0b:76:
d8:47:03:78:54:8e:c9:d3:d1:58:0f:2c:d8:6b:12:f3:a3:87:
b7:b4:99:98:02:72:6a:58:71:8d:50:4e:89:4a:5c:94:c2:41:
a1:2a:0b:a5:e0:d2:eb:e0:a6:15:7e:25:01:0b:cd:a8:c6:04:
9a:24:49:e8:f0:e2:98:2e:fb:2c:f1:2b:46:4b:ae:b4:55:43:
71:0b:6d:7b:1b:c2:8f:14:0f:20:86:12:92:50:67:9e:52:89:
86:19:d3:6a:31:2a:1a:50:f9:84:77:28:4b:6b:83:19:c8:31:
61:a8:ec:e1:74:8d:7a:0c:03:9e:d6:29:a2:a9:58:57:90:33:
a9:e0:7e:71
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAaSKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEyMDk1MzMzWhcNMjYwNDE3MDk1MzMzWjAYMRYw
FAYDVQQDEw02OWIyOGQyMi05NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvVSSZhLrPbrovhJTMPYfM7HH6IxvAKHlouGU6UE6twBKZyUIuas4kSBk
x4GkKtoYCUQZL7q0MhpZqBQCrjeYSAlZ0Md0nIVyKBsTuO3hLFJcqScWxS1XOG3j
9ZXFVTW1XvpcRS3XGnHbJ4enkGMI5sEedCzKYD0/cj/eOcPed50XrbK4hjrMUpqp
bql9KRg5pgeuN3mbBXLnipYdwDRoh6bHAqO3lHK/WpPFs3IWig6lDUhMw2GDdYyo
fu+1V+a4wzOAqZYqRl2FiDSPz8H1wSQJyimSspmQcCrTQ+DC1mr2hM94POKvODO1
mwEbuuMqS4/9z0nJhQapfRgUq/1kbwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFF/X
sUimu3EL9brH10zmtH53EUTiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzU2NjM0RTFERjkxMUYxQjcwMDg1OEVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBACc6SkDBACc6SoDBAGc6SwD
BACc6S8DBACc6TgDBACc6ToDBAGc6TwDBACc6T8DBACc75QDBACc+AQwDQYJKoZI
hvcNAQELBQADggEBAIWvzz0aqHW9h5X+nOjHvt0+sAudsZ7hAWIQOdsvHZU9LaXd
bUhexgoLjQnhP/pxAhaDplFT6JS4DJq3Rh2tEPLFoglL/Kpm/AE1xGJqOFzRB+SJ
EFbyn3WlCLMImGQ1Fd32GbaVgwJIKR8jvv2tZAilFQDhDg3qb15YpTMLdthHA3hU
jsnT0VgPLNhrEvOjh7e0mZgCcmpYcY1QTolKXJTCQaEqC6Xg0uvgphV+JQELzajG
BJokSejw4pgu+yzxK0ZLrrRVQ3ELbXsbwo8UDyCGEpJQZ55SiYYZ02oxKhpQ+YR3
KEtrgxnIMWGo7OF0jXoMA57WKaKpWFeQM6ngfnE=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:01 2026 by rpki-client