Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603F43C84A0311F1B1E6A7EDCE1D38B0.roa
File: 603F43C84A0311F1B1E6A7EDCE1D38B0.roa (raw, json)
Hash identifier: JqmEhaXSHClLiNGLT5r24Px2DjpQpNPdg/ui8fp0100=
Subject key identifier: 51:F2:42:AB:B0:AD:43:96:00:FE:B4:B8:8C:35:49:A4:45:D4:E3:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B232
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603F43C84A0311F1B1E6A7EDCE1D38B0.roa
Signing time: Thu 07 May 2026 10:56:19 +0000
ROA not before: Thu 07 May 2026 10:56:14 +0000
ROA not after: Mon 07 May 2029 10:56:14 +0000
asID: 17561
IP address blocks: 156.232.199.0/24 maxlen: 24
156.232.200.0/24 maxlen: 24
156.232.201.0/24 maxlen: 24
156.232.202.0/24 maxlen: 24
156.232.203.0/24 maxlen: 24
156.232.204.0/24 maxlen: 24
156.232.205.0/24 maxlen: 24
156.232.206.0/24 maxlen: 24
156.232.207.0/24 maxlen: 24
156.232.208.0/24 maxlen: 24
156.232.209.0/24 maxlen: 24
156.232.210.0/24 maxlen: 24
156.232.211.0/24 maxlen: 24
156.232.212.0/24 maxlen: 24
156.232.213.0/24 maxlen: 24
156.232.214.0/24 maxlen: 24
156.232.215.0/24 maxlen: 24
156.232.216.0/24 maxlen: 24
156.232.217.0/24 maxlen: 24
156.232.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111154 (0x1b232)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 10:56:14 2026 GMT
Not After : May 7 10:56:14 2029 GMT
Subject: CN=69fc6fd3-02fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:f1:93:fa:3d:a2:77:b5:fb:6e:96:49:94:
9a:ca:92:2e:a0:5a:9f:14:b6:02:d7:63:c0:71:17:
85:e7:fc:10:7d:ee:06:4a:1c:7a:67:06:ac:a6:09:
6e:ef:bd:b5:e9:3e:29:c7:9d:76:b3:c5:1d:af:63:
ce:3a:eb:5a:cb:30:45:08:b3:02:e0:6d:14:a3:50:
41:06:cb:07:20:15:c6:bf:1d:7f:11:2a:85:e3:7a:
5f:3f:e7:40:3e:d5:6f:de:57:6e:1d:12:7e:36:44:
17:b7:72:85:5f:84:0e:2a:3a:68:ce:2c:50:cb:0d:
8d:09:ed:78:20:21:26:62:64:4a:fd:32:5e:7c:8b:
dd:5f:23:70:5d:18:5a:b5:4e:90:f2:4d:38:7c:8f:
91:2e:e8:c0:d2:42:58:77:bd:7c:26:f6:43:d1:71:
0b:2d:44:9c:5e:4c:af:d6:1e:82:f7:d0:e8:f7:57:
d1:57:f5:e7:3f:ce:45:e3:61:e1:d8:e6:ad:43:3b:
9f:8e:a9:5e:84:52:0c:48:25:bb:67:78:38:7a:be:
56:79:fe:7a:af:f0:46:2b:e7:30:fc:d8:71:fd:92:
20:9c:92:8a:95:53:a7:a9:11:3d:a4:e1:04:3c:3c:
f2:91:56:c4:e5:6d:fd:bc:1b:7e:2d:ad:6c:a5:16:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F2:42:AB:B0:AD:43:96:00:FE:B4:B8:8C:35:49:A4:45:D4:E3:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/603F43C84A0311F1B1E6A7EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.199.0-156.232.218.255
Signature Algorithm: sha256WithRSAEncryption
9c:b2:6e:71:0f:60:97:ad:49:0f:a5:75:8c:be:64:cb:29:04:
0c:80:8f:f2:6b:43:0c:29:22:fe:7c:41:9e:96:f5:43:c2:28:
39:e0:ca:87:6b:bb:67:a2:34:2e:57:4b:e8:59:3e:1e:b2:66:
85:22:f0:3f:2b:65:e1:82:ec:c0:34:4d:f8:c1:2c:6c:6f:9f:
5b:c8:7a:dd:f1:f6:2f:80:5a:20:a0:50:ef:66:35:f6:2d:ac:
47:ef:80:5e:9c:56:32:63:2b:cd:85:c0:3b:76:c9:30:2a:be:
3c:a6:91:37:a9:95:2f:e5:d4:b7:e5:63:0d:bc:ad:60:22:10:
94:66:9e:f6:54:42:cb:4a:00:a5:92:a9:1e:3a:cd:7f:73:8e:
49:59:91:2d:17:58:c5:6b:ee:ef:7a:01:08:aa:2c:83:4a:f1:
b6:bc:a1:a8:38:dd:28:ac:f4:96:27:71:6d:7d:b1:41:38:4a:
3c:b3:87:22:32:c1:10:f5:3e:a1:eb:9e:bf:a8:5b:e0:21:63:
2a:3b:b3:f6:9b:22:d1:d8:d3:dd:09:6f:37:42:34:bd:0d:97:
4a:c1:48:bb:96:dc:64:b0:ca:33:0c:36:bb:ec:0a:56:8b:d7:
3c:6f:bf:9d:ca:8c:aa:d5:34:13:47:e8:63:93:97:47:9c:5e:
7f:3d:75:c2
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbIyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA3MTA1NjE0WhcNMjkwNTA3MTA1NjE0WjAYMRYw
FAYDVQQDEw02OWZjNmZkMy0wMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Bvxk/o9one1+26WSZSaypIuoFqfFLYC12PAcReF5/wQfe4GShx6Zwas
pglu77216T4px512s8Udr2POOutayzBFCLMC4G0Uo1BBBssHIBXGvx1/ESqF43pf
P+dAPtVv3lduHRJ+NkQXt3KFX4QOKjpozixQyw2NCe14ICEmYmRK/TJefIvdXyNw
XRhatU6Q8k04fI+RLujA0kJYd718JvZD0XELLUScXkyv1h6C99Do91fRV/XnP85F
42Hh2OatQzufjqlehFIMSCW7Z3g4er5Wef56r/BGK+cw/Nhx/ZIgnJKKlVOnqRE9
pOEEPDzykVbE5W39vBt+La1spRaw7wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFHy
QquwrUOWAP60uIw1SaRF1ON7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MDNGNDNDODRBMDMxMUYxQjFFNkE3RURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc6McDBACc6NowDQYJKoZI
hvcNAQELBQADggEBAJyybnEPYJetSQ+ldYy+ZMspBAyAj/JrQwwpIv58QZ6W9UPC
KDngyodru2eiNC5XS+hZPh6yZoUi8D8rZeGC7MA0TfjBLGxvn1vIet3x9i+AWiCg
UO9mNfYtrEfvgF6cVjJjK82FwDt2yTAqvjymkTeplS/l1LflYw28rWAiEJRmnvZU
QstKAKWSqR46zX9zjklZkS0XWMVr7u96AQiqLINK8ba8oag43Sis9JYncW19sUE4
SjyzhyIywRD1PqHrnr+oW+AhYyo7s/abItHY090JbzdCNL0Nl0rBSLuW3GSwyjMM
NrvsClaL1zxvv53KjKrVNBNH6GOTl0ecXn89dcI=
-----END CERTIFICATE-----
Generated at Wed May 13 10:00:57 2026 by rpki-client