Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71DA642A456A11F18665F6F2CE1D38B0.roa
File: 71DA642A456A11F18665F6F2CE1D38B0.roa (raw, json)
Hash identifier: TgPX0r/7b8yvHpd7gGrJ/268UOleeGq6Aktnfk1NwPQ=
Subject key identifier: 3A:7C:67:E6:74:2B:5F:00:E2:39:19:4C:3F:DE:FA:C9:37:CB:51:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71DA642A456A11F18665F6F2CE1D38B0.roa
Signing time: Fri 01 May 2026 14:31:31 +0000
ROA not before: Fri 01 May 2026 14:31:26 +0000
ROA not after: Mon 25 May 2026 14:31:26 +0000
asID: 273155
IP address blocks: 156.236.224.0/19 maxlen: 24
156.236.224.0/24 maxlen: 24
156.236.225.0/24 maxlen: 24
156.236.226.0/24 maxlen: 24
156.236.227.0/24 maxlen: 24
156.236.228.0/24 maxlen: 24
156.236.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110780 (0x1b0bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 14:31:26 2026 GMT
Not After : May 25 14:31:26 2026 GMT
Subject: CN=69f4b943-08c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:37:ef:bd:5a:53:9a:0d:f0:fa:6c:e3:64:
dc:2e:ab:0d:f8:aa:d7:f1:4b:5a:98:b8:3d:f0:da:
d3:85:ee:9d:e5:5c:44:a1:b0:c6:d7:40:a4:54:e4:
e0:b6:b3:9f:d4:66:59:58:01:a7:0c:91:61:53:4e:
53:49:0b:a7:7d:3c:92:c3:e0:d1:aa:cb:c3:d1:df:
ab:90:3b:c1:01:54:f7:99:85:df:90:e5:f7:ee:af:
c8:35:2c:29:d4:36:36:6a:65:15:7f:d2:34:1e:b1:
3b:0d:43:f8:18:cd:19:1e:e7:41:1e:f7:18:12:7f:
19:ed:39:e3:53:5a:e0:3e:4d:9a:95:d7:a7:23:a2:
ee:01:72:9c:9b:cd:9d:83:d0:0d:ff:3c:36:67:c1:
1a:19:0a:90:ee:4b:17:c5:b6:af:d2:1e:11:c8:03:
9b:6d:e3:18:a2:31:9e:cc:83:98:6d:4c:98:60:df:
31:9e:7f:9d:6b:90:ca:20:20:62:37:64:69:70:c8:
99:b4:30:3f:e4:eb:1e:0e:be:a9:bd:4e:d1:89:49:
67:b4:23:2b:8a:d6:d1:28:93:0f:ef:86:a0:c0:d1:
9e:ba:f2:37:bf:cb:04:7a:5d:9d:f9:d8:01:51:0c:
08:17:85:b5:02:a8:d1:16:96:3b:55:1a:6b:8d:c9:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7C:67:E6:74:2B:5F:00:E2:39:19:4C:3F:DE:FA:C9:37:CB:51:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71DA642A456A11F18665F6F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.224.0/19
Signature Algorithm: sha256WithRSAEncryption
57:e8:ce:15:a5:29:8e:47:e8:da:4b:11:c9:7b:ce:29:9a:06:
ca:51:d4:e8:1a:86:17:ee:8c:ea:35:26:1f:1b:93:fb:21:69:
a5:d6:6a:d7:4a:0f:fb:34:18:d7:32:77:91:a9:5e:78:63:b9:
0e:fe:14:e5:77:da:b9:b2:57:0b:3c:b6:3e:a1:2c:cd:ce:35:
23:78:0d:c5:ce:ab:4e:6d:9d:d4:15:2c:ed:c1:ef:aa:8a:dd:
b9:ae:d1:2b:43:b2:0f:49:4b:d7:03:74:0d:e3:8d:27:97:f1:
10:fb:28:f0:98:89:5b:03:8f:b7:9a:df:63:f4:0d:a4:cf:a5:
7f:d8:31:43:f4:7a:00:76:e6:22:af:f4:90:6b:3e:b7:b1:87:
10:4d:7d:d6:a0:fd:7d:df:22:d5:e9:54:75:5b:0b:03:fd:ba:
30:e7:92:4b:7b:97:1e:21:e2:da:46:b7:eb:f4:9b:f6:50:ee:
c6:69:33:8e:ec:8c:ef:64:4e:59:4b:59:c1:3b:42:01:02:7b:
44:cd:ea:46:45:b3:eb:87:34:26:bc:4e:0b:d9:4d:06:dd:ea:
33:2f:bf:f2:5d:ed:d3:f7:3c:a7:49:17:3a:50:50:49:23:aa:
e3:35:7d:5d:cf:63:99:58:fa:74:ed:44:ae:b2:43:a2:40:10:
24:da:ec:38
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbC8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMTQzMTI2WhcNMjYwNTI1MTQzMTI2WjAYMRYw
FAYDVQQDEw02OWY0Yjk0My0wOGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArCo3771aU5oN8Pps42TcLqsN+KrX8UtamLg98NrThe6d5VxEobDG10Ck
VOTgtrOf1GZZWAGnDJFhU05TSQunfTySw+DRqsvD0d+rkDvBAVT3mYXfkOX37q/I
NSwp1DY2amUVf9I0HrE7DUP4GM0ZHudBHvcYEn8Z7TnjU1rgPk2aldenI6LuAXKc
m82dg9AN/zw2Z8EaGQqQ7ksXxbav0h4RyAObbeMYojGezIOYbUyYYN8xnn+da5DK
ICBiN2RpcMiZtDA/5OseDr6pvU7RiUlntCMritbRKJMP74agwNGeuvI3v8sEel2d
+dgBUQwIF4W1AqjRFpY7VRprjcln0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDp8
Z+Z0K18A4jkZTD/e+sk3y1ELMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MURBNjQyQTQ1NkExMUYxODY2NUY2RjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnOzgMA0GCSqGSIb3DQEBCwUA
A4IBAQBX6M4VpSmOR+jaSxHJe84pmgbKUdToGoYX7ozqNSYfG5P7IWml1mrXSg/7
NBjXMneRqV54Y7kO/hTld9q5slcLPLY+oSzNzjUjeA3FzqtObZ3UFSztwe+qit25
rtErQ7IPSUvXA3QN440nl/EQ+yjwmIlbA4+3mt9j9A2kz6V/2DFD9HoAduYir/SQ
az63sYcQTX3WoP193yLV6VR1WwsD/bow55JLe5ceIeLaRrfr9Jv2UO7GaTOO7Izv
ZE5ZS1nBO0IBAntEzepGRbPrhzQmvE4L2U0G3eozL7/yXe3T9zynSRc6UFBJI6rj
NX1dz2OZWPp07USuskOiQBAk2uw4
-----END CERTIFICATE-----
Generated at Wed May 13 08:10:07 2026 by rpki-client