Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72FDA8163E6811F18AE15AB7CE1D38B0.roa
File: 72FDA8163E6811F18AE15AB7CE1D38B0.roa (raw, json)
Hash identifier: BuHVm6vE7yx5q1GKrffXcajosICZvKsOdt7jqLcHXW4=
Subject key identifier: A7:3C:03:DE:B8:BC:8A:67:20:A0:74:72:57:B0:4F:A7:49:45:F6:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72FDA8163E6811F18AE15AB7CE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:29:35 +0000
ROA not before: Wed 22 Apr 2026 16:29:30 +0000
ROA not after: Fri 29 May 2026 16:29:30 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110141 (0x1ae3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:29:30 2026 GMT
Not After : May 29 16:29:30 2026 GMT
Subject: CN=69e8f76f-e88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f2:c9:0b:de:d0:cc:79:0d:65:72:1e:2a:9b:
4c:6f:76:0e:19:60:57:ca:45:81:72:c9:28:27:41:
62:f3:08:7c:6b:17:9a:a9:67:b2:18:bf:f9:54:75:
ba:55:45:1a:9f:da:6e:95:a5:4b:a0:cc:28:06:a9:
43:15:d0:85:4a:b3:7d:1c:e7:df:60:44:66:48:6d:
cd:77:f3:21:00:ac:d3:43:0c:0a:0c:17:53:90:4e:
0d:ba:c2:92:74:e3:d8:92:ae:60:3a:24:53:ae:83:
b8:56:2d:57:0c:23:b6:1b:74:ca:47:47:4f:e2:bb:
6f:aa:ef:82:d9:70:35:12:8c:91:97:86:ff:44:ac:
aa:5c:58:72:36:75:28:f6:a8:7b:9f:c1:00:67:b0:
68:44:10:3c:52:3d:01:64:f8:d6:42:4d:7b:f2:d4:
a3:06:8a:6b:7d:e3:1c:b3:fd:30:76:cf:5b:5d:f1:
07:57:75:1c:e1:9f:b8:b7:cc:9e:13:85:73:bc:1b:
07:ff:e9:2f:b0:5d:ef:1e:e8:a9:b7:cb:06:52:a7:
ee:cc:83:a5:aa:00:6e:da:5f:c5:28:96:d1:88:f3:
de:d5:10:04:d2:52:ec:f8:8a:74:c0:5b:75:e6:5b:
00:ae:d1:b0:33:c2:9c:12:2f:21:d6:53:e6:d0:8e:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3C:03:DE:B8:BC:8A:67:20:A0:74:72:57:B0:4F:A7:49:45:F6:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72FDA8163E6811F18AE15AB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
88:7a:cf:d9:b9:4f:be:6b:4d:e0:15:f5:3f:29:20:a1:4b:e5:
0f:ec:53:8e:16:a6:e2:2f:a7:cd:36:fc:c3:1a:74:2d:95:3e:
72:71:8f:23:2e:44:b3:59:41:28:9b:f6:f9:42:09:56:12:2e:
56:a4:56:69:44:4f:f5:15:f0:c9:a5:fc:aa:6b:b1:6a:e7:c9:
81:46:8d:ce:d5:53:d2:fb:80:bf:1c:51:98:e7:ce:1e:19:b1:
22:1c:ee:d1:5c:b0:9a:69:96:a5:bd:4d:38:16:c8:41:0f:26:
e6:1b:d9:9a:ed:b9:f3:44:f0:6c:49:04:6f:9b:33:5b:4b:61:
77:2e:78:33:af:88:31:f0:39:bd:2f:3d:2e:d2:58:c4:fe:fb:
1a:41:8d:85:a7:00:ca:17:da:35:e0:d6:5e:92:50:3a:20:54:
51:2c:c0:0e:ed:2a:70:83:4c:6a:78:9a:29:1b:b5:e5:53:5a:
bb:e7:22:5c:c0:3f:f7:fa:b5:5b:5e:67:01:86:e8:55:fa:56:
42:bc:44:fd:60:98:1c:1b:55:66:d6:7b:9b:28:11:a0:96:25:
74:45:e1:c9:9e:59:8b:3a:b6:05:3d:fa:dd:50:88:56:c0:cd:
c8:e2:b8:36:5f:cd:44:e4:f3:c5:9d:e8:45:28:09:e6:ec:f0:
2e:1d:cd:e6
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAa49MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDIyMTYyOTMwWhcNMjYwNTI5MTYyOTMwWjAYMRYw
FAYDVQQDEw02OWU4Zjc2Zi1lODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5vLJC97QzHkNZXIeKptMb3YOGWBXykWBcskoJ0Fi8wh8axeaqWeyGL/5
VHW6VUUan9pulaVLoMwoBqlDFdCFSrN9HOffYERmSG3Nd/MhAKzTQwwKDBdTkE4N
usKSdOPYkq5gOiRTroO4Vi1XDCO2G3TKR0dP4rtvqu+C2XA1EoyRl4b/RKyqXFhy
NnUo9qh7n8EAZ7BoRBA8Uj0BZPjWQk178tSjBoprfeMcs/0wds9bXfEHV3Uc4Z+4
t8yeE4VzvBsH/+kvsF3vHuipt8sGUqfuzIOlqgBu2l/FKJbRiPPe1RAE0lLs+Ip0
wFt15lsArtGwM8KcEi8h1lPm0I6lmQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFKc8
A964vIpnIKB0clewT6dJRfZ5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MkZEQTgxNjNFNjgxMUYxOEFFMTVBQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBnOEAAwQBnOEMAwQAnOQDAwQB
nO4CMAwDBAOc/ngDBAGc/nwwDQYJKoZIhvcNAQELBQADggEBAIh6z9m5T75rTeAV
9T8pIKFL5Q/sU44WpuIvp802/MMadC2VPnJxjyMuRLNZQSib9vlCCVYSLlakVmlE
T/UV8Mml/KprsWrnyYFGjc7VU9L7gL8cUZjnzh4ZsSIc7tFcsJpplqW9TTgWyEEP
JuYb2ZrtufNE8GxJBG+bM1tLYXcueDOviDHwOb0vPS7SWMT++xpBjYWnAMoX2jXg
1l6SUDogVFEswA7tKnCDTGp4mikbteVTWrvnIlzAP/f6tVteZwGG6FX6VkK8RP1g
mBwbVWbWe5soEaCWJXRF4cmeWYs6tgU9+t1QiFbAzcjiuDZfzUTk88Wd6EUoCebs
8C4dzeY=
-----END CERTIFICATE-----
Generated at Wed May 13 09:47:52 2026 by rpki-client