Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/757FF73A210611F1931132E0DAE4EC9C.roa
File: 757FF73A210611F1931132E0DAE4EC9C.roa (raw, json)
Hash identifier: rv8wWglgrFLR4F/HqacYGr7AQAxv2vmkI8IFXfXToL0=
Subject key identifier: B2:17:3D:2D:2E:12:6E:E1:3B:04:9C:64:00:C8:9B:98:82:FD:D5:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A558
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/757FF73A210611F1931132E0DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:05:05 +0000
ROA not before: Mon 16 Mar 2026 07:05:00 +0000
ROA not after: Fri 16 Mar 2029 07:05:00 +0000
asID: 17561
IP address blocks: 156.255.158.0/24 maxlen: 24
156.255.159.0/24 maxlen: 24
156.255.160.0/24 maxlen: 24
156.255.161.0/24 maxlen: 24
156.255.162.0/24 maxlen: 24
156.255.163.0/24 maxlen: 24
156.255.164.0/24 maxlen: 24
156.255.165.0/24 maxlen: 24
156.255.166.0/24 maxlen: 24
156.255.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107864 (0x1a558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:05:00 2026 GMT
Not After : Mar 16 07:05:00 2029 GMT
Subject: CN=69b7aba1-007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2c:ab:b7:cb:06:18:79:d4:da:1e:f4:6d:93:
88:22:f7:05:0a:fe:49:b4:11:62:e8:ee:f2:63:46:
00:2b:fd:23:ea:75:af:8f:a8:9b:9a:01:18:d3:c0:
1e:0a:e2:da:a2:f7:3d:5b:f2:c6:d4:54:df:c1:f7:
f1:7e:c5:b3:66:1d:84:a6:0b:14:c8:04:fc:1f:b6:
2e:35:eb:c6:4c:7d:7a:f7:75:3a:7a:f6:48:eb:38:
0c:e5:e1:e4:f5:89:2f:04:91:cf:a8:53:f0:28:72:
fc:b1:f9:28:2a:a9:21:cb:11:5b:c3:74:33:4d:4c:
ba:53:b9:d6:5a:c4:ff:c1:df:1b:1a:ac:59:81:2f:
03:0c:a0:74:80:90:46:67:22:f8:a2:26:42:95:54:
d4:dd:b0:38:f8:28:b8:49:1d:45:0e:8d:62:8d:62:
00:e1:5f:3c:f4:2b:8a:29:9b:1f:f0:df:6d:0b:9d:
24:4d:85:09:f5:ce:06:14:d9:80:19:f9:b0:41:e2:
e9:52:01:b9:c5:45:93:84:19:4d:3b:97:de:98:bb:
11:b0:36:c6:fa:62:a7:b1:dc:06:65:3f:5d:38:14:
24:79:03:b0:72:83:ec:45:75:6f:5d:2e:25:bf:16:
5b:7c:46:7f:47:00:0e:51:3d:1b:8d:0a:85:f7:92:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:3D:2D:2E:12:6E:E1:3B:04:9C:64:00:C8:9B:98:82:FD:D5:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/757FF73A210611F1931132E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.158.0-156.255.167.255
Signature Algorithm: sha256WithRSAEncryption
50:bd:ac:56:c4:56:ae:47:e9:e9:32:ae:ab:3a:2f:92:e9:c6:
da:43:a4:1d:18:ba:1b:8f:90:ed:99:64:31:4e:5a:ec:75:da:
10:7e:b8:22:b5:b9:eb:72:75:37:65:53:f3:51:55:9b:2b:cf:
0d:55:26:36:e6:0c:c3:94:8d:a5:d4:4e:1b:c6:4d:74:15:57:
72:7a:a3:95:85:9a:d4:dc:a5:a3:89:85:eb:1f:32:41:11:b2:
fc:ec:a5:8f:2c:0a:83:f9:16:f8:5f:2c:46:80:50:38:5b:60:
1c:dc:48:6d:19:cf:e2:94:c8:72:5e:00:bf:f7:b1:7b:da:81:
f0:e7:11:92:c6:3e:ed:50:bc:bd:8b:45:28:bd:c2:78:5d:cd:
bc:0f:a3:ac:2b:51:14:73:9a:9c:b9:40:ff:e5:62:24:a1:85:
8a:11:63:b5:48:cc:49:b4:6f:c7:e9:9f:8d:87:7f:b7:06:9b:
dd:0e:22:c9:c8:b3:6a:b5:b6:b6:22:5e:d9:3b:6a:eb:e0:1c:
18:61:e9:c9:50:99:07:4b:f3:a3:ca:d6:7a:9d:0e:2c:43:10:
83:82:92:ee:27:c6:ef:77:79:db:ff:fc:1c:83:78:7b:53:5d:
6e:01:38:aa:25:d6:ce:21:86:dd:3c:75:fa:be:1e:56:0c:c9:
28:57:55:45
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaVYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE2MDcwNTAwWhcNMjkwMzE2MDcwNTAwWjAYMRYw
FAYDVQQDEw02OWI3YWJhMS0wMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyCyrt8sGGHnU2h70bZOIIvcFCv5JtBFi6O7yY0YAK/0j6nWvj6ibmgEY
08AeCuLaovc9W/LG1FTfwffxfsWzZh2EpgsUyAT8H7YuNevGTH1693U6evZI6zgM
5eHk9YkvBJHPqFPwKHL8sfkoKqkhyxFbw3QzTUy6U7nWWsT/wd8bGqxZgS8DDKB0
gJBGZyL4oiZClVTU3bA4+Ci4SR1FDo1ijWIA4V889CuKKZsf8N9tC50kTYUJ9c4G
FNmAGfmwQeLpUgG5xUWThBlNO5femLsRsDbG+mKnsdwGZT9dOBQkeQOwcoPsRXVv
XS4lvxZbfEZ/RwAOUT0bjQqF95LyMQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLIX
PS0uEm7hOwScZADIm5iC/dXZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83NTdGRjczQTIxMDYxMUYxOTMxMTMyRTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc/54DBAOc/6AwDQYJKoZI
hvcNAQELBQADggEBAFC9rFbEVq5H6ekyrqs6L5LpxtpDpB0YuhuPkO2ZZDFOWux1
2hB+uCK1uetydTdlU/NRVZsrzw1VJjbmDMOUjaXUThvGTXQVV3J6o5WFmtTcpaOJ
hesfMkERsvzspY8sCoP5FvhfLEaAUDhbYBzcSG0Zz+KUyHJeAL/3sXvagfDnEZLG
Pu1QvL2LRSi9wnhdzbwPo6wrURRzmpy5QP/lYiShhYoRY7VIzEm0b8fpn42Hf7cG
m90OIsnIs2q1trYiXtk7auvgHBhh6clQmQdL86PK1nqdDixDEIOCku4nxu93edv/
/ByDeHtTXW4BOKol1s4hht08dfq+HlYMyShXVUU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:27 2026 by rpki-client