Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B063A5245FF11F18B45CF07CF1D38B0.roa
File: 7B063A5245FF11F18B45CF07CF1D38B0.roa (raw, json)
Hash identifier: vEH4K0Dd+RWn53VzrCgBKbh+NtM2lUsoqKNW8Mb+3gQ=
Subject key identifier: 50:9D:32:12:28:F2:BD:F0:5E:9B:22:7E:52:81:24:F6:31:C9:74:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B123
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B063A5245FF11F18B45CF07CF1D38B0.roa
Signing time: Sat 02 May 2026 08:18:21 +0000
ROA not before: Sat 02 May 2026 08:18:15 +0000
ROA not after: Wed 02 May 2029 08:18:15 +0000
asID: 17561
IP address blocks: 156.232.107.0/24 maxlen: 24
156.233.28.0/24 maxlen: 24
156.233.29.0/24 maxlen: 24
156.233.30.0/24 maxlen: 24
156.233.31.0/24 maxlen: 24
156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110883 (0x1b123)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:18:15 2026 GMT
Not After : May 2 08:18:15 2029 GMT
Subject: CN=69f5b34d-c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:65:63:f0:8c:ff:82:37:e0:33:90:30:29:
7a:75:9d:eb:63:a2:cc:c1:b8:a0:11:27:c9:70:b1:
6f:59:30:75:c4:56:5b:5a:27:32:8c:e3:36:57:aa:
2f:21:06:c2:02:51:2f:5e:da:56:3e:ef:c2:89:12:
25:e8:90:c3:0f:0e:54:9a:76:61:2a:7f:11:ab:d7:
bd:bd:ce:9e:c9:92:af:19:15:6e:d2:56:a7:9b:ff:
b6:5a:92:ce:79:28:30:e2:6a:ab:a1:ed:38:07:0a:
c1:1c:e9:91:9e:d2:f5:7f:e3:55:00:7e:e6:cd:83:
14:b3:56:bb:85:14:34:e4:3d:d8:27:0c:53:4e:25:
ee:24:33:d5:ea:a0:ca:ef:9c:81:ac:09:90:82:51:
e1:22:ed:e9:4c:fc:2d:6b:32:c5:d8:1f:f3:de:f8:
33:49:9d:b1:9e:ea:ba:4d:04:dc:66:8c:5a:1b:99:
9e:f4:95:03:56:2a:6d:c0:63:b0:ef:cd:91:57:7f:
e0:79:fe:37:92:0a:31:92:4b:1b:66:05:9b:f6:32:
05:3f:5a:49:69:ed:b5:fc:92:d8:2d:ea:8d:9c:07:
8c:72:3c:d5:1b:f0:9f:cc:80:df:ae:1e:e3:45:28:
00:dc:f9:89:bb:c9:5a:97:3d:f3:5a:44:72:da:6a:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9D:32:12:28:F2:BD:F0:5E:9B:22:7E:52:81:24:F6:31:C9:74:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B063A5245FF11F18B45CF07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.107.0/24
156.233.28.0/22
156.245.128.0/21
156.245.188.0/23
156.245.198.0-156.245.202.255
Signature Algorithm: sha256WithRSAEncryption
3e:de:b5:4f:87:27:e4:5d:e5:c9:f3:6c:61:21:de:59:e9:84:
e5:64:90:b2:76:98:fe:de:1e:94:e2:44:bc:de:98:48:ed:0c:
59:14:7e:c8:2e:42:2f:9d:99:45:a0:ea:3e:ef:f2:62:f6:d8:
5c:51:58:3b:ec:fb:11:61:64:7d:fa:04:e0:29:65:a9:70:88:
b1:aa:cd:67:00:ba:31:1b:4a:c6:bf:4f:ce:a5:ca:72:ba:62:
68:e9:63:0c:0e:ee:30:d0:33:5f:c6:04:59:62:d4:c6:d9:ed:
eb:e5:5e:b3:72:1a:5e:5f:99:e9:7e:d1:12:4d:be:e0:46:a2:
93:b2:95:82:38:cd:1c:c1:00:c8:14:09:cf:6a:73:ab:35:0d:
bc:ef:c5:cf:e9:89:01:27:75:ea:63:93:d8:ae:07:7e:cd:dd:
7c:04:69:86:ec:35:d6:71:77:34:97:77:fc:08:c6:77:af:29:
91:13:88:3e:ae:c2:e2:0f:b8:0a:ec:b2:1b:d9:3c:9b:20:09:
f2:cb:56:db:b2:e7:05:66:8c:84:09:83:92:e7:76:17:fa:d7:
5e:69:0e:74:9f:9d:0a:43:c8:78:16:dd:de:00:39:9f:8a:e4:
92:2e:90:95:da:56:b4:36:60:02:29:bd:43:b3:03:5d:5d:c1:
cd:52:cb:46
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAbEjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAyMDgxODE1WhcNMjkwNTAyMDgxODE1WjAYMRYw
FAYDVQQDEw02OWY1YjM0ZC1jOWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsAxlY/CM/4I34DOQMCl6dZ3rY6LMwbigESfJcLFvWTB1xFZbWicyjOM2
V6ovIQbCAlEvXtpWPu/CiRIl6JDDDw5UmnZhKn8Rq9e9vc6eyZKvGRVu0lanm/+2
WpLOeSgw4mqroe04BwrBHOmRntL1f+NVAH7mzYMUs1a7hRQ05D3YJwxTTiXuJDPV
6qDK75yBrAmQglHhIu3pTPwtazLF2B/z3vgzSZ2xnuq6TQTcZoxaG5me9JUDVipt
wGOw782RV3/gef43kgoxkksbZgWb9jIFP1pJae21/JLYLeqNnAeMcjzVG/CfzIDf
rh7jRSgA3PmJu8lalz3zWkRy2mo4BwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFFCd
MhIo8r3wXpsiflKBJPYxyXQFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QjA2M0E1MjQ1RkYxMUYxOEI0NUNGMDdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAnOhrAwQCnOkcAwQDnPWAAwQB
nPW8MAwDBAGc9cYDBACc9cowDQYJKoZIhvcNAQELBQADggEBAD7etU+HJ+Rd5cnz
bGEh3lnphOVkkLJ2mP7eHpTiRLzemEjtDFkUfsguQi+dmUWg6j7v8mL22FxRWDvs
+xFhZH36BOApZalwiLGqzWcAujEbSsa/T86lynK6YmjpYwwO7jDQM1/GBFli1MbZ
7evlXrNyGl5fmel+0RJNvuBGopOylYI4zRzBAMgUCc9qc6s1Dbzvxc/piQEndepj
k9iuB37N3XwEaYbsNdZxdzSXd/wIxnevKZETiD6uwuIPuArsshvZPJsgCfLLVtuy
5wVmjIQJg5Lndhf6115pDnSfnQpDyHgW3d4AOZ+K5JIukJXaVrQ2YAIpvUOzA11d
wc1Sy0Y=
-----END CERTIFICATE-----
Generated at Wed May 13 09:17:50 2026 by rpki-client