Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A450650C4E4411F197BEF4C1CE1D38B0.roa
File: A450650C4E4411F197BEF4C1CE1D38B0.roa (raw, json)
Hash identifier: 6WGk/+Em2ZAl1Akl6JSlKh8tzGD5d149CH3UOlDxdwc=
Subject key identifier: 07:AF:D9:07:FC:9C:7B:3D:18:78:AF:1B:AA:B2:97:49:A0:42:FE:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B407
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A450650C4E4411F197BEF4C1CE1D38B0.roa
Signing time: Tue 12 May 2026 20:53:35 +0000
ROA not before: Tue 12 May 2026 20:53:29 +0000
ROA not after: Tue 16 Jun 2026 20:53:29 +0000
asID: 22773
IP address blocks: 156.238.169.0/24 maxlen: 24
156.238.170.0/24 maxlen: 24
156.238.171.0/24 maxlen: 24
156.239.149.0/24 maxlen: 24
156.239.150.0/24 maxlen: 24
156.239.151.0/24 maxlen: 24
156.239.152.0/24 maxlen: 24
156.239.153.0/24 maxlen: 24
156.242.16.0/24 maxlen: 24
156.243.48.0/20 maxlen: 24
156.243.64.0/20 maxlen: 24
156.243.100.0/24 maxlen: 24
156.243.101.0/24 maxlen: 24
156.243.203.0/24 maxlen: 24
156.243.204.0/24 maxlen: 24
156.248.26.0/24 maxlen: 24
156.248.27.0/24 maxlen: 24
156.248.28.0/24 maxlen: 24
156.248.29.0/24 maxlen: 24
156.249.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111623 (0x1b407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 20:53:29 2026 GMT
Not After : Jun 16 20:53:29 2026 GMT
Subject: CN=6a03934f-5f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1d:fe:f4:04:38:08:bb:64:e5:e6:e6:49:78:
93:07:f8:bb:e3:4e:8b:c2:fc:28:3e:e0:23:f3:11:
ee:0f:8d:ae:7b:20:38:a9:e4:ac:ae:88:1b:4d:95:
a5:66:d4:0f:8b:a8:64:d9:44:44:cd:b2:ce:31:65:
20:48:55:0c:06:0f:e2:61:41:7a:93:45:f5:f5:a1:
b2:c7:2a:db:5a:95:d0:0f:f4:d1:1a:49:a6:ea:0f:
e7:95:df:8c:0e:b6:bb:8f:8c:e0:8c:f2:fa:db:e3:
50:01:59:47:19:bd:f3:1c:f3:99:09:98:dc:f5:c0:
bd:5f:6b:3a:e9:cf:1c:cf:8d:fe:fd:f2:ff:ff:8a:
bf:5e:62:79:e8:37:84:2b:d2:c0:aa:0f:91:92:19:
f9:f3:45:02:aa:a9:06:36:6b:c3:ae:94:cf:fc:99:
2c:19:c2:8d:ad:c2:00:34:23:47:2d:99:81:2c:3d:
5b:e1:1a:68:c1:65:32:21:e0:db:cc:07:e0:e1:9a:
a7:f1:58:44:9a:78:f0:8c:92:56:ca:cb:07:c4:ac:
9f:30:e9:bb:b7:52:b3:ac:d4:d7:1b:60:e3:69:76:
d0:56:ff:f6:f1:27:b0:2b:a1:d6:5c:58:ec:96:89:
cb:6e:a9:5a:cb:4f:72:fb:d4:ef:8c:1e:e4:8d:32:
e8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:D9:07:FC:9C:7B:3D:18:78:AF:1B:AA:B2:97:49:A0:42:FE:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A450650C4E4411F197BEF4C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.169.0-156.238.171.255
156.239.149.0-156.239.153.255
156.242.16.0/24
156.243.48.0-156.243.79.255
156.243.100.0/23
156.243.203.0-156.243.204.255
156.248.26.0-156.248.29.255
156.249.120.0/24
Signature Algorithm: sha256WithRSAEncryption
84:43:e6:df:85:da:e2:af:e2:62:ca:77:53:18:f7:e7:6d:d1:
16:6d:f7:30:56:02:76:ca:2a:a5:73:3f:bb:b3:4f:59:81:0a:
ad:d7:d9:d6:ed:6c:13:f3:21:fd:84:84:e7:76:aa:a3:f2:cb:
91:6e:00:2d:d2:c4:fd:b4:06:b0:d4:4a:59:87:43:0a:86:4f:
d6:4e:d2:de:4b:7a:69:c9:56:1e:6a:bb:a9:16:b4:0c:30:6c:
a7:82:48:0a:11:33:da:33:9b:aa:7a:98:06:72:9c:90:14:45:
b5:a4:51:19:36:5c:e9:02:ea:4f:ce:51:ea:ee:db:c2:55:ad:
64:d8:66:db:8e:09:2c:cd:a9:f5:89:36:c9:6e:15:c1:04:4e:
1d:4c:2f:f8:36:95:8f:a2:2d:07:08:8c:6f:74:49:8c:37:ac:
32:7e:61:68:9e:55:9a:cf:7f:02:4c:0b:a7:89:23:30:e1:8f:
df:93:78:da:3d:b8:ba:c1:2f:ef:83:42:42:a4:f7:a8:97:77:
94:f0:d3:6f:12:f5:0e:44:34:8c:35:6c:93:b5:f5:8b:2b:76:
97:65:53:9e:be:92:c6:0a:c0:a6:aa:6e:13:78:f2:f8:4d:e9:
6f:16:a9:e1:43:32:df:2b:c0:3a:39:c4:8a:f0:d5:29:81:37:
9b:0a:5c:ba
-----BEGIN CERTIFICATE-----
MIIF0zCCBLugAwIBAgIDAbQHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEyMjA1MzI5WhcNMjYwNjE2MjA1MzI5WjAYMRYw
FAYDVQQDEw02YTAzOTM0Zi01ZjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApR3+9AQ4CLtk5ebmSXiTB/i7406LwvwoPuAj8xHuD42ueyA4qeSsrogb
TZWlZtQPi6hk2UREzbLOMWUgSFUMBg/iYUF6k0X19aGyxyrbWpXQD/TRGkmm6g/n
ld+MDra7j4zgjPL62+NQAVlHGb3zHPOZCZjc9cC9X2s66c8cz43+/fL//4q/XmJ5
6DeEK9LAqg+Rkhn580UCqqkGNmvDrpTP/JksGcKNrcIANCNHLZmBLD1b4RpowWUy
IeDbzAfg4Zqn8VhEmnjwjJJWyssHxKyfMOm7t1KzrNTXG2DjaXbQVv/28SewK6HW
XFjslonLbqlay09y+9TvjB7kjTLoUwIDAQABo4IC9DCCAvAwHQYDVR0OBBYEFAev
2Qf8nHs9GHivG6qyl0mgQv50MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNDUwNjUwQzRFNDQxMUYxOTdCRUY0QzFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBACc7qkDBAKc7qgwDAMEAJzv
lQMEAZzvmAMEAJzyEDAMAwQEnPMwAwQEnPNAAwQBnPNkMAwDBACc88sDBACc88ww
DAMEAZz4GgMEAZz4HAMEAJz5eDANBgkqhkiG9w0BAQsFAAOCAQEAhEPm34Xa4q/i
Ysp3Uxj3523RFm33MFYCdsoqpXM/u7NPWYEKrdfZ1u1sE/Mh/YSE53aqo/LLkW4A
LdLE/bQGsNRKWYdDCoZP1k7S3kt6aclWHmq7qRa0DDBsp4JIChEz2jObqnqYBnKc
kBRFtaRRGTZc6QLqT85R6u7bwlWtZNhm244JLM2p9Yk2yW4VwQROHUwv+DaVj6It
BwiMb3RJjDesMn5haJ5Vms9/AkwLp4kjMOGP35N42j24usEv74NCQqT3qJd3lPDT
bxL1DkQ0jDVsk7X1iyt2l2VTnr6SxgrApqpuE3jy+E3pbxap4UMy3yvAOjnEivDV
KYE3mwpcug==
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:56 2026 by rpki-client