Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD23F3F085BC11F19228FDEECE1D38B0.roa
File: BD23F3F085BC11F19228FDEECE1D38B0.roa (raw, json)
Hash identifier: LAH/6TyetgyJkGuHi4mwyj2tYvHSc5OJliQBwESSL/s=
Subject key identifier: C0:64:EB:4B:C1:EB:3A:88:1F:08:30:C0:83:F9:C8:DA:9B:6A:BC:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C74F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD23F3F085BC11F19228FDEECE1D38B0.roa
Signing time: Wed 22 Jul 2026 11:01:50 +0000
ROA not before: Wed 22 Jul 2026 11:01:46 +0000
ROA not after: Sun 23 Aug 2026 11:01:46 +0000
asID: 64013
IP address blocks: 156.247.32.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116559 (0x1c74f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 11:01:46 2026 GMT
Not After : Aug 23 11:01:46 2026 GMT
Subject: CN=6a60a31e-a798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:25:cf:6f:d6:d4:f5:51:49:c8:19:93:6a:
75:df:fd:c1:e6:c3:e8:19:bb:94:96:38:3a:77:54:
90:02:73:40:30:ec:f5:27:77:b6:7d:cc:ee:f4:b7:
02:45:ab:af:80:3f:7c:62:ed:df:59:8d:90:44:76:
3a:60:79:4b:e1:14:64:b3:a5:f8:be:dc:3c:6e:14:
e3:20:dc:3b:b8:a7:9b:18:b1:41:f7:00:c9:73:27:
b2:ef:3d:bd:10:d1:7f:f8:8c:2c:46:46:b0:bd:66:
b0:3f:49:11:cd:ea:2f:93:05:86:c7:b1:b1:a8:75:
c7:9b:a8:bc:96:f5:11:a4:a6:55:07:2a:29:6b:d1:
99:f0:fa:fc:27:67:0c:9e:11:fc:97:32:8a:9b:df:
0a:d0:94:44:a2:2c:10:21:32:1e:02:c6:69:23:6c:
22:13:98:bc:bf:75:14:64:12:2b:b7:4c:eb:56:27:
b7:93:ba:23:ba:06:19:07:50:0d:ae:a8:5b:f4:57:
c5:ce:58:62:03:ff:63:9f:62:6c:31:96:d3:4a:29:
d8:ea:af:74:3e:84:85:bc:19:b0:2f:9c:99:93:ab:
56:38:5b:85:70:d5:b5:5a:fb:76:f3:0d:ef:4f:7e:
67:5c:bd:84:33:19:b0:41:9a:83:8e:e5:ca:07:e0:
43:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:EB:4B:C1:EB:3A:88:1F:08:30:C0:83:F9:C8:DA:9B:6A:BC:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD23F3F085BC11F19228FDEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
32:c0:45:f7:cb:c4:de:ea:0b:0e:27:0e:b5:a2:fa:3e:24:7b:
d5:35:b6:0a:7a:61:ff:2a:03:25:db:03:d4:fd:ef:16:61:01:
df:7a:1d:da:1a:fc:4b:59:9c:e2:01:bc:d3:16:c7:81:85:29:
05:fc:f8:2f:cd:df:c3:17:c8:e4:3b:36:38:25:fe:01:9a:01:
bc:4d:96:7a:4a:c9:6f:85:e1:ca:5a:b5:a2:d4:a3:23:45:6d:
ae:2a:ab:80:4a:32:14:8f:94:0c:94:ee:77:ed:32:4f:69:18:
fe:23:4a:55:f1:41:60:57:12:5f:1b:8a:99:ca:63:d6:f3:57:
99:e3:66:e2:38:70:28:c2:bd:72:68:31:cf:3c:e9:70:40:a9:
9f:26:43:76:91:b7:d6:1c:8d:90:e9:7c:26:23:26:57:1d:b2:
60:55:70:91:28:1f:8b:36:cc:d0:50:5a:c1:89:cc:1f:4f:0c:
1d:46:a9:e7:b7:95:76:55:9e:77:df:87:d0:e1:e2:f3:d9:4d:
08:5d:34:ba:4b:5f:6d:b3:20:66:99:b6:05:c8:0b:38:f0:d0:
5e:53:36:2d:87:81:30:66:a6:57:f5:3f:42:cf:9e:c2:41:be:
ea:6c:6d:78:49:c3:26:50:f9:a4:b1:06:ff:e3:f5:be:00:82:
7e:9c:11:60
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcdPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzIyMTEwMTQ2WhcNMjYwODIzMTEwMTQ2WjAYMRYw
FAYDVQQDEw02YTYwYTMxZS1hNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqi4lz2/W1PVRScgZk2p13/3B5sPoGbuUljg6d1SQAnNAMOz1J3e2fczu
9LcCRauvgD98Yu3fWY2QRHY6YHlL4RRks6X4vtw8bhTjINw7uKebGLFB9wDJcyey
7z29ENF/+IwsRkawvWawP0kRzeovkwWGx7GxqHXHm6i8lvURpKZVByopa9GZ8Pr8
J2cMnhH8lzKKm98K0JREoiwQITIeAsZpI2wiE5i8v3UUZBIrt0zrVie3k7ojugYZ
B1ANrqhb9FfFzlhiA/9jn2JsMZbTSinY6q90PoSFvBmwL5yZk6tWOFuFcNW1Wvt2
8w3vT35nXL2EMxmwQZqDjuXKB+BDhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMBk
60vB6zqIHwgwwIP5yNqbarwDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRDIzRjNGMDg1QkMxMUYxOTIyOEZERUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQAywEX3y8Te6gsOJw61ovo+JHvVNbYKemH/KgMl2wPU/e8WYQHfeh3aGvxL
WZziAbzTFseBhSkF/Pgvzd/DF8jkOzY4Jf4BmgG8TZZ6SslvheHKWrWi1KMjRW2u
KquASjIUj5QMlO537TJPaRj+I0pV8UFgVxJfG4qZymPW81eZ42biOHAowr1yaDHP
POlwQKmfJkN2kbfWHI2Q6XwmIyZXHbJgVXCRKB+LNszQUFrBicwfTwwdRqnnt5V2
VZ5334fQ4eLz2U0IXTS6S19tsyBmmbYFyAs48NBeUzYth4EwZqZX9T9Cz57CQb7q
bG14ScMmUPmksQb/4/W+AIJ+nBFg
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:21:05 2026 by rpki-client