Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F00634492F11F199C0AAE7CE1D38B0.roa
File: C8F00634492F11F199C0AAE7CE1D38B0.roa (raw, json)
Hash identifier: u7iU9ev3fMLq0TBmuWFibhJvr8qHbOti3B92+PHqHaI=
Subject key identifier: 5B:E6:31:0B:36:23:2B:CA:BF:68:43:12:1B:12:D1:DB:9F:34:5F:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F00634492F11F199C0AAE7CE1D38B0.roa
Signing time: Wed 06 May 2026 09:41:41 +0000
ROA not before: Wed 06 May 2026 09:41:36 +0000
ROA not after: Sun 06 May 2029 09:41:36 +0000
asID: 17561
IP address blocks: 156.237.230.0/24 maxlen: 24
156.237.231.0/24 maxlen: 24
156.237.232.0/24 maxlen: 24
156.237.233.0/24 maxlen: 24
156.237.234.0/24 maxlen: 24
156.237.235.0/24 maxlen: 24
156.237.236.0/24 maxlen: 24
156.237.237.0/24 maxlen: 24
156.237.238.0/24 maxlen: 24
156.237.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111064 (0x1b1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 09:41:36 2026 GMT
Not After : May 6 09:41:36 2029 GMT
Subject: CN=69fb0cd5-8045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:00:63:b4:f5:cc:bd:af:9b:68:b6:69:ba:
34:1b:47:53:47:45:1d:85:18:fd:42:a9:31:e6:b3:
48:ba:f0:70:02:af:5b:48:df:21:f0:91:cb:f7:6c:
7c:18:53:e9:25:dd:cf:43:a3:92:87:a0:4d:82:7a:
8b:9e:6c:32:01:b2:52:50:db:81:b1:33:bb:c7:27:
f4:0a:bb:8a:39:f0:3f:a8:b6:13:0c:0c:0a:1b:a3:
79:fa:a8:b0:e8:ca:e6:31:8c:df:18:c4:ca:de:f0:
f6:bb:7c:8a:5f:ee:a5:7b:e9:7a:4d:06:20:9d:98:
9a:54:f3:5e:48:1c:68:c2:64:61:27:6d:7a:04:e8:
2d:32:0d:20:50:af:d7:6d:f4:55:92:8d:5d:c0:50:
0e:0f:6a:3c:3b:7a:00:85:a4:45:62:de:a5:a9:72:
ef:75:b1:2c:be:e3:c6:93:dd:68:9a:c7:92:31:42:
3a:d3:90:69:72:3a:26:34:1e:73:db:eb:a5:be:b2:
72:d4:a2:11:27:db:52:92:b3:e2:7f:0e:ad:32:07:
bb:9b:37:37:1b:71:52:b4:cf:e5:ae:b4:fd:8c:b9:
83:de:c9:b1:cf:67:76:03:26:ca:b2:3a:fc:fb:6a:
23:5e:83:91:13:06:f5:d0:4f:44:99:09:9b:6e:06:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:31:0B:36:23:2B:CA:BF:68:43:12:1B:12:D1:DB:9F:34:5F:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8F00634492F11F199C0AAE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.237.230.0-156.237.239.255
Signature Algorithm: sha256WithRSAEncryption
26:60:55:c9:20:1e:43:dc:0a:6f:81:49:00:dc:c2:b0:78:65:
93:f7:c5:e5:a4:43:45:14:16:5b:49:fa:8e:99:aa:dc:70:b4:
2a:98:a7:72:d5:99:ee:f5:cb:8f:d5:d6:d8:0c:a0:7f:fd:d2:
cc:2f:3c:38:69:06:27:40:5a:7e:ca:9c:83:3c:f9:cd:a2:2b:
08:56:dd:45:40:4e:c7:a5:6b:ef:74:99:65:a8:6d:ed:9f:14:
a1:11:67:95:84:83:93:c9:42:6a:78:41:df:d5:06:6a:e5:36:
f0:d0:05:cd:aa:d1:92:25:ab:02:62:fb:75:ff:14:4b:5f:55:
b3:16:37:38:4a:a8:8e:85:99:72:ba:ba:66:4c:5d:a7:36:e1:
da:d0:29:4f:e9:b0:fc:7c:0a:76:a2:e2:b7:b5:7e:98:f5:0b:
78:4f:35:49:e8:b7:fa:12:b9:54:df:41:55:80:3b:04:02:cb:
42:84:b4:d9:2e:61:d4:2f:0e:88:c2:3f:f4:5b:fa:2c:dc:80:
b2:df:d2:fc:cc:59:05:7f:7c:f7:ff:b2:32:80:b6:46:7b:0c:
ff:97:2d:e0:a4:e6:5b:18:cc:d7:8e:dd:b4:7b:2a:22:4f:4f:
3c:ed:05:54:f0:1a:5e:6f:d6:57:bf:90:f1:c2:38:35:e3:af:
c0:9e:38:99
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbHYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA2MDk0MTM2WhcNMjkwNTA2MDk0MTM2WjAYMRYw
FAYDVQQDEw02OWZiMGNkNS04MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAy+EAY7T1zL2vm2i2abo0G0dTR0UdhRj9Qqkx5rNIuvBwAq9bSN8h8JHL
92x8GFPpJd3PQ6OSh6BNgnqLnmwyAbJSUNuBsTO7xyf0CruKOfA/qLYTDAwKG6N5
+qiw6MrmMYzfGMTK3vD2u3yKX+6le+l6TQYgnZiaVPNeSBxowmRhJ216BOgtMg0g
UK/XbfRVko1dwFAOD2o8O3oAhaRFYt6lqXLvdbEsvuPGk91omseSMUI605Bpcjom
NB5z2+ulvrJy1KIRJ9tSkrPifw6tMge7mzc3G3FStM/lrrT9jLmD3smxz2d2AybK
sjr8+2ojXoOREwb10E9EmQmbbgaDTQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFvm
MQs2IyvKv2hDEhsS0dufNF/0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOEYwMDYzNDQ5MkYxMUYxOTlDMEFBRTdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc7eYDBASc7eAwDQYJKoZI
hvcNAQELBQADggEBACZgVckgHkPcCm+BSQDcwrB4ZZP3xeWkQ0UUFltJ+o6Zqtxw
tCqYp3LVme71y4/V1tgMoH/90swvPDhpBidAWn7KnIM8+c2iKwhW3UVATsela+90
mWWobe2fFKERZ5WEg5PJQmp4Qd/VBmrlNvDQBc2q0ZIlqwJi+3X/FEtfVbMWNzhK
qI6FmXK6umZMXac24drQKU/psPx8Cnai4re1fpj1C3hPNUnot/oSuVTfQVWAOwQC
y0KEtNkuYdQvDojCP/Rb+izcgLLf0vzMWQV/fPf/sjKAtkZ7DP+XLeCk5lsYzNeO
3bR7KiJPTzztBVTwGl5v1le/kPHCODXjr8CeOJk=
-----END CERTIFICATE-----
Generated at Wed May 13 09:24:05 2026 by rpki-client