Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF57216245A411F1B3120DD0CE1D38B0.roa
File: CF57216245A411F1B3120DD0CE1D38B0.roa (raw, json)
Hash identifier: SqP0GHQVZnnxq+mm12yRFFIqiNo+MkAAJiEklXeylPE=
Subject key identifier: A3:1B:22:0B:B0:B9:99:DF:33:71:58:C2:92:BE:1D:05:2C:17:99:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B100
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF57216245A411F1B3120DD0CE1D38B0.roa
Signing time: Fri 01 May 2026 21:29:18 +0000
ROA not before: Fri 01 May 2026 21:29:14 +0000
ROA not after: Sat 13 Jun 2026 21:29:14 +0000
asID: 18046
IP address blocks: 156.236.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110848 (0x1b100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:29:14 2026 GMT
Not After : Jun 13 21:29:14 2026 GMT
Subject: CN=69f51b2e-8701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:26:a5:c1:66:4e:f7:0f:80:12:36:07:af:75:
3c:d8:b2:6c:be:96:dc:da:44:4e:42:e5:6b:41:51:
8f:cd:02:c5:c9:4d:4d:eb:a0:85:cc:f4:ba:2c:5c:
33:a7:43:b1:3f:5c:b1:7b:b2:59:1e:0b:ed:dd:db:
50:a2:bf:dc:be:b6:48:7d:fe:bb:30:d0:86:5b:1c:
2c:44:33:52:17:38:60:f4:54:d4:42:b3:74:ae:86:
ff:9b:a9:68:4e:c1:29:57:3f:db:aa:88:c4:10:74:
f9:38:cc:38:11:8e:71:69:43:36:47:35:26:7f:ff:
a2:c4:aa:f5:35:74:e2:59:e9:2b:58:62:f1:ec:4c:
a5:d3:c6:99:d9:a6:b9:e7:ac:6f:28:2c:5b:8f:1a:
a8:62:b6:e3:66:8d:39:29:7c:71:72:d1:5a:3d:8d:
a8:2e:7f:2b:2c:86:81:fb:51:b6:4a:11:4c:03:bb:
8a:3e:72:0d:63:68:73:d6:09:9c:77:b1:9f:fd:54:
9e:c4:9d:41:9e:26:17:a5:27:32:16:cc:e5:2b:83:
9f:a3:e3:b1:04:08:ad:a4:d4:8b:78:0b:5d:86:63:
88:fa:f1:ab:b3:e8:67:93:75:47:e2:d4:77:30:aa:
40:a0:2d:0a:7c:37:15:33:85:de:2b:1e:ef:b1:26:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1B:22:0B:B0:B9:99:DF:33:71:58:C2:92:BE:1D:05:2C:17:99:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF57216245A411F1B3120DD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.13.0/24
Signature Algorithm: sha256WithRSAEncryption
45:74:b3:4c:49:89:f8:e3:96:b8:b6:34:77:ae:40:f0:fb:f6:
02:b0:e4:97:ec:22:a2:cb:1e:26:b1:60:25:12:87:04:43:08:
66:46:ff:60:64:d2:e9:5c:c8:69:4c:69:e6:0b:71:ae:ad:84:
5c:de:8c:80:b5:3d:1c:f0:e8:69:4d:65:ea:68:74:14:80:58:
b1:88:38:26:d4:ab:cb:cf:ff:07:1f:01:0a:ec:99:34:c0:dc:
74:61:85:86:eb:59:83:aa:b0:ae:e2:6b:e4:75:b8:19:7c:69:
9b:7e:1a:39:e9:5b:b2:18:34:72:69:1f:bf:e3:8b:35:61:10:
9c:a9:01:cb:2c:9f:8b:44:7d:98:a8:d4:1c:6c:3b:1b:d7:cd:
de:d8:d7:69:a2:4e:29:7a:26:13:b2:6e:14:f3:8e:64:93:6f:
07:31:c9:33:b3:a1:1f:4f:e6:7b:bd:dd:d1:2a:91:d8:9f:b1:
aa:80:fc:7d:56:b9:7a:00:66:dc:34:95:8a:56:be:e8:e9:2b:
57:e9:bb:8c:ee:6c:9b:ca:de:1b:83:44:af:7b:21:9e:7c:03:
51:56:a7:a7:3a:ee:f9:0c:55:a1:d7:fb:51:5b:ed:ab:0a:ac:
01:b2:20:5a:b8:66:83:08:83:a9:15:87:72:63:db:8c:60:92:
c2:f3:b2:3a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbEAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTAxMjEyOTE0WhcNMjYwNjEzMjEyOTE0WjAYMRYw
FAYDVQQDEw02OWY1MWIyZS04NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4SalwWZO9w+AEjYHr3U82LJsvpbc2kROQuVrQVGPzQLFyU1N66CFzPS6
LFwzp0OxP1yxe7JZHgvt3dtQor/cvrZIff67MNCGWxwsRDNSFzhg9FTUQrN0rob/
m6loTsEpVz/bqojEEHT5OMw4EY5xaUM2RzUmf/+ixKr1NXTiWekrWGLx7Eyl08aZ
2aa556xvKCxbjxqoYrbjZo05KXxxctFaPY2oLn8rLIaB+1G2ShFMA7uKPnINY2hz
1gmcd7Gf/VSexJ1BniYXpScyFszlK4Ofo+OxBAitpNSLeAtdhmOI+vGrs+hnk3VH
4tR3MKpAoC0KfDcVM4XeKx7vsSYuRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKMb
IguwuZnfM3FYwpK+HQUsF5kiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjU3MjE2MjQ1QTQxMUYxQjMxMjBERDBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOwNMA0GCSqGSIb3DQEBCwUA
A4IBAQBFdLNMSYn445a4tjR3rkDw+/YCsOSX7CKiyx4msWAlEocEQwhmRv9gZNLp
XMhpTGnmC3GurYRc3oyAtT0c8OhpTWXqaHQUgFixiDgm1KvLz/8HHwEK7Jk0wNx0
YYWG61mDqrCu4mvkdbgZfGmbfho56VuyGDRyaR+/44s1YRCcqQHLLJ+LRH2YqNQc
bDsb183e2Ndpok4peiYTsm4U845kk28HMckzs6EfT+Z7vd3RKpHYn7GqgPx9Vrl6
AGbcNJWKVr7o6StX6buM7mybyt4bg0SveyGefANRVqenOu75DFWh1/tRW+2rCqwB
siBauGaDCIOpFYdyY9uMYJLC87I6
-----END CERTIFICATE-----
Generated at Wed May 13 14:11:02 2026 by rpki-client