Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D568934A17CA11F1A4687EC2DAE4EC9C.roa
File: D568934A17CA11F1A4687EC2DAE4EC9C.roa (raw, json)
Hash identifier: rGx+BHv2pzQ43cXYqWBibpm9bXdKrybwCK2h4kaaQrc=
Subject key identifier: 21:7B:ED:F9:5A:70:0C:7F:34:D2:F5:F7:E6:63:6B:32:0B:B8:A1:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A252
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D568934A17CA11F1A4687EC2DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 13:05:36 +0000
ROA not before: Wed 04 Mar 2026 13:05:31 +0000
ROA not after: Fri 10 Apr 2026 13:05:31 +0000
asID: 141159
IP address blocks: 156.233.224.0/24 maxlen: 24
156.233.225.0/24 maxlen: 24
156.233.230.0/24 maxlen: 24
156.233.231.0/24 maxlen: 24
156.233.236.0/22 maxlen: 24
156.233.236.0/24 maxlen: 24
156.233.237.0/24 maxlen: 24
156.233.238.0/24 maxlen: 24
156.233.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107090 (0x1a252)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 13:05:31 2026 GMT
Not After : Apr 10 13:05:31 2026 GMT
Subject: CN=69a82e20-8906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:a3:33:a9:1b:da:eb:a6:a4:0d:67:f7:2d:
05:aa:79:b0:ea:7a:5c:65:44:bf:99:2e:c1:87:1c:
b7:a9:3d:d4:6c:40:22:c1:0e:3d:67:8d:73:8b:ea:
dd:6d:85:4c:05:9c:5c:10:97:ed:c9:52:84:72:f6:
bc:c7:15:50:7a:60:d2:7d:ba:66:21:5e:70:5d:f7:
6c:a4:6a:99:e1:63:11:28:bb:cf:52:d0:42:3b:2e:
d1:d0:0e:a3:43:e2:e4:e8:2f:ed:ca:9e:d3:fb:9e:
91:87:0f:16:d6:6f:fc:f6:7f:89:69:1a:ab:4f:b1:
de:6b:4f:eb:85:9e:8d:6b:68:bc:59:e0:dd:47:46:
64:bd:e7:3c:fa:42:e9:cb:a2:a4:da:2e:83:8f:5e:
a5:d0:dc:c4:aa:bd:08:8b:4d:94:52:0e:24:46:0c:
af:4e:83:63:e3:3a:7a:1c:be:03:bf:a2:74:d0:84:
45:cb:11:de:1c:d4:9d:1d:7d:95:95:76:b8:73:92:
76:c6:b7:27:54:73:10:88:9e:c6:98:20:02:96:48:
70:75:f4:9c:ab:b5:83:15:b8:f1:37:ce:2d:34:22:
fa:25:b0:c8:9f:ba:43:da:64:9f:26:04:2a:c9:78:
9e:80:a1:b4:0e:b6:33:d6:7d:fb:10:54:05:8b:a0:
91:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:ED:F9:5A:70:0C:7F:34:D2:F5:F7:E6:63:6B:32:0B:B8:A1:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D568934A17CA11F1A4687EC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/23
156.233.230.0/23
156.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:62:9a:74:c7:b9:31:f3:95:6c:2c:25:ca:4d:ee:cb:ad:bb:
eb:9d:c6:da:40:79:16:4d:7b:f2:38:56:d8:76:67:8c:77:b5:
88:ba:a6:44:37:53:fa:5e:2a:33:34:68:ea:70:59:9d:40:ff:
d7:24:21:fa:de:12:b3:e4:98:0a:66:44:63:a0:46:48:86:21:
93:e9:97:43:66:9f:12:9f:20:85:e6:26:70:5d:4e:98:ea:5c:
7f:2c:74:59:4d:db:b9:89:f9:2c:54:2b:7b:ba:0c:57:d0:21:
4d:31:48:b5:69:6c:b8:cf:94:00:db:58:3a:ea:78:be:39:c9:
c1:f3:e7:67:c7:b1:57:04:1e:e7:89:e8:9b:84:06:90:43:b7:
f7:23:34:66:26:b7:7d:2b:f5:9a:3b:08:df:9b:74:7c:22:b7:
c4:d3:1d:41:01:7d:c3:96:6e:36:a2:6d:bf:4e:84:02:89:ae:
d9:ed:f9:d4:00:1e:27:51:51:bf:86:d8:a9:27:7e:ee:27:b1:
1f:2d:dd:e8:b4:11:16:eb:c4:b8:2b:b4:c0:d7:9b:92:91:5d:
32:0c:ed:bf:1b:4f:08:46:80:c5:dd:be:fa:f0:3d:63:80:d8:
dc:ba:7d:35:ce:84:44:b9:72:15:32:46:0b:b1:85:cf:53:14:
96:9b:6f:f3
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAaJSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTMwNTMxWhcNMjYwNDEwMTMwNTMxWjAYMRYw
FAYDVQQDEw02OWE4MmUyMC04OTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3b2jM6kb2uumpA1n9y0Fqnmw6npcZUS/mS7Bhxy3qT3UbEAiwQ49Z41z
i+rdbYVMBZxcEJftyVKEcva8xxVQemDSfbpmIV5wXfdspGqZ4WMRKLvPUtBCOy7R
0A6jQ+Lk6C/typ7T+56Rhw8W1m/89n+JaRqrT7Hea0/rhZ6Na2i8WeDdR0Zkvec8
+kLpy6Kk2i6Dj16l0NzEqr0Ii02UUg4kRgyvToNj4zp6HL4Dv6J00IRFyxHeHNSd
HX2VlXa4c5J2xrcnVHMQiJ7GmCAClkhwdfScq7WDFbjxN84tNCL6JbDIn7pD2mSf
JgQqyXiegKG0DrYz1n37EFQFi6CR4wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFCF7
7flacAx/NNL19+ZjazILuKHlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTY4OTM0QTE3Q0ExMUYxQTQ2ODdFQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnOngAwQBnOnmAwQCnOnsMA0G
CSqGSIb3DQEBCwUAA4IBAQCaYpp0x7kx85VsLCXKTe7LrbvrncbaQHkWTXvyOFbY
dmeMd7WIuqZEN1P6XiozNGjqcFmdQP/XJCH63hKz5JgKZkRjoEZIhiGT6ZdDZp8S
nyCF5iZwXU6Y6lx/LHRZTdu5ifksVCt7ugxX0CFNMUi1aWy4z5QA21g66ni+OcnB
8+dnx7FXBB7nieibhAaQQ7f3IzRmJrd9K/WaOwjfm3R8IrfE0x1BAX3Dlm42om2/
ToQCia7Z7fnUAB4nUVG/htipJ37uJ7EfLd3otBEW68S4K7TA15uSkV0yDO2/G08I
RoDF3b768D1jgNjcun01zoREuXIVMkYLsYXPUxSWm2/z
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:47 2026 by rpki-client