Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D71E808843B111F1B0C2B3FECE1D38B0.roa
File: D71E808843B111F1B0C2B3FECE1D38B0.roa (raw, json)
Hash identifier: hudsrxqb4dTxirWB6suV8ong9sEC7xDXUpA4A6/kyjA=
Subject key identifier: 65:32:63:2E:FB:71:B5:FF:D6:F0:0C:56:61:FC:A8:20:56:DB:0C:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D71E808843B111F1B0C2B3FECE1D38B0.roa
Signing time: Wed 29 Apr 2026 09:57:32 +0000
ROA not before: Wed 29 Apr 2026 09:57:28 +0000
ROA not after: Sun 29 Apr 2029 09:57:28 +0000
asID: 17561
IP address blocks: 156.226.208.0/24 maxlen: 24
156.231.163.0/24 maxlen: 24
156.233.205.0/24 maxlen: 24
156.233.206.0/24 maxlen: 24
156.233.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110559 (0x1afdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 09:57:28 2026 GMT
Not After : Apr 29 09:57:28 2029 GMT
Subject: CN=69f1d60c-b663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:be:5e:c9:6d:27:e8:06:ad:f5:de:2c:cc:
8f:02:bc:99:2c:92:39:c8:4f:d2:74:af:b0:a5:8c:
57:8c:49:f7:fc:fd:2d:ee:33:8c:fb:16:38:33:d2:
a2:74:f5:a6:48:c8:1b:f7:7b:87:80:57:85:b5:82:
3d:4c:e1:2d:1e:d7:7e:1d:ae:f6:0b:ee:79:5e:1c:
83:26:34:fd:79:84:7b:3c:cb:d0:45:6c:ba:c6:44:
b2:48:3b:e8:a9:15:1d:24:69:dc:19:23:9e:a5:30:
3f:ed:86:a8:44:6f:4a:6d:e6:87:e4:fc:19:a9:1c:
df:d2:9f:00:8a:73:1d:e9:87:8c:4e:63:b9:b3:db:
2e:4a:2e:a3:27:54:c1:a9:bb:85:1e:ed:52:35:04:
cf:ab:e8:a4:88:a7:ac:8b:82:06:2a:7b:fb:78:3e:
3e:50:9c:7b:91:4f:63:0b:d7:6a:8e:04:16:8a:72:
7b:e2:07:6d:bb:82:fe:2e:26:2c:41:6f:ce:32:43:
6a:a9:ba:af:82:ff:d4:cf:0c:aa:07:9c:53:02:ec:
8c:b1:3e:63:7a:e1:53:82:0f:99:01:4e:f7:19:8e:
41:78:d4:49:e6:e9:23:14:47:f7:51:ab:aa:5c:88:
49:47:c5:30:eb:f7:49:b1:ae:64:a5:e8:b1:e2:fd:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:63:2E:FB:71:B5:FF:D6:F0:0C:56:61:FC:A8:20:56:DB:0C:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D71E808843B111F1B0C2B3FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.208.0/24
156.231.163.0/24
156.233.205.0-156.233.207.255
Signature Algorithm: sha256WithRSAEncryption
52:4d:86:61:92:cf:47:9f:55:45:6a:3d:9c:0d:76:0c:58:7e:
da:3b:f7:36:ff:d4:5d:d5:55:dd:76:be:6f:5f:10:df:07:55:
e5:56:a1:d3:cd:78:da:32:19:c2:e0:4f:ff:25:57:69:94:d2:
52:09:54:ad:c2:b0:cb:f2:25:ca:3a:86:5b:42:ab:0a:52:90:
e1:c4:c8:6a:83:82:56:8e:e1:1c:80:44:1f:54:51:70:6c:50:
b1:b0:15:c4:21:d8:e6:66:c7:33:62:6f:f5:6d:0b:64:8e:83:
ae:f3:7f:49:ec:30:70:50:26:49:e6:42:81:64:6f:96:a7:97:
fe:b4:32:41:c5:49:58:e8:67:c7:4c:eb:8c:e4:36:db:69:19:
ac:13:07:b4:7d:3b:2f:10:ac:d3:20:6d:31:5f:4f:28:f7:78:
35:1b:9a:89:38:d4:d8:dd:09:9a:7f:37:e2:2f:c4:f0:fc:35:
ae:e6:15:68:df:c6:e3:2b:c4:1f:04:86:30:2d:cd:63:be:7f:
50:37:0d:fc:40:51:e3:69:92:9c:3b:64:49:ba:0c:8d:14:22:
0a:ab:ca:53:ca:87:76:db:bd:c2:1f:fa:ba:69:39:95:63:77:
46:99:84:de:e7:ec:cf:39:9a:a7:b7:96:ea:a9:78:c7:24:a7:
9f:10:63:18
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAa/fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDI5MDk1NzI4WhcNMjkwNDI5MDk1NzI4WjAYMRYw
FAYDVQQDEw02OWYxZDYwYy1iNjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtD6+XsltJ+gGrfXeLMyPAryZLJI5yE/SdK+wpYxXjEn3/P0t7jOM+xY4
M9KidPWmSMgb93uHgFeFtYI9TOEtHtd+Ha72C+55XhyDJjT9eYR7PMvQRWy6xkSy
SDvoqRUdJGncGSOepTA/7YaoRG9KbeaH5PwZqRzf0p8AinMd6YeMTmO5s9suSi6j
J1TBqbuFHu1SNQTPq+ikiKesi4IGKnv7eD4+UJx7kU9jC9dqjgQWinJ74gdtu4L+
LiYsQW/OMkNqqbqvgv/UzwyqB5xTAuyMsT5jeuFTgg+ZAU73GY5BeNRJ5ukjFEf3
UauqXIhJR8Uw6/dJsa5kpeix4v3V+wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGUy
Yy77cbX/1vAMVmH8qCBW2wyEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENzFFODA4ODQzQjExMUYxQjBDMkIzRkVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAnOLQAwQAnOejMAwDBACc6c0D
BASc6cAwDQYJKoZIhvcNAQELBQADggEBAFJNhmGSz0efVUVqPZwNdgxYfto79zb/
1F3VVd12vm9fEN8HVeVWodPNeNoyGcLgT/8lV2mU0lIJVK3CsMvyJco6hltCqwpS
kOHEyGqDglaO4RyARB9UUXBsULGwFcQh2OZmxzNib/VtC2SOg67zf0nsMHBQJknm
QoFkb5anl/60MkHFSVjoZ8dM64zkNttpGawTB7R9Oy8QrNMgbTFfTyj3eDUbmok4
1NjdCZp/N+IvxPD8Na7mFWjfxuMrxB8EhjAtzWO+f1A3DfxAUeNpkpw7ZEm6DI0U
IgqrylPKh3bbvcIf+rppOZVjd0aZhN7n7M85mqe3luqpeMckp58QYxg=
-----END CERTIFICATE-----
Generated at Wed May 13 07:38:52 2026 by rpki-client