Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A49C7C835911F1A55CCEE2CE1D38B0.roa
File: E5A49C7C835911F1A55CCEE2CE1D38B0.roa (raw, json)
Hash identifier: Ro2+0sXJjttt+oiQqlWNQrd9U2kkJeitZ4dzB4IZNus=
Subject key identifier: 67:F4:90:C3:B8:1E:B9:77:4D:E0:27:3A:3D:75:98:A6:F7:F0:5A:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C62D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A49C7C835911F1A55CCEE2CE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:09:16 +0000
ROA not before: Sun 19 Jul 2026 10:09:11 +0000
ROA not after: Sun 16 Aug 2026 10:09:11 +0000
asID: 134365
IP address blocks: 156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116269 (0x1c62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 10:09:11 2026 GMT
Not After : Aug 16 10:09:11 2026 GMT
Subject: CN=6a5ca24b-15b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:53:34:76:eb:6c:45:6e:26:6d:0d:24:ab:
58:24:dd:be:1e:64:0f:dc:6f:b9:14:f0:d7:7e:fc:
46:ac:fe:fd:be:f2:c4:36:ea:99:c5:59:15:ca:82:
fd:04:92:b0:94:7f:4f:ac:fd:dd:23:36:81:27:61:
d0:53:78:e8:b2:1d:7b:b0:16:de:0d:02:b7:8e:93:
68:6c:c4:63:1d:4b:4d:7c:64:e4:fe:d4:29:01:b9:
a1:f2:fd:62:77:d9:78:8c:b1:79:b0:d2:cd:7d:6b:
dc:bc:37:1b:12:1c:99:e4:9e:3f:4a:de:7f:24:71:
63:38:76:3e:c7:a2:03:40:94:67:ac:a0:63:c2:23:
80:e0:d7:98:8d:80:ca:9e:48:ac:e7:ee:a4:5e:e1:
b2:e2:43:a3:1a:9c:08:0f:ef:f3:bc:3d:70:0a:29:
1a:60:f1:10:db:f3:4d:a3:16:66:b8:b9:27:c2:9d:
3e:88:6c:37:1a:93:8d:21:74:04:d1:e4:fb:28:0a:
5a:aa:a3:ef:d0:28:02:ad:81:6c:c0:34:82:72:66:
ae:9b:5c:c8:79:05:ce:e4:17:90:ac:ee:d2:34:f4:
dd:99:02:e3:2d:5d:18:c7:ac:84:42:1f:cd:45:2f:
09:be:4d:1e:59:3c:55:97:e2:61:45:21:38:a9:c9:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:90:C3:B8:1E:B9:77:4D:E0:27:3A:3D:75:98:A6:F7:F0:5A:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A49C7C835911F1A55CCEE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:6b:da:73:b6:a5:b0:c1:54:6b:f7:a1:c0:0c:c6:6b:42:1d:
42:02:bc:04:85:0c:53:73:2e:9c:ba:65:81:d9:bc:31:8b:da:
1c:63:95:fa:0a:73:32:9a:39:ec:e0:8b:00:38:2e:28:c2:36:
f0:47:2e:a7:64:4a:a5:5e:54:31:f2:43:04:b1:f4:0b:4e:7e:
87:15:24:f6:d9:f4:be:34:dc:36:fc:e4:71:65:4b:f4:a2:8e:
50:87:ac:98:36:f2:09:43:ba:86:c5:41:ce:3e:10:17:5b:94:
7d:4e:85:a2:8f:12:92:00:ca:e7:1d:06:d2:f5:79:7b:cc:1c:
ee:55:fc:d8:2f:24:45:0e:34:8a:aa:6f:63:f2:d7:e3:2d:3c:
6e:ed:63:ab:b5:75:05:f2:28:f7:3a:4d:7b:c6:09:bd:cd:36:
d8:6e:19:05:e9:6a:9d:05:56:20:2a:35:29:52:b6:85:81:88:
b5:2a:c6:c8:e4:82:36:f3:53:b3:70:a0:d3:64:59:ed:a5:8c:
b2:e9:28:f7:97:63:03:c2:52:76:fa:c7:d9:d1:25:d3:45:06:
96:58:21:1c:ab:d0:da:1a:35:32:62:77:3c:d5:f8:92:2f:e4:
e5:20:1f:8b:17:a0:11:67:1f:a9:c2:5e:3a:48:8e:53:4c:97:
41:7a:51:06
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcYtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE5MTAwOTExWhcNMjYwODE2MTAwOTExWjAYMRYw
FAYDVQQDEw02YTVjYTI0Yi0xNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtuNTNHbrbEVuJm0NJKtYJN2+HmQP3G+5FPDXfvxGrP79vvLENuqZxVkV
yoL9BJKwlH9PrP3dIzaBJ2HQU3josh17sBbeDQK3jpNobMRjHUtNfGTk/tQpAbmh
8v1id9l4jLF5sNLNfWvcvDcbEhyZ5J4/St5/JHFjOHY+x6IDQJRnrKBjwiOA4NeY
jYDKnkis5+6kXuGy4kOjGpwID+/zvD1wCikaYPEQ2/NNoxZmuLknwp0+iGw3GpON
IXQE0eT7KApaqqPv0CgCrYFswDSCcmaum1zIeQXO5BeQrO7SNPTdmQLjLV0Yx6yE
Qh/NRS8Jvk0eWTxVl+JhRSE4qcleIQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGf0
kMO4Hrl3TeAnOj11mKb38FqdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNUE0OUM3QzgzNTkxMUYxQTU1Q0NFRTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnOKwMA0GCSqGSIb3DQEBCwUA
A4IBAQANa9pztqWwwVRr96HADMZrQh1CArwEhQxTcy6cumWB2bwxi9ocY5X6CnMy
mjns4IsAOC4owjbwRy6nZEqlXlQx8kMEsfQLTn6HFST22fS+NNw2/ORxZUv0oo5Q
h6yYNvIJQ7qGxUHOPhAXW5R9ToWijxKSAMrnHQbS9Xl7zBzuVfzYLyRFDjSKqm9j
8tfjLTxu7WOrtXUF8ij3Ok17xgm9zTbYbhkF6WqdBVYgKjUpUraFgYi1KsbI5II2
81OzcKDTZFntpYyy6Sj3l2MDwlJ2+sfZ0SXTRQaWWCEcq9DaGjUyYnc81fiSL+Tl
IB+LF6ARZx+pwl46SI5TTJdBelEG
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:56 2026 by rpki-client