Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8242C7A4DF711F186B034F9CE1D38B0.roa
File: E8242C7A4DF711F186B034F9CE1D38B0.roa (raw, json)
Hash identifier: ZHkqJhYuBVvn0m8elWKMSVymLdGaouhYF9IHXVWJ7qQ=
Subject key identifier: 43:84:7A:5E:96:2F:68:C4:ED:73:4E:D0:25:87:D8:F9:8F:F2:6F:09
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8242C7A4DF711F186B034F9CE1D38B0.roa
Signing time: Tue 12 May 2026 11:44:17 +0000
ROA not before: Tue 12 May 2026 11:44:12 +0000
ROA not after: Tue 20 Apr 2027 11:44:12 +0000
asID: 28419
IP address blocks: 156.233.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111603 (0x1b3f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 11:44:12 2026 GMT
Not After : Apr 20 11:44:12 2027 GMT
Subject: CN=6a031291-2fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:ee:cb:3d:bd:dd:dd:36:01:65:66:13:89:
06:73:8e:f1:13:88:22:da:c1:5c:1f:ee:e4:27:bc:
f4:26:a5:ea:dc:4e:39:fc:4a:d5:b3:2c:06:d2:fa:
bf:8e:a8:8f:6f:7a:70:8a:29:2f:41:f5:2a:6a:85:
f5:de:81:1a:6a:eb:4e:ec:15:a3:09:78:46:04:ed:
03:ce:69:2c:4c:7b:76:0b:c3:c8:8e:8c:aa:48:00:
0e:a2:fe:5b:de:1e:45:ee:6e:b3:a4:ec:e6:34:be:
5e:62:e1:a4:63:71:92:a1:bd:87:b0:33:30:35:e0:
20:0d:11:0f:69:60:bc:e7:9b:ac:bd:91:68:64:b8:
69:52:22:5a:ea:b7:d8:42:4b:18:17:6c:89:c1:0b:
23:d2:55:67:3c:98:0e:f1:2c:8b:a1:bd:73:c8:06:
65:a3:79:b4:40:4b:83:78:6b:91:6d:83:13:cc:71:
b3:90:9a:79:f8:2c:22:b5:76:8b:81:87:d2:ee:d4:
37:94:b8:c4:7b:6c:55:9a:09:3f:fe:88:e2:45:bf:
7b:ca:e6:9d:a7:ce:5c:ef:60:d4:1a:0a:2f:b7:25:
cf:4f:8f:5a:56:b3:18:85:a2:78:48:38:9b:aa:ab:
cc:c0:0c:8d:99:95:96:b3:dc:e6:f8:45:46:b6:9c:
4e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:7A:5E:96:2F:68:C4:ED:73:4E:D0:25:87:D8:F9:8F:F2:6F:09
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8242C7A4DF711F186B034F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:4e:20:61:72:64:3f:fb:58:58:b0:15:89:16:d4:c8:d9:6f:
74:1e:21:a3:a4:9c:01:e3:32:3f:fa:61:74:81:1b:02:60:a5:
06:ac:b7:3c:11:c0:a5:2a:fc:ec:de:a1:63:76:6b:bf:e8:9b:
39:74:79:26:3a:68:0c:9b:1e:e6:df:03:6e:6b:9c:67:47:80:
cf:a0:c1:f5:ed:9e:b0:5d:e9:eb:eb:40:27:80:75:4a:a4:a8:
12:e9:68:49:10:aa:a1:67:bc:78:cf:aa:a4:34:b5:07:4d:fe:
78:8c:03:6d:20:fe:04:38:25:58:5e:bd:16:24:a4:5c:ae:72:
70:4d:8c:ca:72:ea:4c:03:11:88:3c:88:33:09:2a:2c:d4:57:
13:79:b6:ac:a2:f2:5f:b3:c5:2e:18:35:25:7d:2b:0b:22:38:
0a:42:b7:7f:c1:f5:d8:e7:05:8a:b0:a8:58:d9:be:71:53:9e:
6d:4b:55:f9:99:88:80:6e:48:90:c4:f7:aa:39:cb:0e:6f:a5:
9b:d5:80:fd:f7:6a:57:89:fe:fc:49:da:26:1d:58:84:e1:e3:
3f:91:55:c5:0d:18:e6:05:54:df:41:23:3e:c7:97:4c:a2:bd:
8b:fc:8c:dc:4a:3e:af:d8:37:f6:fe:2e:89:92:ea:10:29:c2:
90:96:af:d3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbPzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEyMTE0NDEyWhcNMjcwNDIwMTE0NDEyWjAYMRYw
FAYDVQQDEw02YTAzMTI5MS0yZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvwruyz293d02AWVmE4kGc47xE4gi2sFcH+7kJ7z0JqXq3E45/ErVsywG
0vq/jqiPb3pwiikvQfUqaoX13oEaautO7BWjCXhGBO0DzmksTHt2C8PIjoyqSAAO
ov5b3h5F7m6zpOzmNL5eYuGkY3GSob2HsDMwNeAgDREPaWC855usvZFoZLhpUiJa
6rfYQksYF2yJwQsj0lVnPJgO8SyLob1zyAZlo3m0QEuDeGuRbYMTzHGzkJp5+Cwi
tXaLgYfS7tQ3lLjEe2xVmgk//ojiRb97yuadp85c72DUGgovtyXPT49aVrMYhaJ4
SDibqqvMwAyNmZWWs9zm+EVGtpxOSQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEOE
el6WL2jE7XNO0CWH2PmP8m8JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FODI0MkM3QTRERjcxMUYxODZCMDM0RjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOkcMA0GCSqGSIb3DQEBCwUA
A4IBAQC5TiBhcmQ/+1hYsBWJFtTI2W90HiGjpJwB4zI/+mF0gRsCYKUGrLc8EcCl
Kvzs3qFjdmu/6Js5dHkmOmgMmx7m3wNua5xnR4DPoMH17Z6wXenr60AngHVKpKgS
6WhJEKqhZ7x4z6qkNLUHTf54jANtIP4EOCVYXr0WJKRcrnJwTYzKcupMAxGIPIgz
CSos1FcTebasovJfs8UuGDUlfSsLIjgKQrd/wfXY5wWKsKhY2b5xU55tS1X5mYiA
bkiQxPeqOcsOb6Wb1YD992pXif78SdomHViE4eM/kVXFDRjmBVTfQSM+x5dMor2L
/IzcSj6v2Df2/i6JkuoQKcKQlq/T
-----END CERTIFICATE-----
Generated at Wed May 13 08:02:52 2026 by rpki-client