Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1566ADF48A5A11F1970FC71ACF1D38B0.roa
File: 1566ADF48A5A11F1970FC71ACF1D38B0.roa (raw, json)
Hash identifier: t81gyrY2nNaTTiU+yLYvJyG/F27W95+hKrj5Nrwt5ew=
Subject key identifier: CF:BF:B2:7B:06:05:88:2C:BC:C3:78:28:0F:A1:DF:C2:F4:A4:12:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C850
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1566ADF48A5A11F1970FC71ACF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:58:14 +0000
ROA not before: Tue 28 Jul 2026 07:58:10 +0000
ROA not after: Sat 05 Sep 2026 07:58:10 +0000
asID: 401701
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116816 (0x1c850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:58:10 2026 GMT
Not After : Sep 5 07:58:10 2026 GMT
Subject: CN=6a686116-81bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:74:35:f5:3b:31:c9:34:13:a3:2f:9a:47:
19:74:a1:28:e7:d6:31:05:fe:3e:96:4d:26:33:b2:
3d:6b:72:fe:23:5b:29:89:44:19:73:a0:3e:ea:7d:
8b:ee:02:dd:e2:14:35:a2:0f:58:3a:b5:6d:d5:6d:
79:25:62:e9:bd:69:f8:ac:0d:17:50:4d:02:e0:14:
7f:0a:ab:b5:e7:ff:1b:a3:9a:ee:1a:8f:8d:c4:c9:
63:d5:3c:74:1a:90:d0:da:b7:1d:0e:c7:28:da:2b:
6b:88:c4:cb:97:30:11:0d:50:d8:bc:6c:c4:d5:a8:
d7:09:3a:5c:a1:94:cf:c2:65:d0:2c:79:0d:62:96:
ed:37:98:bd:79:3d:2a:b5:69:20:7d:3c:f1:34:d2:
c9:6d:66:0b:c7:81:22:49:61:2d:97:97:37:66:34:
69:c5:50:ec:b9:23:3d:e0:cc:50:a4:52:0c:3f:6f:
69:51:01:d0:9f:e9:8d:6f:8f:2c:78:0e:15:ac:2c:
ed:68:c3:8b:d8:dc:b1:20:3d:38:32:a8:03:11:d6:
63:2b:e0:bb:cc:65:af:65:57:a3:4d:48:89:9a:91:
c2:16:6f:39:b9:0c:54:56:bb:c0:3a:02:c7:54:6f:
b0:01:e3:b1:7a:4c:a6:3d:92:57:2f:ba:af:fd:f9:
d9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BF:B2:7B:06:05:88:2C:BC:C3:78:28:0F:A1:DF:C2:F4:A4:12:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1566ADF48A5A11F1970FC71ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a9:09:32:06:e3:ae:5b:86:a2:2f:20:8e:0e:ea:29:f1:b1:0d:
80:a2:e3:2b:ac:05:16:e0:bb:24:dd:a9:d1:47:ed:5b:f9:04:
22:b2:74:cf:63:76:f2:dd:f7:ef:7a:f7:85:00:da:01:c8:45:
2a:e5:4c:7c:87:29:58:b1:67:19:c2:da:ec:66:c3:33:e9:2a:
be:d8:d6:01:8c:f3:f2:20:b6:29:92:ce:0c:6f:b2:e7:8f:71:
74:36:08:40:1d:50:f8:48:96:80:9c:41:a1:bd:80:41:75:b5:
7a:a5:b3:fd:94:50:58:3f:0b:68:87:0c:c2:64:df:41:97:35:
20:79:26:e9:37:e2:dd:8d:c9:5e:5b:da:27:9a:dc:ab:95:74:
0a:e4:ba:0e:8b:69:70:d4:dc:19:3c:9b:ca:eb:04:0d:9f:88:
c9:ae:e5:2e:2a:81:cd:69:15:6c:05:9e:0c:2d:af:cc:4f:2d:
a6:5f:d3:af:81:e5:fa:5c:15:bb:9c:e9:69:0d:43:c5:93:bd:
3b:7e:2c:a0:85:8c:8f:b8:b6:8c:e9:52:8f:e4:ba:e9:29:14:
e5:c0:0f:2f:24:55:39:ee:4a:2f:00:b9:91:bd:a7:01:97:da:
9a:f0:e1:fe:cf:40:e6:95:c4:eb:2d:ac:c8:d4:a3:0e:16:3d:
f8:a3:81:30
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAchQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI4MDc1ODEwWhcNMjYwOTA1MDc1ODEwWjAYMRYw
FAYDVQQDEw02YTY4NjExNi04MWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyxB0NfU7Mck0E6MvmkcZdKEo59YxBf4+lk0mM7I9a3L+I1spiUQZc6A+
6n2L7gLd4hQ1og9YOrVt1W15JWLpvWn4rA0XUE0C4BR/Cqu15/8bo5ruGo+NxMlj
1Tx0GpDQ2rcdDsco2itriMTLlzARDVDYvGzE1ajXCTpcoZTPwmXQLHkNYpbtN5i9
eT0qtWkgfTzxNNLJbWYLx4EiSWEtl5c3ZjRpxVDsuSM94MxQpFIMP29pUQHQn+mN
b48seA4VrCztaMOL2NyxID04MqgDEdZjK+C7zGWvZVejTUiJmpHCFm85uQxUVrvA
OgLHVG+wAeOxekymPZJXL7qv/fnZTQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM+/
snsGBYgsvMN4KA+h38L0pBJbMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNTY2QURGNDhBNUExMUYxOTcwRkM3MUFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQCpCTIG465bhqIvII4O6inxsQ2AouMrrAUW4Lsk3anRR+1b+QQisnTPY3by
3ffveveFANoByEUq5Ux8hylYsWcZwtrsZsMz6Sq+2NYBjPPyILYpks4Mb7Lnj3F0
NghAHVD4SJaAnEGhvYBBdbV6pbP9lFBYPwtohwzCZN9BlzUgeSbpN+LdjcleW9on
mtyrlXQK5LoOi2lw1NwZPJvK6wQNn4jJruUuKoHNaRVsBZ4MLa/MTy2mX9OvgeX6
XBW7nOlpDUPFk707fiyghYyPuLaM6VKP5LrpKRTlwA8vJFU57kovALmRvacBl9qa
8OH+z0DmlcTrLazI1KMOFj34o4Ew
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:30 2026 by rpki-client