Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1668DE3E36FE11F1AB6F97D2CE1D38B0.roa
File: 1668DE3E36FE11F1AB6F97D2CE1D38B0.roa (raw, json)
Hash identifier: Q8DW3TPulxFCnvId8OY9zxB/NzUVdbZHFEA4pZnI3T4=
Subject key identifier: DC:E3:DA:F2:78:98:FF:3B:E6:D5:8D:D2:68:E8:32:A5:7D:3C:60:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1668DE3E36FE11F1AB6F97D2CE1D38B0.roa
Signing time: Mon 13 Apr 2026 06:00:35 +0000
ROA not before: Mon 13 Apr 2026 06:00:30 +0000
ROA not after: Mon 06 Jul 2026 06:00:30 +0000
asID: 149440
IP address blocks: 156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109612 (0x1ac2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 06:00:30 2026 GMT
Not After : Jul 6 06:00:30 2026 GMT
Subject: CN=69dc8683-f27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:16:0d:54:52:4f:1b:92:f8:da:30:34:2a:
df:11:3a:d7:78:77:a8:0e:79:2d:aa:01:76:5f:24:
0d:2e:51:cb:39:26:83:54:5c:73:3c:8c:2d:8a:32:
3b:57:01:9d:25:eb:00:6a:38:87:01:60:2d:d5:a5:
a2:26:d1:ff:4e:54:31:4c:90:3b:76:5a:0c:f3:3f:
13:ef:9f:7b:7c:c7:91:28:6d:1a:ec:84:14:1e:ef:
51:ce:ed:63:ac:89:bb:77:17:7f:00:35:7e:0a:8b:
96:bb:9e:67:08:d8:c9:e0:c3:1b:b2:2b:bc:c8:e4:
50:e7:8b:ff:c3:89:8b:ac:90:74:e7:a4:e3:9b:0d:
ec:c7:48:63:14:a8:0e:fd:de:e0:83:c1:e5:48:d6:
4b:ac:c5:6e:58:31:d9:49:c3:c5:24:3d:95:a5:80:
75:a2:53:79:c7:4f:c0:63:b0:cb:52:b6:b2:b0:51:
c8:38:3d:be:dd:3c:b5:3b:45:e1:a7:cd:13:7e:3e:
33:f3:8c:08:66:14:b1:63:3e:a5:da:03:2c:90:4b:
98:c6:36:80:45:4a:a8:c0:84:af:7c:db:c1:8d:1c:
a7:af:51:af:33:68:16:1c:aa:ae:17:08:ae:6a:df:
3d:3e:09:2d:0a:5f:76:e8:8f:04:5c:6c:e9:82:31:
ad:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E3:DA:F2:78:98:FF:3B:E6:D5:8D:D2:68:E8:32:A5:7D:3C:60:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1668DE3E36FE11F1AB6F97D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a1:d1:dc:5c:71:a2:e6:89:80:b3:8b:0a:c7:99:78:fc:fd:
c1:9b:bd:c7:39:0d:e0:28:07:f5:38:46:86:09:06:ee:a3:83:
59:cb:a8:30:99:72:e9:1a:aa:f1:9c:60:8f:b3:7c:fa:68:76:
e8:38:f0:3a:49:46:8f:d3:60:84:c7:bd:ea:94:10:40:56:e3:
d9:50:38:78:05:92:a4:ff:f0:9f:ee:4e:a2:7d:8a:f8:90:43:
6f:37:a8:ca:05:fe:d6:a8:6a:1e:72:bd:42:c2:ca:04:34:ac:
9f:b9:47:43:1d:79:b8:66:65:08:9d:14:5b:3d:2a:9f:24:a8:
f2:ad:27:d2:07:10:ab:10:4a:0e:e5:a0:94:5b:8f:1c:bf:7c:
98:d1:ab:bf:0b:bd:f7:66:08:7e:47:30:a7:5b:89:1c:68:28:
a9:bd:dc:e7:32:92:39:99:e2:9c:d6:1a:8a:4a:b3:82:7b:65:
73:8f:ad:e7:20:80:73:38:f6:11:e8:d0:2a:78:2f:22:9d:a6:
49:bc:c6:24:bd:4e:34:0d:a7:d6:3c:e3:7d:06:83:bf:3d:46:
20:71:e4:0f:0c:16:7b:47:22:ef:e0:ab:70:d1:5d:47:c2:ec:
83:86:f2:54:7a:1a:43:4f:4c:ef:5d:97:03:d6:3f:a0:4e:97:
3d:a3:4b:94
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAawsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDEzMDYwMDMwWhcNMjYwNzA2MDYwMDMwWjAYMRYw
FAYDVQQDEw02OWRjODY4My1mMjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq0gWDVRSTxuS+NowNCrfETrXeHeoDnktqgF2XyQNLlHLOSaDVFxzPIwt
ijI7VwGdJesAajiHAWAt1aWiJtH/TlQxTJA7dloM8z8T7597fMeRKG0a7IQUHu9R
zu1jrIm7dxd/ADV+CouWu55nCNjJ4MMbsiu8yORQ54v/w4mLrJB056Tjmw3sx0hj
FKgO/d7gg8HlSNZLrMVuWDHZScPFJD2VpYB1olN5x0/AY7DLUraysFHIOD2+3Ty1
O0Xhp80Tfj4z84wIZhSxYz6l2gMskEuYxjaARUqowISvfNvBjRynr1GvM2gWHKqu
Fwiuat89PgktCl926I8EXGzpgjGtiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzj
2vJ4mP875tWN0mjoMqV9PGBEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjY4REUzRTM2RkUxMUYxQUI2Rjk3RDJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOMAAwQAnOxMMA0GCSqGSIb3
DQEBCwUAA4IBAQBPodHcXHGi5omAs4sKx5l4/P3Bm73HOQ3gKAf1OEaGCQbuo4NZ
y6gwmXLpGqrxnGCPs3z6aHboOPA6SUaP02CEx73qlBBAVuPZUDh4BZKk//Cf7k6i
fYr4kENvN6jKBf7WqGoecr1CwsoENKyfuUdDHXm4ZmUInRRbPSqfJKjyrSfSBxCr
EEoO5aCUW48cv3yY0au/C733Zgh+RzCnW4kcaCipvdznMpI5meKc1hqKSrOCe2Vz
j63nIIBzOPYR6NAqeC8inaZJvMYkvU40DafWPON9BoO/PUYgceQPDBZ7RyLv4Ktw
0V1HwuyDhvJUehpDT0zvXZcD1j+gTpc9o0uU
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:56 2026 by rpki-client