Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD677E28A5711F198A16E09CF1D38B0.roa
File: 3BD677E28A5711F198A16E09CF1D38B0.roa (raw, json)
Hash identifier: xvOty91/4wamLr2czwh/mXaEBsRSkS2EgVz++X750HI=
Subject key identifier: 5F:AF:DF:3F:BE:23:3E:2E:A6:B0:B3:88:7E:2D:D9:80:74:75:A7:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C848
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD677E28A5711F198A16E09CF1D38B0.roa
Signing time: Tue 28 Jul 2026 07:37:50 +0000
ROA not before: Tue 28 Jul 2026 07:37:46 +0000
ROA not after: Sat 05 Sep 2026 07:37:46 +0000
asID: 395886
IP address blocks: 156.238.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116808 (0x1c848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 07:37:46 2026 GMT
Not After : Sep 5 07:37:46 2026 GMT
Subject: CN=6a685c4e-3adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:9b:70:05:d3:d9:49:cd:3e:e1:11:44:e4:
63:c2:e3:f4:e6:93:27:ac:09:44:50:53:14:53:e8:
e1:67:78:29:33:f5:53:a0:dc:33:b9:22:11:aa:62:
db:e3:37:a3:15:ac:68:af:b5:05:ae:b9:b3:21:b1:
14:13:f2:ef:70:ee:40:39:6f:c2:95:bd:81:c2:c8:
5d:f0:d1:ce:1f:de:55:be:76:3d:c4:c9:f6:e5:61:
b4:9c:6d:87:1c:3f:aa:6a:ee:43:b2:1c:cb:42:04:
a4:49:52:7c:db:2f:5d:25:80:9c:50:72:0e:12:fa:
19:7b:99:d4:fc:bf:78:2d:7e:b8:92:94:9c:6b:03:
4b:c5:70:1f:57:2c:21:b6:9c:1e:ef:4f:83:86:13:
ad:0a:5f:6b:b6:98:74:a2:67:39:85:7b:51:ce:0e:
24:52:11:01:20:ea:e1:bb:83:05:dd:7c:e9:ef:8f:
ad:ff:ef:d8:28:d1:f2:f4:7d:14:77:1e:72:44:cf:
f9:61:e8:17:a0:bb:e8:16:1c:80:fc:b2:65:14:81:
dc:84:4f:c2:92:5f:a9:56:58:55:a2:5b:df:e8:5e:
22:a7:bf:7d:57:78:97:70:d3:d7:ab:52:09:98:3f:
bb:a8:aa:50:39:17:94:15:59:c8:e6:c5:0d:e3:e0:
b2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AF:DF:3F:BE:23:3E:2E:A6:B0:B3:88:7E:2D:D9:80:74:75:A7:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BD677E28A5711F198A16E09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:da:69:06:d9:22:f6:83:a6:26:f3:ca:d6:08:32:ca:85:71:
2a:c7:dc:f8:60:f6:d9:98:2f:bd:29:0a:99:59:28:ed:bb:14:
a7:c6:85:b4:c5:f1:5a:5f:25:56:8a:5b:50:27:a6:f2:86:bf:
aa:e0:1e:ce:3b:0f:f5:7a:2c:8b:a2:35:56:ee:4e:91:82:c8:
c5:6b:c2:b8:cf:a4:d0:d1:b6:c1:f3:9a:1b:7f:73:72:ff:e4:
26:b0:af:67:96:f8:40:76:73:76:36:19:93:3c:39:b8:86:ae:
6c:df:6b:07:89:62:84:02:08:79:ac:6a:50:a9:4f:07:b1:6b:
57:cb:28:6c:72:f8:df:51:f9:64:8b:4f:33:cb:6d:16:fe:44:
2a:cd:c1:12:e5:96:6d:a4:90:33:2a:18:83:21:2b:65:5f:52:
55:da:13:f1:37:c2:45:7c:42:83:45:cc:04:ef:ae:ff:37:a8:
64:fc:61:42:7b:fc:d3:a3:84:3a:21:fe:ee:51:2f:66:ea:68:
45:c7:16:b5:df:63:91:d0:b1:b4:e6:72:63:a0:71:25:a7:0d:
e8:02:3c:0a:c7:98:d3:d4:20:df:df:15:18:2d:77:0b:4f:84:
a6:be:56:5a:cf:17:3e:33:b2:df:ab:70:e8:11:4e:99:73:d7:
27:6f:46:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAchIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzI4MDczNzQ2WhcNMjYwOTA1MDczNzQ2WjAYMRYw
FAYDVQQDEw02YTY4NWM0ZS0zYWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsLubcAXT2UnNPuERRORjwuP05pMnrAlEUFMUU+jhZ3gpM/VToNwzuSIR
qmLb4zejFaxor7UFrrmzIbEUE/LvcO5AOW/Clb2Bwshd8NHOH95VvnY9xMn25WG0
nG2HHD+qau5DshzLQgSkSVJ82y9dJYCcUHIOEvoZe5nU/L94LX64kpScawNLxXAf
Vywhtpwe70+DhhOtCl9rtph0omc5hXtRzg4kUhEBIOrhu4MF3Xzp74+t/+/YKNHy
9H0Udx5yRM/5YegXoLvoFhyA/LJlFIHchE/Ckl+pVlhVolvf6F4ip799V3iXcNPX
q1IJmD+7qKpQOReUFVnI5sUN4+CyoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFF+v
3z++Iz4uprCziH4t2YB0dadWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQkQ2NzdFMjhBNTcxMUYxOThBMTZFMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnO7gMA0GCSqGSIb3DQEBCwUA
A4IBAQB72mkG2SL2g6Ym88rWCDLKhXEqx9z4YPbZmC+9KQqZWSjtuxSnxoW0xfFa
XyVWiltQJ6byhr+q4B7OOw/1eiyLojVW7k6RgsjFa8K4z6TQ0bbB85obf3Ny/+Qm
sK9nlvhAdnN2NhmTPDm4hq5s32sHiWKEAgh5rGpQqU8HsWtXyyhscvjfUflki08z
y20W/kQqzcES5ZZtpJAzKhiDIStlX1JV2hPxN8JFfEKDRcwE767/N6hk/GFCe/zT
o4Q6If7uUS9m6mhFxxa132OR0LG05nJjoHElpw3oAjwKx5jT1CDf3xUYLXcLT4Sm
vlZazxc+M7Lfq3DoEU6Zc9cnb0ZP
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:59:55 2026 by rpki-client