Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5064C0FE2AAA11F1B5058F8DDAE4EC9C.roa
File: 5064C0FE2AAA11F1B5058F8DDAE4EC9C.roa (raw, json)
Hash identifier: ckiA7gZcava1lqwuZofmvXJXIkxstFre+P3D9CqodBU=
Subject key identifier: 25:31:01:64:97:6D:12:59:74:A6:77:E0:D1:37:49:B1:0C:36:C8:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A807
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5064C0FE2AAA11F1B5058F8DDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 13:30:41 +0000
ROA not before: Sat 28 Mar 2026 13:30:36 +0000
ROA not after: Fri 22 May 2026 13:30:36 +0000
asID: 401701
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108551 (0x1a807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 13:30:36 2026 GMT
Not After : May 22 13:30:36 2026 GMT
Subject: CN=69c7d801-26a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5c:be:49:b2:2c:0b:22:60:9f:47:c8:32:2d:
9a:ac:f5:62:e8:cf:51:17:ab:b1:3a:26:c0:d9:08:
f6:2c:da:2b:56:97:b6:ee:a2:fb:79:ac:d0:99:9b:
51:70:cb:fd:94:2f:82:bb:8f:c9:23:b5:b5:33:8a:
9e:4e:87:3d:27:c0:06:5a:bf:a8:06:86:6a:79:c1:
69:8d:ad:67:94:b2:23:f6:19:dd:d5:c2:d6:7b:c5:
3e:84:c1:f3:6e:58:3b:76:3e:50:ba:0c:8c:69:eb:
ca:62:b2:a2:38:cc:97:08:e2:e7:cb:8a:c7:61:74:
0b:76:d3:db:95:95:3d:87:6c:74:48:a3:65:c9:3b:
c0:bf:1d:1a:d1:99:6d:cd:7f:42:0d:65:af:f1:f3:
bf:0d:a8:a5:9c:fe:78:dd:69:36:46:cd:86:47:30:
09:e4:23:3f:cd:69:6f:6c:07:0d:75:96:3f:e4:7d:
08:03:97:6d:fe:0b:be:9f:41:e1:4e:d2:4f:a4:bc:
eb:ff:5f:21:0b:2f:cd:ec:e7:92:4a:9d:1a:ec:7b:
ae:ca:76:85:50:ff:5f:8d:fd:db:a6:9b:6e:60:10:
cb:ad:15:33:e8:cf:00:30:6a:17:8f:9d:1f:ae:27:
20:de:90:27:85:c5:6a:03:33:1c:81:ac:70:5c:06:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:01:64:97:6D:12:59:74:A6:77:E0:D1:37:49:B1:0C:36:C8:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5064C0FE2AAA11F1B5058F8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
32:56:c1:75:91:f7:d8:96:3e:40:24:3e:fc:a9:1e:61:74:52:
41:a4:85:d1:8d:b8:2e:cf:44:4b:85:19:69:6b:a5:d2:fc:82:
5d:e4:ad:de:fe:1a:49:5c:3f:c1:20:4b:5e:04:60:fc:0e:eb:
e8:e3:31:2b:17:ec:f6:fe:ca:d1:86:23:f8:d4:a6:a0:40:ef:
e2:a7:fc:29:be:cc:5d:c0:3f:f3:ed:d1:3c:ef:4f:11:64:45:
de:39:d0:2b:ff:1d:7a:dc:c9:8f:bb:c4:43:28:11:3a:90:3f:
41:19:0f:16:7c:57:c6:8c:93:30:fc:d6:3c:1a:53:3d:39:d2:
b8:66:97:fc:83:50:c2:74:40:c0:7a:dc:0d:2c:5a:57:82:f3:
29:74:15:fc:7d:47:c1:e6:ce:e3:c1:b3:2c:44:77:e6:b2:1d:
f9:8f:2e:69:92:f4:cc:97:43:59:36:c3:31:45:7c:78:15:98:
69:2d:b7:63:33:dd:71:95:1a:87:79:42:ce:a7:90:50:10:16:
74:ac:73:3d:f8:69:a6:6c:71:b9:68:d7:a8:62:83:49:5f:99:
8e:76:0e:db:c5:4f:61:e5:e2:a2:49:67:96:7f:ad:a4:49:fb:
20:ee:21:53:da:d4:ab:22:80:ca:86:f3:d9:4f:5e:bd:bb:c3:
72:71:3b:3b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAagHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI4MTMzMDM2WhcNMjYwNTIyMTMzMDM2WjAYMRYw
FAYDVQQDEw02OWM3ZDgwMS0yNmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4ly+SbIsCyJgn0fIMi2arPVi6M9RF6uxOibA2Qj2LNorVpe27qL7eazQ
mZtRcMv9lC+Cu4/JI7W1M4qeToc9J8AGWr+oBoZqecFpja1nlLIj9hnd1cLWe8U+
hMHzblg7dj5QugyMaevKYrKiOMyXCOLny4rHYXQLdtPblZU9h2x0SKNlyTvAvx0a
0ZltzX9CDWWv8fO/DailnP543Wk2Rs2GRzAJ5CM/zWlvbAcNdZY/5H0IA5dt/gu+
n0HhTtJPpLzr/18hCy/N7OeSSp0a7HuuynaFUP9fjf3bpptuYBDLrRUz6M8AMGoX
j50fricg3pAnhcVqAzMcgaxwXAbzbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCUx
AWSXbRJZdKZ34NE3SbEMNsiMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MDY0QzBGRTJBQUExMUYxQjUwNThGOEREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQAyVsF1kffYlj5AJD78qR5hdFJBpIXRjbguz0RLhRlpa6XS/IJd5K3e/hpJ
XD/BIEteBGD8Duvo4zErF+z2/srRhiP41KagQO/ip/wpvsxdwD/z7dE8708RZEXe
OdAr/x163MmPu8RDKBE6kD9BGQ8WfFfGjJMw/NY8GlM9OdK4Zpf8g1DCdEDAetwN
LFpXgvMpdBX8fUfB5s7jwbMsRHfmsh35jy5pkvTMl0NZNsMxRXx4FZhpLbdjM91x
lRqHeULOp5BQEBZ0rHM9+GmmbHG5aNeoYoNJX5mOdg7bxU9h5eKiSWeWf62kSfsg
7iFT2tSrIoDKhvPZT169u8NycTs7
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:50 2026 by rpki-client