Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5584AE5A37CF11F19FB413D3CE1D38B0.roa
File: 5584AE5A37CF11F19FB413D3CE1D38B0.roa (raw, json)
Hash identifier: KJECCYT2sveEUNZQD0Di2QZTLLcNCbsOshBYWn3Vjkk=
Subject key identifier: 3E:AC:C4:5D:C0:A4:C1:BC:ED:16:CE:8E:B2:AB:93:FB:3D:17:6B:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACA6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5584AE5A37CF11F19FB413D3CE1D38B0.roa
Signing time: Tue 14 Apr 2026 06:58:26 +0000
ROA not before: Tue 14 Apr 2026 06:58:22 +0000
ROA not after: Tue 02 Jun 2026 06:58:22 +0000
asID: 62563
IP address blocks: 156.233.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109734 (0x1aca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 14 06:58:22 2026 GMT
Not After : Jun 2 06:58:22 2026 GMT
Subject: CN=69dde592-e891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:f6:84:59:4b:5d:17:67:5d:cf:e7:6c:a9:
1e:82:10:8f:3a:cd:4e:18:22:27:e7:6a:16:bc:19:
fe:aa:5d:3c:05:aa:16:db:8d:a4:ef:18:94:4d:d1:
92:d0:e5:eb:27:2e:f2:f7:e3:21:6f:13:95:f6:5a:
62:ae:52:82:b3:c1:2d:bb:7b:ba:20:c5:7f:da:76:
42:f0:7c:85:07:79:f1:34:63:fe:35:36:bc:7d:95:
4a:ac:9b:22:90:f3:47:ad:0e:59:06:43:83:89:85:
2c:9a:f9:06:54:59:22:b7:a9:ca:01:38:ee:47:d6:
37:04:fc:19:71:4d:e9:cb:63:39:f0:56:c4:a3:96:
6c:01:53:1a:15:b3:f7:d6:2a:09:7e:fb:4c:5e:ed:
35:c7:a7:9c:5d:e8:ab:32:67:89:22:91:a0:a6:a6:
46:be:dd:db:89:56:75:68:af:2a:8f:4a:5d:aa:66:
6b:45:f4:95:09:56:ab:6b:fa:fe:b2:69:73:ba:77:
64:ce:a3:9e:bc:51:6d:0a:0b:6c:49:b4:a4:0b:06:
5b:64:a5:b0:fa:8f:92:36:c1:ca:e0:37:3c:74:ba:
04:22:31:35:73:c4:c1:1b:8d:1a:49:9a:d6:d9:99:
4e:de:49:26:97:83:e2:3d:e4:d2:bb:b5:d3:47:57:
bf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AC:C4:5D:C0:A4:C1:BC:ED:16:CE:8E:B2:AB:93:FB:3D:17:6B:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5584AE5A37CF11F19FB413D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.68.0/24
Signature Algorithm: sha256WithRSAEncryption
83:6f:e8:62:94:15:c0:4f:e0:5a:9e:9c:ec:9e:8a:1c:d7:e2:
48:6f:20:5d:a6:9f:b6:44:0f:36:47:9f:99:c9:6f:24:cc:b0:
ae:34:65:e6:6e:2b:80:f1:d5:92:3d:f8:b4:94:cc:7f:66:81:
ad:cb:1e:3f:8a:f6:e7:1e:b0:98:7a:fb:d2:d6:dc:9d:fc:dc:
64:e5:26:66:b9:67:1f:61:6a:22:05:d9:f0:ea:d9:4d:a7:34:
ba:70:c3:3a:49:8f:08:63:e4:3a:42:39:a6:8d:69:8e:96:3d:
0f:f6:e1:94:67:c8:77:ea:f0:42:cc:52:9d:83:cd:6b:de:b2:
bc:97:79:65:ad:7e:3c:6e:b9:18:be:e4:22:fa:db:f1:a8:d8:
4d:14:b3:83:56:97:68:94:ec:46:59:59:a6:69:f7:a1:54:55:
0c:fd:0b:7e:c2:d5:c6:22:9a:21:fe:03:7d:c0:95:83:25:84:
25:55:ac:34:54:44:92:23:13:30:cd:17:14:c3:43:df:a9:57:
6b:ab:e8:c1:bf:3b:b7:e3:28:87:f6:63:b1:df:1a:ed:ca:ea:
4e:de:f9:00:b7:84:c9:2d:f6:fd:da:2a:23:1e:40:9a:07:17:
f1:f4:43:64:23:4c:f4:ec:e0:b4:18:1f:93:46:72:dc:8b:b7:
2f:db:36:b8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaymMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE0MDY1ODIyWhcNMjYwNjAyMDY1ODIyWjAYMRYw
FAYDVQQDEw02OWRkZTU5Mi1lODkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2ob2hFlLXRdnXc/nbKkeghCPOs1OGCIn52oWvBn+ql08BaoW242k7xiU
TdGS0OXrJy7y9+MhbxOV9lpirlKCs8Etu3u6IMV/2nZC8HyFB3nxNGP+NTa8fZVK
rJsikPNHrQ5ZBkODiYUsmvkGVFkit6nKATjuR9Y3BPwZcU3py2M58FbEo5ZsAVMa
FbP31ioJfvtMXu01x6ecXeirMmeJIpGgpqZGvt3biVZ1aK8qj0pdqmZrRfSVCVar
a/r+smlzundkzqOevFFtCgtsSbSkCwZbZKWw+o+SNsHK4Dc8dLoEIjE1c8TBG40a
SZrW2ZlO3kkml4PiPeTSu7XTR1e/UwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFD6s
xF3ApMG87RbOjrKrk/s9F2vHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NTg0QUU1QTM3Q0YxMUYxOUZCNDEzRDNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOlEMA0GCSqGSIb3DQEBCwUA
A4IBAQCDb+hilBXAT+Banpzsnooc1+JIbyBdpp+2RA82R5+ZyW8kzLCuNGXmbiuA
8dWSPfi0lMx/ZoGtyx4/ivbnHrCYevvS1tyd/Nxk5SZmuWcfYWoiBdnw6tlNpzS6
cMM6SY8IY+Q6QjmmjWmOlj0P9uGUZ8h36vBCzFKdg81r3rK8l3llrX48brkYvuQi
+tvxqNhNFLODVpdolOxGWVmmafehVFUM/Qt+wtXGIpoh/gN9wJWDJYQlVaw0VESS
IxMwzRcUw0PfqVdrq+jBvzu34yiH9mOx3xrtyupO3vkAt4TJLfb92iojHkCaBxfx
9ENkI0z07OC0GB+TRnLci7cv2za4
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:40 2026 by rpki-client