Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586E4B6A64C211F19161051DCF1D38B0.roa
File: 586E4B6A64C211F19161051DCF1D38B0.roa (raw, json)
Hash identifier: yiqb4wk+k1lmvUBxJGE5VfC7sCPhG8NTKKXdCXajZvk=
Subject key identifier: BD:FE:E9:08:7C:B5:6D:9B:A0:27:B2:94:05:81:1B:1C:9C:AF:66:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586E4B6A64C211F19161051DCF1D38B0.roa
Signing time: Wed 10 Jun 2026 11:48:50 +0000
ROA not before: Wed 10 Jun 2026 11:48:45 +0000
ROA not after: Thu 16 Jul 2026 11:48:45 +0000
asID: 22773
IP address blocks: 156.233.213.0/24 maxlen: 24
156.233.214.0/24 maxlen: 24
156.233.215.0/24 maxlen: 24
156.233.220.0/24 maxlen: 24
156.233.221.0/24 maxlen: 24
156.233.222.0/24 maxlen: 24
156.233.223.0/24 maxlen: 24
156.233.240.0/24 maxlen: 24
156.233.241.0/24 maxlen: 24
156.233.242.0/24 maxlen: 24
156.233.253.0/24 maxlen: 24
156.233.254.0/24 maxlen: 24
156.233.255.0/24 maxlen: 24
156.238.136.0/24 maxlen: 24
156.238.137.0/24 maxlen: 24
156.238.138.0/24 maxlen: 24
156.238.139.0/24 maxlen: 24
156.238.140.0/24 maxlen: 24
156.238.141.0/24 maxlen: 24
156.238.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113854 (0x1bcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 11:48:45 2026 GMT
Not After : Jul 16 11:48:45 2026 GMT
Subject: CN=6a294f22-b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:13:c2:c0:d1:cf:79:d6:12:57:71:dd:1e:
5c:f6:b4:f0:2e:e6:7b:90:35:b5:b3:96:cb:b8:e1:
2d:28:4f:18:cb:f9:79:8e:d7:76:23:92:17:8f:d3:
7e:c6:38:79:eb:37:2d:46:82:6d:a2:36:f3:fb:f1:
fb:3b:99:c7:83:06:d2:9c:49:0e:46:b4:e4:ba:0f:
27:a3:88:0e:96:56:85:7e:86:07:d7:77:1f:f7:41:
9d:e4:e6:85:ab:fe:a8:b9:58:e3:60:95:f2:23:3c:
e2:c6:42:91:53:52:b0:ea:67:e2:9b:40:cd:f0:ab:
ac:8b:47:bc:c3:f4:b7:bb:17:8b:0e:09:c5:f1:62:
d9:a0:33:d5:90:ad:5e:b2:5c:d3:a1:70:26:cc:11:
6e:72:df:a7:90:5f:37:52:63:82:6d:cc:9d:fd:67:
86:96:b2:9c:9e:55:ff:66:a4:e5:80:22:2b:e9:2a:
aa:e6:7c:6f:5f:00:fa:72:57:ec:0c:e2:2b:d3:54:
71:72:6a:ff:50:4e:d8:90:db:68:d3:e3:1b:e0:33:
a7:fa:99:cd:90:74:24:6a:83:54:ae:60:5f:c5:e7:
b6:f8:e9:ec:78:f6:1e:0b:bd:dc:05:f3:c9:74:02:
cc:27:30:e6:8f:92:fd:42:1d:89:a5:c3:62:9c:92:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:E9:08:7C:B5:6D:9B:A0:27:B2:94:05:81:1B:1C:9C:AF:66:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586E4B6A64C211F19161051DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.213.0-156.233.215.255
156.233.220.0/22
156.233.240.0-156.233.242.255
156.233.253.0-156.233.255.255
156.238.136.0-156.238.141.255
156.238.144.0/24
Signature Algorithm: sha256WithRSAEncryption
46:70:ff:4f:e1:98:ac:d2:95:15:1f:54:d5:53:e9:9c:c7:c3:
ab:47:c6:04:3b:aa:e2:ab:97:c8:1e:53:35:8b:f1:81:27:d6:
06:cb:4c:58:28:7d:b4:3d:f3:a3:c7:f7:2a:15:6a:70:9a:05:
f0:b0:ce:01:c0:6b:dc:0e:7c:1d:e2:86:8e:6a:cc:e6:03:f8:
e1:af:b0:a8:4d:a2:5c:72:d5:63:3b:5d:d6:93:e0:d3:45:c7:
0d:93:ee:e0:c8:15:44:e2:6c:32:92:65:93:ca:bd:d2:a8:f2:
fa:c8:fc:9b:da:a8:b0:40:7e:72:0e:2c:39:b3:b2:50:2e:79:
cf:9d:84:e6:6c:85:de:54:3a:44:40:7b:f3:35:b3:63:7b:9d:
b5:5f:41:d6:88:db:b6:d5:09:73:03:b3:ef:7c:82:2b:8c:6b:
db:3f:75:e5:e8:74:3f:1e:c3:56:49:11:40:71:6a:c7:9c:d6:
cd:0f:6e:48:ac:01:8f:92:ca:4e:aa:bb:fe:83:63:90:06:fc:
5a:30:41:34:ab:01:d7:58:68:23:ca:b2:73:25:2b:be:ac:4b:
b8:fd:31:27:50:eb:f1:85:fe:07:20:7f:60:b9:3b:62:51:25:
34:4f:80:ab:b6:6b:b5:00:a8:a4:d6:98:0e:4c:b2:63:29:fd:
4a:b8:42:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIDAby+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMTE0ODQ1WhcNMjYwNzE2MTE0ODQ1WjAYMRYw
FAYDVQQDEw02YTI5NGYyMi1iOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA35wTwsDRz3nWEldx3R5c9rTwLuZ7kDW1s5bLuOEtKE8Yy/l5jtd2I5IX
j9N+xjh56zctRoJtojbz+/H7O5nHgwbSnEkORrTkug8no4gOllaFfoYH13cf90Gd
5OaFq/6ouVjjYJXyIzzixkKRU1Kw6mfim0DN8Kusi0e8w/S3uxeLDgnF8WLZoDPV
kK1eslzToXAmzBFuct+nkF83UmOCbcyd/WeGlrKcnlX/ZqTlgCIr6Sqq5nxvXwD6
clfsDOIr01Rxcmr/UE7YkNto0+Mb4DOn+pnNkHQkaoNUrmBfxee2+OnsePYeC73c
BfPJdALMJzDmj5L9Qh2JpcNinJL+awIDAQABo4IC3zCCAtswHQYDVR0OBBYEFL3+
6Qh8tW2boCeylAWBGxycr2atMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODZFNEI2QTY0QzIxMUYxOTE2MTA1MURDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFwGCCsGAQUFBwEHAQH/BE0wSzBJBAIAATBDMAwDBACc6dUDBAOc6dADBAKc6dww
DAMEBJzp8AMEAJzp8jALAwQAnOn9AwMBnOgwDAMEA5zuiAMEAZzujAMEAJzukDAN
BgkqhkiG9w0BAQsFAAOCAQEARnD/T+GYrNKVFR9U1VPpnMfDq0fGBDuq4quXyB5T
NYvxgSfWBstMWCh9tD3zo8f3KhVqcJoF8LDOAcBr3A58HeKGjmrM5gP44a+wqE2i
XHLVYztd1pPg00XHDZPu4MgVROJsMpJlk8q90qjy+sj8m9qosEB+cg4sObOyUC55
z52E5myF3lQ6REB78zWzY3udtV9B1ojbttUJcwOz73yCK4xr2z915eh0Px7DVkkR
QHFqx5zWzQ9uSKwBj5LKTqq7/oNjkAb8WjBBNKsB11hoI8qycyUrvqxLuP0xJ1Dr
8YX+ByB/YLk7YlElNE+Aq7ZrtQCopNaYDkyyYyn9SrhCXg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:56:27 2026 by rpki-client