Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587209D2113711F19F686AE8DAE4EC9C.roa
File: 587209D2113711F19F686AE8DAE4EC9C.roa (raw, json)
Hash identifier: YMM6rbCae4f7uRL28H69dgplxsVKHtofuJx9CJ9Stvg=
Subject key identifier: 63:97:69:6B:66:D9:45:6B:D3:D3:8C:FC:50:A7:89:DD:11:D7:4E:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A003
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587209D2113711F19F686AE8DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 04:14:43 +0000
ROA not before: Tue 24 Feb 2026 04:14:39 +0000
ROA not after: Tue 03 Mar 2026 04:14:39 +0000
asID: 150706
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106499 (0x1a003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 04:14:39 2026 GMT
Not After : Mar 3 04:14:39 2026 GMT
Subject: CN=699d25b3-9ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:d2:a0:66:bc:53:9f:f9:e8:5e:c6:01:2f:
b8:49:43:b0:07:1c:36:cf:89:f1:62:e6:8e:d4:33:
58:38:c7:f5:65:ce:27:7c:65:b1:17:84:64:22:70:
86:6d:fa:dc:d4:34:08:9a:87:08:45:6d:9c:11:d4:
d2:b5:56:8c:0e:c4:d7:c1:0f:d3:c9:13:f6:5f:7f:
3f:87:cc:60:63:c7:11:47:b3:44:38:a8:59:d7:77:
35:5a:7f:14:92:b3:b7:8d:66:ba:8f:68:be:37:6b:
4d:27:10:8b:09:11:a6:bf:f9:43:23:d2:96:f8:3f:
d6:d3:07:7d:1b:ca:c8:54:28:f4:9b:ee:f1:73:fc:
22:f0:9b:4d:86:56:82:cb:95:cc:96:cf:81:86:7d:
fd:f1:8d:1b:d3:51:15:f5:01:0b:23:3e:ed:d2:81:
bb:b0:02:2a:33:8f:2c:ab:a8:10:e5:f8:41:82:19:
52:de:34:3a:01:b6:82:a0:7b:42:05:b9:d8:1c:f7:
95:c1:41:29:46:62:06:e5:fd:01:d8:fe:fc:1f:94:
a9:e6:0e:07:64:57:7a:c0:14:78:d0:d0:ac:ed:06:
e1:35:43:43:c6:e5:d6:6b:07:66:20:5b:67:16:3a:
22:e2:e7:f9:8a:62:40:0e:4f:33:a7:4d:b7:31:8e:
28:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:97:69:6B:66:D9:45:6B:D3:D3:8C:FC:50:A7:89:DD:11:D7:4E:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/587209D2113711F19F686AE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
68:0c:63:7f:1d:ec:3d:99:ab:1e:fa:42:9d:48:25:18:ef:8f:
af:5d:f6:fa:93:f8:e4:b5:01:66:56:0e:c6:fa:5c:ed:7e:2c:
98:ea:28:a8:90:06:ff:4f:b7:8f:c9:57:1e:bb:e6:a2:af:8e:
65:16:d3:d3:c7:f3:da:c8:e9:f3:e4:a8:d3:26:b8:ff:28:60:
65:1c:fa:e3:a0:17:92:2a:ee:51:4a:d7:d3:e1:40:fd:1b:4c:
18:51:75:e0:9a:15:66:59:fe:41:fe:08:0d:31:c3:44:8a:1b:
a6:da:7d:84:ac:e0:36:ae:4e:e6:ab:c2:c1:74:bd:4d:2e:25:
c0:57:2d:d4:42:cd:ad:6e:e0:5a:95:80:af:d1:66:27:4d:09:
b5:6c:1e:c0:c2:0c:2b:f8:ea:39:c7:15:dd:c4:be:c4:48:0a:
99:7f:e6:12:72:ad:a2:be:bc:e7:34:89:38:e2:b7:0e:13:36:
fb:1a:54:76:af:2d:eb:92:6c:1e:35:10:14:46:db:87:2f:a2:
e4:66:1a:b1:59:13:be:82:8c:a4:60:07:d4:86:b4:7a:bc:ba:
8f:37:3d:f0:f9:de:fd:ad:2e:76:ca:4d:d7:5c:b9:4d:d2:68:
8c:36:00:20:6a:0a:cc:4a:cc:dd:4e:f9:fd:d1:f4:6a:3b:38:
3e:1b:56:58
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAaADMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI0MDQxNDM5WhcNMjYwMzAzMDQxNDM5WjAYMRYw
FAYDVQQDEw02OTlkMjViMy05ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAptbSoGa8U5/56F7GAS+4SUOwBxw2z4nxYuaO1DNYOMf1Zc4nfGWxF4Rk
InCGbfrc1DQImocIRW2cEdTStVaMDsTXwQ/TyRP2X38/h8xgY8cRR7NEOKhZ13c1
Wn8UkrO3jWa6j2i+N2tNJxCLCRGmv/lDI9KW+D/W0wd9G8rIVCj0m+7xc/wi8JtN
hlaCy5XMls+Bhn398Y0b01EV9QELIz7t0oG7sAIqM48sq6gQ5fhBghlS3jQ6AbaC
oHtCBbnYHPeVwUEpRmIG5f0B2P78H5Sp5g4HZFd6wBR40NCs7QbhNUNDxuXWawdm
IFtnFjoi4uf5imJADk8zp023MY4ovwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGOX
aWtm2UVr09OM/FCnid0R105UMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81ODcyMDlEMjExMzcxMUYxOUY2ODZBRThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAGgMY38d7D2Zqx76Qp1IJRjvj69d9vqT
+OS1AWZWDsb6XO1+LJjqKKiQBv9Pt4/JVx675qKvjmUW09PH89rI6fPkqNMmuP8o
YGUc+uOgF5Iq7lFK19PhQP0bTBhRdeCaFWZZ/kH+CA0xw0SKG6bafYSs4DauTuar
wsF0vU0uJcBXLdRCza1u4FqVgK/RZidNCbVsHsDCDCv46jnHFd3EvsRICpl/5hJy
raK+vOc0iTjitw4TNvsaVHavLeuSbB41EBRG24cvouRmGrFZE76CjKRgB9SGtHq8
uo83PfD53v2tLnbKTddcuU3SaIw2ACBqCsxKzN1O+f3R9Go7OD4bVlg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:21 2026 by rpki-client