Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FEBBD638AE11F1ACC5E7A5CE1D38B0.roa
File: 71FEBBD638AE11F1ACC5E7A5CE1D38B0.roa (raw, json)
Hash identifier: 2Exa5BcsBmxw9zZoe3kz1yR6XP29Vv6xLTNbU3JBeBA=
Subject key identifier: 33:56:A6:2A:72:18:0B:86:DA:A3:04:DB:48:61:85:C1:03:E5:E8:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FEBBD638AE11F1ACC5E7A5CE1D38B0.roa
Signing time: Wed 15 Apr 2026 09:35:32 +0000
ROA not before: Wed 15 Apr 2026 09:35:26 +0000
ROA not after: Thu 30 Apr 2026 09:35:26 +0000
asID: 32043
IP address blocks: 156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109773 (0x1accd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:35:26 2026 GMT
Not After : Apr 30 09:35:26 2026 GMT
Subject: CN=69df5be3-eb7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:b9:9a:95:38:11:46:9c:fe:51:35:c9:d5:
5d:4b:62:ff:b8:a8:91:5a:22:0f:23:6c:e3:42:5f:
58:d1:7f:68:c0:d6:30:0b:58:bc:f1:b6:f3:1a:2d:
7c:cb:32:59:5b:9a:4e:80:95:bb:1d:89:61:ca:b1:
3f:b9:d5:d3:e1:8b:d0:3d:6d:2e:6c:f1:36:10:fa:
9c:50:0e:d7:c6:bc:c4:26:73:fe:8d:d7:4f:00:ec:
f1:29:7f:80:22:7c:82:23:8d:6d:fb:a5:57:2e:4c:
4f:d3:28:51:54:57:0e:d4:a1:ec:fc:6e:b4:a4:eb:
b6:4a:f7:2d:d2:59:24:b4:a4:36:94:4b:94:f9:bb:
ef:72:a4:00:29:da:06:ce:8a:2c:d5:35:4c:3e:ef:
29:63:f9:ed:45:91:df:e4:b8:54:0f:7c:8d:0f:00:
b7:db:1a:12:90:b5:d9:9e:b3:7d:f3:ec:b9:24:32:
5e:8b:e4:a7:5c:f4:0f:fd:f4:f7:10:ab:00:a8:c9:
3c:7d:34:33:a8:22:d6:d9:ba:78:4d:ca:a7:57:e4:
03:e8:de:56:be:de:d7:fe:55:43:27:93:3b:3e:41:
c1:bc:b4:58:ae:2b:29:2c:76:65:84:d0:d7:32:61:
01:96:ea:e5:3d:b8:cc:a0:f5:02:57:bb:9e:37:6f:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:A6:2A:72:18:0B:86:DA:A3:04:DB:48:61:85:C1:03:E5:E8:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FEBBD638AE11F1ACC5E7A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.128.0/22
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
58:0c:10:e5:59:4b:2d:a4:3d:20:ec:c8:97:6e:dd:80:f5:8b:
0c:6f:3d:66:97:8c:57:b0:02:85:61:4e:98:3b:71:5b:cc:43:
65:77:6e:02:0d:11:10:89:3f:b8:dd:ad:91:78:5e:a7:a1:f4:
17:8b:c7:64:5f:1e:2d:ed:be:f3:7f:3d:ec:0c:80:74:5a:c5:
6b:4f:5f:ac:a6:ed:88:34:87:e7:4c:79:2b:89:db:71:5c:72:
bd:14:9e:0b:07:44:31:97:15:98:74:1f:03:0e:5d:5f:d8:10:
aa:c6:6d:89:41:01:41:a6:ab:c8:57:a1:be:3d:07:d3:ae:53:
cc:5a:e1:58:fd:84:93:5a:3e:bc:cb:26:0a:71:2b:31:ed:e5:
b1:f6:09:f0:1c:b3:5e:14:b0:6a:99:5a:c4:20:12:85:e2:a1:
38:d0:35:9b:6b:89:c1:74:45:c1:75:5d:ce:2d:34:c5:f3:fb:
ef:d0:24:81:df:86:5b:10:b6:6c:c4:09:04:eb:d9:48:e5:fe:
76:e7:d8:29:e4:ad:e4:94:1e:de:85:db:0e:74:5c:30:ae:77:
03:df:8d:fb:ea:e5:84:7f:c6:33:8a:f4:6c:59:3c:7f:3a:a9:
6c:ce:96:cf:95:63:09:9a:b4:f7:b3:2f:36:a2:ee:3a:b6:03:
1c:56:b8:9a
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDAazNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE1MDkzNTI2WhcNMjYwNDMwMDkzNTI2WjAYMRYw
FAYDVQQDEw02OWRmNWJlMy1lYjdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLq5mpU4EUac/lE1ydVdS2L/uKiRWiIPI2zjQl9Y0X9owNYwC1i88bbz
Gi18yzJZW5pOgJW7HYlhyrE/udXT4YvQPW0ubPE2EPqcUA7XxrzEJnP+jddPAOzx
KX+AInyCI41t+6VXLkxP0yhRVFcO1KHs/G60pOu2Svct0lkktKQ2lEuU+bvvcqQA
KdoGzoos1TVMPu8pY/ntRZHf5LhUD3yNDwC32xoSkLXZnrN98+y5JDJei+SnXPQP
/fT3EKsAqMk8fTQzqCLW2bp4TcqnV+QD6N5Wvt7X/lVDJ5M7PkHBvLRYrispLHZl
hNDXMmEBlurlPbjMoPUCV7ueN28frQIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFDNW
pipyGAuG2qME20hhhcED5ejGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MUZFQkJENjM4QUUxMUYxQUNDNUU3QTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQCnPmAAwQCnPnMMAwDBAKc+dQD
BAWc+cAwDAMEApz59AMEApz5+AMEAZz8BgMEAJz8CgMEAZz8EDANBgkqhkiG9w0B
AQsFAAOCAQEAWAwQ5VlLLaQ9IOzIl27dgPWLDG89ZpeMV7AChWFOmDtxW8xDZXdu
Ag0REIk/uN2tkXhep6H0F4vHZF8eLe2+83897AyAdFrFa09frKbtiDSH50x5K4nb
cVxyvRSeCwdEMZcVmHQfAw5dX9gQqsZtiUEBQaaryFehvj0H065TzFrhWP2Ek1o+
vMsmCnErMe3lsfYJ8ByzXhSwaplaxCASheKhONA1m2uJwXRFwXVdzi00xfP779Ak
gd+GWxC2bMQJBOvZSOX+dufYKeSt5JQe3oXbDnRcMK53A9+N++rlhH/GM4r0bFk8
fzqpbM6Wz5VjCZq097MvNqLuOrYDHFa4mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:37 2026 by rpki-client