Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729F1856386D11F197926B06CF1D38B0.roa
File: 729F1856386D11F197926B06CF1D38B0.roa (raw, json)
Hash identifier: B/O9ZtqU9vVSjR9Ax00+8KmV5fI8Fw+SXXQuobjEsyQ=
Subject key identifier: E2:14:30:FC:AE:01:79:87:11:B6:7E:A5:58:34:99:14:92:53:71:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACB5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729F1856386D11F197926B06CF1D38B0.roa
Signing time: Wed 15 Apr 2026 01:50:15 +0000
ROA not before: Wed 15 Apr 2026 01:50:09 +0000
ROA not after: Thu 23 Apr 2026 01:50:09 +0000
asID: 269984
IP address blocks: 156.255.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109749 (0x1acb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 01:50:09 2026 GMT
Not After : Apr 23 01:50:09 2026 GMT
Subject: CN=69deeed7-d612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:15:96:01:e9:8d:37:1d:ea:f1:0e:ee:22:
7d:a6:7a:94:15:ac:91:c3:e3:7c:80:7f:b6:26:6b:
aa:52:7f:c7:a4:b9:59:07:b7:ac:06:0d:77:41:91:
29:e7:d4:2f:ab:c3:fa:74:53:31:36:cb:20:fb:d4:
3e:37:54:4c:2c:45:49:05:32:13:65:b4:8a:ed:00:
1b:51:1c:1f:f5:61:e8:05:e7:54:b4:4b:7b:2d:72:
17:d0:57:dd:2c:05:fb:87:d3:ac:36:9a:21:23:9a:
4b:f3:96:db:5a:92:f8:32:28:07:30:ad:45:c9:dd:
de:12:8b:a1:2b:48:03:e0:29:5a:65:d9:32:be:a9:
16:a7:f8:bd:48:43:ad:3f:dd:f1:04:11:c7:d6:d5:
26:5c:fd:88:5a:46:ac:d2:7e:12:61:c7:47:da:8d:
58:9c:f4:01:93:9e:5b:89:49:72:d0:31:8d:56:65:
b0:9c:9f:51:c1:4c:89:94:4f:a7:00:1b:35:22:ca:
be:3d:03:06:06:ee:b7:15:e8:6b:7b:ef:c3:64:f8:
3d:67:aa:e2:99:d2:c8:c8:df:df:9e:57:3f:a3:3a:
71:23:31:8f:44:4f:ad:5e:d3:99:b6:a3:a7:67:3d:
dd:d5:1e:5d:96:c2:f6:06:db:c6:62:2c:ee:c5:f3:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:30:FC:AE:01:79:87:11:B6:7E:A5:58:34:99:14:92:53:71:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/729F1856386D11F197926B06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.128.0/21
Signature Algorithm: sha256WithRSAEncryption
67:ac:16:ae:16:66:9d:86:fb:e9:3c:dc:9f:ac:f3:5c:2f:95:
03:a5:46:eb:a7:26:b8:ac:01:2f:a0:35:a5:51:4c:df:ad:5f:
ab:79:a5:0d:19:f9:70:0f:13:50:54:b7:58:00:aa:72:59:0d:
00:98:b1:9c:09:8f:3c:ef:35:57:bc:04:10:fa:f3:36:b9:38:
43:d9:84:b4:5c:9c:12:b6:5c:9b:37:ea:65:53:03:ae:72:bb:
15:c5:8a:08:91:10:07:23:14:d4:ce:26:42:94:54:77:f4:86:
13:17:30:a9:54:05:c8:be:77:62:95:b9:e4:f2:e0:c1:27:45:
81:0f:34:d3:4f:7b:72:db:bd:66:c9:4a:88:19:83:23:19:bd:
70:5b:b7:11:73:ab:b0:f3:23:d9:33:4f:1a:83:dc:ef:50:b4:
3c:6d:4d:12:e4:9c:17:00:b5:c2:76:2f:ce:a1:cf:d6:8e:3c:
51:59:31:b0:42:bc:fb:19:ce:c6:94:4f:89:d8:62:19:e4:36:
36:67:99:8e:ae:73:07:d7:b7:c5:dc:3c:17:a0:73:53:db:7a:
c6:66:52:31:6c:2a:46:fe:ed:e4:63:4b:b3:c8:a1:26:9a:96:
2d:f6:cb:cc:2e:2b:22:45:83:93:6f:dc:ce:2a:6f:08:6a:86:
e7:26:40:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAay1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE1MDE1MDA5WhcNMjYwNDIzMDE1MDA5WjAYMRYw
FAYDVQQDEw02OWRlZWVkNy1kNjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvEgVlgHpjTcd6vEO7iJ9pnqUFayRw+N8gH+2JmuqUn/HpLlZB7esBg13
QZEp59Qvq8P6dFMxNssg+9Q+N1RMLEVJBTITZbSK7QAbURwf9WHoBedUtEt7LXIX
0FfdLAX7h9OsNpohI5pL85bbWpL4MigHMK1Fyd3eEouhK0gD4ClaZdkyvqkWp/i9
SEOtP93xBBHH1tUmXP2IWkas0n4SYcdH2o1YnPQBk55biUly0DGNVmWwnJ9RwUyJ
lE+nABs1Isq+PQMGBu63Fehre+/DZPg9Z6rimdLIyN/fnlc/ozpxIzGPRE+tXtOZ
tqOnZz3d1R5dlsL2BtvGYizuxfMgfQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOIU
MPyuAXmHEbZ+pVg0mRSSU3FvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MjlGMTg1NjM4NkQxMUYxOTc5MjZCMDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnP+AMA0GCSqGSIb3DQEBCwUA
A4IBAQBnrBauFmadhvvpPNyfrPNcL5UDpUbrpya4rAEvoDWlUUzfrV+reaUNGflw
DxNQVLdYAKpyWQ0AmLGcCY887zVXvAQQ+vM2uThD2YS0XJwStlybN+plUwOucrsV
xYoIkRAHIxTUziZClFR39IYTFzCpVAXIvndilbnk8uDBJ0WBDzTTT3ty271myUqI
GYMjGb1wW7cRc6uw8yPZM08ag9zvULQ8bU0S5JwXALXCdi/Ooc/WjjxRWTGwQrz7
Gc7GlE+J2GIZ5DY2Z5mOrnMH17fF3DwXoHNT23rGZlIxbCpG/u3kY0uzyKEmmpYt
9svMLisiRYOTb9zOKm8IaobnJkBc
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:26:15 2026 by rpki-client