Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BC4F56358A11F18A388DECCE1D38B0.roa
File: 72BC4F56358A11F18A388DECCE1D38B0.roa (raw, json)
Hash identifier: BjDoqNFfxZplNSVd2I2CH8YYwXWjnP+zdkM+oGmb2kQ=
Subject key identifier: FC:33:17:25:A2:B1:A9:4F:D5:A7:E4:CE:BA:78:8C:89:0B:1D:73:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BC4F56358A11F18A388DECCE1D38B0.roa
Signing time: Sat 11 Apr 2026 09:40:17 +0000
ROA not before: Sat 11 Apr 2026 09:40:13 +0000
ROA not after: Fri 15 May 2026 09:40:13 +0000
asID: 213690
IP address blocks: 156.249.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109564 (0x1abfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 09:40:13 2026 GMT
Not After : May 15 09:40:13 2026 GMT
Subject: CN=69da1701-d314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:4c:5e:90:1a:81:c2:4e:44:23:4a:24:c5:
a5:0a:62:a9:71:4f:d8:16:d8:e4:95:5e:a5:fb:20:
75:98:3e:58:9f:04:9c:32:c4:16:f1:b9:1c:73:5d:
7b:68:c2:5f:d9:b3:8d:02:39:64:84:73:e9:56:dd:
e0:92:de:5b:91:d8:1e:01:f7:07:73:b8:16:dd:bb:
14:fa:90:a6:a7:b8:fc:50:f4:01:f3:77:32:0b:09:
b8:4b:17:73:f1:8d:6b:57:a5:0b:e2:57:7e:05:02:
cd:f7:3f:01:fc:73:f9:e2:5b:8b:ec:0a:b1:e6:88:
1a:05:a6:ef:06:c8:2a:0b:f9:fb:f0:a5:6e:64:9d:
4c:c4:a6:84:32:a7:6c:90:ec:8e:d1:07:20:fb:e7:
7d:91:87:18:a4:4c:99:ec:15:61:d9:9f:aa:37:5c:
fa:04:20:07:81:c6:9e:00:b7:00:cc:79:14:05:86:
72:55:96:83:75:46:69:d6:64:a2:e1:94:82:1e:0d:
c7:1b:23:cf:68:69:41:47:a6:09:10:fd:a7:5c:c7:
7c:d9:6c:85:b0:58:7c:a9:d6:50:00:fb:ef:ef:68:
a8:b2:d3:ae:1a:ba:c5:89:5e:13:be:26:59:25:80:
d9:42:7b:5c:4a:ab:0b:ae:76:2f:7e:40:97:10:f7:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:17:25:A2:B1:A9:4F:D5:A7:E4:CE:BA:78:8C:89:0B:1D:73:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72BC4F56358A11F18A388DECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
50:cb:20:ef:2a:cd:48:48:16:df:d9:1b:f5:dc:1e:45:6a:42:
39:02:22:72:3d:fb:7d:11:71:0e:83:d1:39:3a:5c:07:12:79:
22:42:56:b3:d3:ca:2c:4f:f3:57:94:9b:02:7f:63:50:d1:49:
63:9a:c7:66:fa:ce:e2:24:1e:74:66:9f:65:70:4d:a9:83:d6:
6d:3d:af:a1:9f:6a:b8:03:43:ae:57:c4:c2:2e:de:21:86:07:
25:c2:1a:2f:76:02:fd:2e:55:a7:75:0c:9f:53:c7:e2:a1:93:
ad:b4:20:8b:17:8c:f7:25:c0:09:66:7e:d6:82:55:97:b3:21:
4a:65:32:3a:b7:44:11:a9:eb:24:c4:6a:a4:fa:33:2e:ec:b8:
aa:9e:50:c2:f7:87:7a:86:bb:f3:cb:28:9f:28:12:e9:6a:3f:
4e:80:63:87:5a:39:59:08:bf:76:4a:14:41:2b:da:d6:fe:db:
82:80:03:d9:1a:48:98:81:50:75:e3:88:db:2e:1f:a8:05:51:
a8:a4:04:52:b5:79:21:9a:af:a4:d3:f0:76:d6:c0:57:f5:61:
67:c2:ae:a3:bc:2a:20:1f:2d:c3:91:e2:06:d8:c1:9e:9d:09:
3f:64:38:80:57:47:90:02:b9:1d:26:94:44:54:70:fc:45:e3:
6f:94:eb:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAav8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDExMDk0MDEzWhcNMjYwNTE1MDk0MDEzWjAYMRYw
FAYDVQQDEw02OWRhMTcwMS1kMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbtMXpAagcJORCNKJMWlCmKpcU/YFtjklV6l+yB1mD5YnwScMsQW8bkc
c117aMJf2bONAjlkhHPpVt3gkt5bkdgeAfcHc7gW3bsU+pCmp7j8UPQB83cyCwm4
Sxdz8Y1rV6UL4ld+BQLN9z8B/HP54luL7Aqx5ogaBabvBsgqC/n78KVuZJ1MxKaE
MqdskOyO0Qcg++d9kYcYpEyZ7BVh2Z+qN1z6BCAHgcaeALcAzHkUBYZyVZaDdUZp
1mSi4ZSCHg3HGyPPaGlBR6YJEP2nXMd82WyFsFh8qdZQAPvv72iostOuGrrFiV4T
viZZJYDZQntcSqsLrnYvfkCXEPdaAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPwz
FyWisalP1afkzrp4jIkLHXMUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MkJDNEY1NjM1OEExMUYxOEEzODhERUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPlAMA0GCSqGSIb3DQEBCwUA
A4IBAQBQyyDvKs1ISBbf2Rv13B5FakI5AiJyPft9EXEOg9E5OlwHEnkiQlaz08os
T/NXlJsCf2NQ0Uljmsdm+s7iJB50Zp9lcE2pg9ZtPa+hn2q4A0OuV8TCLt4hhgcl
whovdgL9LlWndQyfU8fioZOttCCLF4z3JcAJZn7WglWXsyFKZTI6t0QRqeskxGqk
+jMu7LiqnlDC94d6hrvzyyifKBLpaj9OgGOHWjlZCL92ShRBK9rW/tuCgAPZGkiY
gVB144jbLh+oBVGopARStXkhmq+k0/B21sBX9WFnwq6jvCogHy3DkeIG2MGenQk/
ZDiAV0eQArkdJpREVHD8ReNvlOu7
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:13 2026 by rpki-client