Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA37A6D4647211F1BB95CDB0CE1D38B0.roa
File: BA37A6D4647211F1BB95CDB0CE1D38B0.roa (raw, json)
Hash identifier: lM3wMDNH9vGvZvLq2s6ICD69lev2mdPeIuYp4Wellyk=
Subject key identifier: D2:5C:89:CF:C5:1A:DB:E9:69:9D:37:D3:F8:41:ED:2F:1B:48:0B:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA37A6D4647211F1BB95CDB0CE1D38B0.roa
Signing time: Wed 10 Jun 2026 02:18:54 +0000
ROA not before: Wed 10 Jun 2026 02:18:49 +0000
ROA not after: Wed 17 Jun 2026 02:18:49 +0000
asID: 44509
IP address blocks: 156.231.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113818 (0x1bc9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 02:18:49 2026 GMT
Not After : Jun 17 02:18:49 2026 GMT
Subject: CN=6a28c98e-c41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:57:e4:95:e9:c3:98:f0:28:74:55:89:f5:
e9:00:76:92:42:75:3c:f4:56:3d:ba:39:3e:f1:f9:
3b:77:c6:42:46:80:a7:26:2b:85:8f:61:b9:77:3a:
a5:6c:2b:42:b8:36:ef:ce:28:09:00:68:bc:35:8d:
0f:02:0d:c7:fe:d8:04:2f:ab:b1:fb:f0:21:39:50:
b4:3f:29:25:62:29:21:16:0e:00:11:5e:5b:be:f0:
cd:fb:97:2e:63:27:f0:ca:8a:2c:52:e5:12:00:37:
88:6b:5c:59:e3:65:e0:33:3f:58:60:23:ff:0b:0d:
ee:ee:31:f9:b5:e1:72:d8:f3:7c:c2:a2:dd:16:5e:
a0:78:de:ad:e9:a6:90:cb:ee:d5:eb:a8:60:f9:9e:
46:da:6e:05:c6:02:68:5a:77:cc:7c:c5:22:c8:9b:
ce:fa:47:e9:9e:33:6f:5b:da:0e:69:63:e6:d3:85:
ae:1b:34:28:0c:ac:6b:ca:7b:c1:ef:58:83:70:d0:
db:cb:ba:d8:e6:27:00:4f:39:81:46:71:2e:7a:6c:
9c:32:36:4c:77:f0:be:71:7c:e5:b4:e0:85:59:8f:
56:d3:8e:99:f7:e9:3c:c4:15:85:82:31:a3:13:88:
b5:40:76:13:7b:87:06:82:49:29:58:44:fc:f9:4b:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:89:CF:C5:1A:DB:E9:69:9D:37:D3:F8:41:ED:2F:1B:48:0B:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA37A6D4647211F1BB95CDB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.111.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e3:84:b8:29:ab:90:54:00:78:70:b7:17:64:28:22:3e:0f:
96:2a:7b:d3:96:4d:a6:46:fb:a0:ac:ea:7c:e5:b5:b1:dd:93:
9e:66:18:96:34:67:b0:0e:ba:5d:2e:bc:75:1c:85:a0:34:15:
eb:b3:41:14:5d:d4:2a:8d:d0:69:eb:f3:50:97:be:6b:e3:7f:
71:12:63:40:d5:75:b5:df:6d:df:9b:08:7f:d7:76:fb:11:d0:
86:aa:28:35:a5:8f:b7:28:e9:22:57:f3:84:48:c2:e5:4f:47:
42:6f:e3:17:f5:09:23:6a:b7:d6:a2:c2:86:53:43:59:60:80:
57:c4:cc:b3:e1:66:bf:81:3a:0d:ac:5b:b3:02:7e:7a:ee:d5:
0a:3b:4e:20:dc:7d:91:5f:4d:ce:f3:42:31:8d:46:39:28:c5:
8d:eb:8e:36:da:2c:1e:39:03:87:0c:38:57:e8:2f:76:d2:64:
d5:1b:28:f2:59:e1:59:e8:a4:4f:4d:fc:3a:44:1a:4e:62:bd:
39:be:1a:66:f9:e9:83:2a:7a:47:e8:b4:e6:8b:ab:82:00:a7:
ea:69:38:d0:4d:d3:64:b4:5c:33:ae:a5:04:fa:4f:75:98:1c:
de:dc:6c:9e:7d:9a:d0:32:bb:68:c1:7e:74:03:60:69:79:7f:
56:50:da:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbyaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMDIxODQ5WhcNMjYwNjE3MDIxODQ5WjAYMRYw
FAYDVQQDEw02YTI4Yzk4ZS1jNDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApr1X5JXpw5jwKHRVifXpAHaSQnU89FY9ujk+8fk7d8ZCRoCnJiuFj2G5
dzqlbCtCuDbvzigJAGi8NY0PAg3H/tgEL6ux+/AhOVC0PyklYikhFg4AEV5bvvDN
+5cuYyfwyoosUuUSADeIa1xZ42XgMz9YYCP/Cw3u7jH5teFy2PN8wqLdFl6geN6t
6aaQy+7V66hg+Z5G2m4FxgJoWnfMfMUiyJvO+kfpnjNvW9oOaWPm04WuGzQoDKxr
ynvB71iDcNDby7rY5icATzmBRnEuemycMjZMd/C+cXzltOCFWY9W046Z9+k8xBWF
gjGjE4i1QHYTe4cGgkkpWET8+UupVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNJc
ic/FGtvpaZ030/hB7S8bSAtLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTM3QTZENDY0NzIxMUYxQkI5NUNEQjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOdvMA0GCSqGSIb3DQEBCwUA
A4IBAQAh44S4KauQVAB4cLcXZCgiPg+WKnvTlk2mRvugrOp85bWx3ZOeZhiWNGew
DrpdLrx1HIWgNBXrs0EUXdQqjdBp6/NQl75r439xEmNA1XW1323fmwh/13b7EdCG
qig1pY+3KOkiV/OESMLlT0dCb+MX9QkjarfWosKGU0NZYIBXxMyz4Wa/gToNrFuz
An567tUKO04g3H2RX03O80IxjUY5KMWN64422iweOQOHDDhX6C920mTVGyjyWeFZ
6KRPTfw6RBpOYr05vhpm+emDKnpH6LTmi6uCAKfqaTjQTdNktFwzrqUE+k91mBze
3GyefZrQMrtowX50A2BpeX9WUNqf
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:33:12 2026 by rpki-client