Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE789A982AD911F1B7E67D9CDAE4EC9C.roa
File: EE789A982AD911F1B7E67D9CDAE4EC9C.roa (raw, json)
Hash identifier: FQFXnko91S3LRgZAsm4eURHI/iXoeKsYT4JVHHpWIOM=
Subject key identifier: D7:E6:75:3F:5A:E4:E2:26:8A:EE:3E:F4:D8:7E:ED:08:7D:14:52:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A848
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE789A982AD911F1B7E67D9CDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:11:33 +0000
ROA not before: Sat 28 Mar 2026 19:11:27 +0000
ROA not after: Tue 05 May 2026 19:11:27 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108616 (0x1a848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:11:27 2026 GMT
Not After : May 5 19:11:27 2026 GMT
Subject: CN=69c827e5-b315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:78:7f:b1:d4:2b:05:d5:63:06:86:09:35:
59:63:f4:23:41:be:32:4d:50:4a:f3:34:14:f1:49:
c8:52:64:4b:65:61:cc:a8:fc:f7:52:91:69:e4:62:
94:31:1c:b2:54:dd:da:51:ac:cc:47:f0:20:3f:0b:
dc:08:03:f0:b6:8e:01:fa:07:4a:b1:31:25:a3:83:
65:fa:b4:e7:94:b8:bc:e8:e6:90:0f:c9:78:c0:ff:
28:31:83:8a:32:df:47:a4:36:90:98:cd:a7:ce:7c:
52:29:98:af:f5:e0:0d:1d:9b:c8:37:15:45:0e:db:
12:68:09:3c:0c:87:5b:f1:db:a1:12:da:98:ad:ea:
77:33:63:0e:ed:b3:dd:6e:65:56:0e:69:ee:1d:31:
b5:d9:8e:79:94:3a:b6:7e:59:d1:f4:2d:b9:6b:8b:
db:78:7c:3c:13:ee:81:a9:c3:af:3f:c3:6a:6b:d2:
4b:ac:18:0b:78:76:bc:76:03:c4:b2:d8:5c:b4:94:
74:65:23:75:0f:07:1d:37:99:4b:87:4f:48:67:e1:
ff:a4:a5:61:5c:37:b6:35:7c:3c:48:6a:44:d1:f9:
d2:e9:29:91:99:21:c7:27:7a:33:b4:ba:fa:22:fb:
ef:82:08:60:f7:de:65:0d:22:10:68:f2:cb:27:00:
d0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E6:75:3F:5A:E4:E2:26:8A:EE:3E:F4:D8:7E:ED:08:7D:14:52:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE789A982AD911F1B7E67D9CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ab:16:c9:89:5a:c2:28:b4:22:48:fa:18:df:d7:2f:81:07:
64:b3:80:71:30:97:bb:b2:8d:d1:59:a9:a8:d2:04:df:9f:68:
2b:52:4b:c8:3e:a4:40:9a:24:33:e9:71:77:2a:15:dc:33:1b:
e9:52:f1:c7:1f:a7:7d:b6:14:31:d5:d3:fb:36:5c:46:b5:e9:
21:63:e3:04:39:18:8f:40:7d:c5:19:19:e6:de:31:8b:f2:2d:
fe:79:4d:6d:f8:9b:76:a0:d6:b3:7a:31:50:65:49:c9:b7:81:
30:dd:4a:15:87:4c:5d:51:f4:72:d2:a8:7c:a7:b6:4e:13:9c:
06:fa:09:b9:87:87:f8:e7:9c:a2:bc:c0:c4:21:6f:ea:7c:e1:
73:0e:bb:5d:8e:24:b5:1b:41:27:3f:c1:cf:cd:4e:a3:c0:8e:
60:86:96:b7:7f:28:2b:a9:32:71:a5:17:e6:82:76:be:0e:ef:
01:0f:eb:07:68:78:94:d4:67:17:4c:c4:f2:3e:7d:7d:22:bd:
41:8c:7a:6d:38:5b:e8:a0:9d:b0:65:a7:90:bb:aa:1c:75:a0:
f3:77:3e:ad:9b:1f:91:57:2a:75:47:3f:03:bb:b1:cc:10:f2:
81:de:28:09:9f:7c:c9:95:9e:d9:2f:24:3e:3f:b2:e2:55:5d:
09:77:f4:8b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAahIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI4MTkxMTI3WhcNMjYwNTA1MTkxMTI3WjAYMRYw
FAYDVQQDEw02OWM4MjdlNS1iMzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzVF4f7HUKwXVYwaGCTVZY/QjQb4yTVBK8zQU8UnIUmRLZWHMqPz3UpFp
5GKUMRyyVN3aUazMR/AgPwvcCAPwto4B+gdKsTElo4Nl+rTnlLi86OaQD8l4wP8o
MYOKMt9HpDaQmM2nznxSKZiv9eANHZvINxVFDtsSaAk8DIdb8duhEtqYrep3M2MO
7bPdbmVWDmnuHTG12Y55lDq2flnR9C25a4vbeHw8E+6BqcOvP8Nqa9JLrBgLeHa8
dgPEsthctJR0ZSN1DwcdN5lLh09IZ+H/pKVhXDe2NXw8SGpE0fnS6SmRmSHHJ3oz
tLr6Ivvvgghg995lDSIQaPLLJwDQuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfm
dT9a5OImiu4+9Nh+7Qh9FFKpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTc4OUE5ODJBRDkxMUYxQjdFNjdEOUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOp2AwQAnOp7MA0GCSqGSIb3
DQEBCwUAA4IBAQCwqxbJiVrCKLQiSPoY39cvgQdks4BxMJe7so3RWamo0gTfn2gr
UkvIPqRAmiQz6XF3KhXcMxvpUvHHH6d9thQx1dP7NlxGtekhY+MEORiPQH3FGRnm
3jGL8i3+eU1t+Jt2oNazejFQZUnJt4Ew3UoVh0xdUfRy0qh8p7ZOE5wG+gm5h4f4
55yivMDEIW/qfOFzDrtdjiS1G0EnP8HPzU6jwI5ghpa3fygrqTJxpRfmgna+Du8B
D+sHaHiU1GcXTMTyPn19Ir1BjHptOFvooJ2wZaeQu6ocdaDzdz6tmx+RVyp1Rz8D
u7HMEPKB3igJn3zJlZ7ZLyQ+P7LiVV0Jd/SL
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:34 2026 by rpki-client