Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF94641860DC11F1B59321EECE1D38B0.roa
File: FF94641860DC11F1B59321EECE1D38B0.roa (raw, json)
Hash identifier: 4LxFK31f0nHNwb/u2ArTZWINyiRxr1mdYTQRypDoO1o=
Subject key identifier: B4:14:EA:48:F6:BC:E0:92:7F:59:FB:46:BB:DA:19:72:E1:52:5F:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF94641860DC11F1B59321EECE1D38B0.roa
Signing time: Fri 05 Jun 2026 12:49:33 +0000
ROA not before: Fri 05 Jun 2026 12:49:28 +0000
ROA not after: Tue 05 Jun 2029 12:49:28 +0000
asID: 17561
IP address blocks: 156.242.218.0/24 maxlen: 24
156.242.219.0/24 maxlen: 24
156.242.220.0/24 maxlen: 24
156.242.221.0/24 maxlen: 24
156.242.222.0/24 maxlen: 24
156.242.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113695 (0x1bc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 12:49:28 2026 GMT
Not After : Jun 5 12:49:28 2029 GMT
Subject: CN=6a22c5dc-89c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:2c:e7:f4:f3:e2:da:92:12:04:bf:fc:f3:
eb:e4:7a:f8:46:00:a0:d4:26:94:e7:e2:91:5a:7b:
d5:f1:65:dc:07:9c:4f:5e:4b:b4:93:72:dd:64:bc:
6a:3c:ce:23:c3:9e:79:50:79:21:89:f3:15:d8:13:
dc:5d:ba:8b:a7:90:d6:25:a1:a6:c1:e2:e1:5c:a5:
72:35:a1:0b:f3:0e:9a:af:0d:dd:5c:3d:89:f3:11:
a6:fd:a1:9e:6a:79:4c:98:2b:4e:b2:ce:90:35:55:
94:df:ae:b2:1b:33:19:e8:85:42:72:73:19:6f:16:
5d:ed:8d:5a:da:01:22:e3:7c:ad:01:fc:33:38:e9:
ec:3d:97:86:a0:27:93:b9:98:59:30:c0:54:64:22:
7a:b7:02:a3:bd:21:0f:25:65:68:be:3f:99:d8:16:
1f:af:1e:74:29:88:7e:b8:4c:da:3a:4d:29:f6:81:
9e:bb:d4:fa:a2:6b:8c:c6:fa:6e:56:de:cb:c2:a5:
a7:66:3d:ab:6e:68:34:d0:c7:97:e6:49:92:28:fc:
82:58:1f:52:9d:bd:9a:2a:79:c8:59:ee:5f:72:80:
bf:85:2d:91:02:31:67:05:b9:52:66:9f:df:73:18:
2c:ed:ad:14:0a:b7:0a:10:5c:22:4e:d5:8b:c0:0b:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:EA:48:F6:BC:E0:92:7F:59:FB:46:BB:DA:19:72:E1:52:5F:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF94641860DC11F1B59321EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.218.0-156.242.223.255
Signature Algorithm: sha256WithRSAEncryption
11:5e:95:10:37:b7:47:25:72:43:8f:00:d1:1b:f9:be:59:f8:
d2:77:2c:1c:e6:94:8f:67:b3:47:51:ae:0e:a5:f7:13:1f:6d:
90:4a:05:80:83:57:ba:9a:97:13:cc:a2:ae:a4:1a:b8:bf:03:
f1:b0:74:94:30:f4:76:05:c0:41:ad:9a:f7:70:bd:6b:21:8f:
4a:b8:a9:c9:17:83:ab:f1:8f:97:2b:90:a8:73:29:73:d6:01:
f7:7e:a3:fa:b8:40:ce:ad:d9:a2:2a:cc:c9:d3:c8:3f:8b:44:
cc:17:ce:10:7c:8c:10:57:ee:16:66:ef:12:4f:30:a6:98:bb:
64:22:5d:ed:4e:6e:c6:fd:f4:91:47:e5:d9:e1:83:5e:5e:f5:
8d:86:75:48:0f:86:ca:4f:3b:ab:15:c7:46:87:fa:f2:3a:24:
81:a8:36:ce:06:19:dc:fc:ed:99:76:c5:6d:ae:9e:5a:06:91:
0b:f9:a8:63:b2:e3:41:ef:8a:d4:3f:28:ef:3c:77:60:d6:bd:
a6:28:a6:cc:a4:a1:6e:81:d3:12:32:9a:5c:43:af:19:52:40:
83:9d:02:54:61:73:56:2c:0f:19:df:64:27:34:63:db:1f:34:
04:eb:21:0a:5c:8f:70:7d:c9:f1:63:cf:45:b9:fe:e8:27:1b:
e5:53:b7:9b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbwfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA1MTI0OTI4WhcNMjkwNjA1MTI0OTI4WjAYMRYw
FAYDVQQDEw02YTIyYzVkYy04OWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx4ws5/Tz4tqSEgS//PPr5Hr4RgCg1CaU5+KRWnvV8WXcB5xPXku0k3Ld
ZLxqPM4jw555UHkhifMV2BPcXbqLp5DWJaGmweLhXKVyNaEL8w6arw3dXD2J8xGm
/aGeanlMmCtOss6QNVWU366yGzMZ6IVCcnMZbxZd7Y1a2gEi43ytAfwzOOnsPZeG
oCeTuZhZMMBUZCJ6twKjvSEPJWVovj+Z2BYfrx50KYh+uEzaOk0p9oGeu9T6omuM
xvpuVt7LwqWnZj2rbmg00MeX5kmSKPyCWB9Snb2aKnnIWe5fcoC/hS2RAjFnBblS
Zp/fcxgs7a0UCrcKEFwiTtWLwAv9FwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLQU
6kj2vOCSf1n7RrvaGXLhUl+3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRjk0NjQxODYwREMxMUYxQjU5MzIxRUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc8toDBAWc8sAwDQYJKoZI
hvcNAQELBQADggEBABFelRA3t0clckOPANEb+b5Z+NJ3LBzmlI9ns0dRrg6l9xMf
bZBKBYCDV7qalxPMoq6kGri/A/GwdJQw9HYFwEGtmvdwvWshj0q4qckXg6vxj5cr
kKhzKXPWAfd+o/q4QM6t2aIqzMnTyD+LRMwXzhB8jBBX7hZm7xJPMKaYu2QiXe1O
bsb99JFH5dnhg15e9Y2GdUgPhspPO6sVx0aH+vI6JIGoNs4GGdz87Zl2xW2unloG
kQv5qGOy40HvitQ/KO88d2DWvaYopsykoW6B0xIymlxDrxlSQIOdAlRhc1YsDxnf
ZCc0Y9sfNATrIQpcj3B9yfFjz0W5/ugnG+VTt5s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:43 2026 by rpki-client