Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094BD5E4098111F1ADF61D7CDAE4EC9C.roa
File: 094BD5E4098111F1ADF61D7CDAE4EC9C.roa (raw, json)
Hash identifier: z0yGhSGTx+JBlh+1i2ppsQwZjaJ1B1pDfu8vlq0aTJ0=
Subject key identifier: C4:44:36:A8:D2:05:76:49:8C:B0:02:54:47:B4:49:6E:6D:B8:8D:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094BD5E4098111F1ADF61D7CDAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:42:04 +0000
ROA not before: Sat 14 Feb 2026 08:41:59 +0000
ROA not after: Wed 25 Mar 2026 08:41:59 +0000
asID: 61112
IP address blocks: 156.231.139.0/24 maxlen: 24
156.246.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105876 (0x19d94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 08:41:59 2026 GMT
Not After : Mar 25 08:41:59 2026 GMT
Subject: CN=6990355c-797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d4:2c:4a:59:1e:ab:b8:0d:ee:91:ad:c6:d6:
18:dc:60:aa:43:92:5c:91:a7:be:35:10:c9:35:8c:
4e:24:c4:fc:03:44:59:84:78:1f:05:11:b7:0c:e2:
a5:5e:c0:45:0b:a0:87:e7:e6:c9:65:93:d4:96:67:
7e:b1:1d:be:37:27:05:4c:64:e5:b1:0f:8a:ee:24:
a8:90:a5:65:b2:75:55:1a:e4:0f:89:e4:5c:32:72:
03:26:ef:2d:6b:3d:8e:dd:86:19:58:c3:7e:4a:69:
8f:71:02:03:cc:19:b1:62:65:36:e8:71:88:1f:31:
c9:2a:e8:ad:78:42:64:ea:cb:bb:af:4d:19:1d:25:
ec:bb:f3:55:74:87:ab:83:5c:c5:98:b2:c8:f5:8d:
d6:fa:dd:4e:ab:b0:69:65:99:2b:b2:88:68:67:b7:
b0:e6:63:4b:0d:b5:bc:48:43:95:21:72:62:9e:66:
da:0b:cb:c5:9c:6b:77:f4:12:83:9a:88:3b:60:05:
a0:d1:52:c0:87:c8:d6:a9:98:8a:20:11:15:d5:0c:
82:ba:67:71:72:69:46:b6:17:de:ae:d3:79:46:33:
38:ad:5c:59:3e:e7:28:ae:84:e6:bc:f6:ce:ca:9e:
1d:5c:09:a5:38:bf:5b:5f:e3:f3:a9:1e:53:31:98:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:44:36:A8:D2:05:76:49:8C:B0:02:54:47:B4:49:6E:6D:B8:8D:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094BD5E4098111F1ADF61D7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.139.0/24
156.246.88.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:e5:c4:10:ad:58:54:f9:e9:6a:08:12:65:3f:3e:70:5c:6a:
ac:53:51:70:e2:2e:54:2b:a5:b1:8b:d2:2c:1a:a0:26:0e:b2:
1a:00:a5:14:af:ae:8d:0c:34:1e:bb:39:c6:c0:b1:d7:bf:d2:
39:3a:d2:73:53:dd:4c:44:b7:71:0c:fa:45:c8:3c:62:ac:19:
62:12:13:56:a4:eb:50:8d:fd:64:1c:51:da:59:3d:16:bd:1c:
9c:5b:5a:95:30:b5:8f:12:34:17:35:2c:06:45:a7:6b:3b:61:
e6:a6:22:8a:ee:dd:0b:45:2e:c8:38:2b:99:25:12:e3:14:c9:
8e:6e:0f:37:46:5c:02:20:5c:8d:3f:c2:19:3a:10:93:7d:90:
19:d0:1d:4f:fe:d8:9b:5d:75:e5:6f:b8:60:55:9a:9b:e1:53:
4a:fd:17:a1:27:6b:ff:46:cf:a2:2e:cf:ea:69:45:f3:a0:65:
0e:2d:a1:bb:82:44:4a:12:4f:f6:b3:c3:19:f1:ae:d1:ac:37:
ea:52:7e:31:5e:a9:ac:59:fc:a4:d0:fa:9d:5e:8c:fd:d9:ed:
94:c7:ea:81:6c:01:b2:61:21:6f:d2:6b:bc:71:5d:c9:bb:46:
4d:06:48:88:af:50:5d:90:f6:db:9c:5a:00:2b:bc:cb:e5:85:
5e:c6:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:11 2026 by rpki-client