Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AD0EBDA0E3F11F1A4EE06A9DAE4EC9C.roa
File: 0AD0EBDA0E3F11F1A4EE06A9DAE4EC9C.roa (raw, json)
Hash identifier: d05dbZFqgMzcuVzoDko4ghCR3tlB7q4yVLhE96Cphfw=
Subject key identifier: FF:E9:E2:39:B7:E6:46:B0:8B:D2:FF:83:D3:4E:D5:55:36:9F:09:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019ED8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AD0EBDA0E3F11F1A4EE06A9DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 09:32:15 +0000
ROA not before: Fri 20 Feb 2026 09:32:10 +0000
ROA not after: Fri 27 Mar 2026 09:32:10 +0000
asID: 63023
IP address blocks: 156.233.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106200 (0x19ed8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 09:32:10 2026 GMT
Not After : Mar 27 09:32:10 2026 GMT
Subject: CN=69982a1f-d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:49:05:b6:87:41:eb:64:36:37:e3:d5:a9:
f5:03:ac:ce:6e:40:a6:45:09:a3:b9:28:98:f9:fa:
0f:f6:3e:ad:59:65:7a:1c:e4:a1:95:32:4f:a5:ab:
fc:c2:42:07:98:28:07:24:05:01:4b:a0:3f:59:cf:
b8:8e:7d:f7:31:f0:2a:dd:38:86:26:df:6f:1f:38:
d9:8a:cf:ba:39:ec:95:46:bd:53:a6:81:91:a2:93:
38:db:f1:ad:86:1a:db:6a:8e:6d:f9:b3:09:34:c0:
0d:10:35:a7:b2:5d:fe:54:3f:8e:a1:30:36:cf:32:
a7:3d:5e:77:de:51:ea:3c:22:a1:38:bc:a0:12:8e:
97:89:da:7e:9d:17:43:48:20:74:8b:2b:54:ff:9c:
20:93:68:b4:48:02:eb:b1:1f:66:88:62:0d:78:4f:
57:b2:94:38:0c:e0:e6:30:66:46:4f:cb:f0:23:83:
14:9c:74:0c:d7:6a:ee:e2:97:b8:f5:d6:c9:4e:c1:
af:19:06:53:b5:39:6c:8b:6d:80:ef:8e:83:75:66:
6b:99:31:d0:05:fc:31:ec:2a:6a:a0:bd:ac:c3:ee:
4d:ce:56:8a:fd:aa:61:a1:82:6f:36:21:f2:d8:6f:
90:6c:ee:00:1c:37:2f:52:fc:ce:53:c9:de:70:42:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:E2:39:B7:E6:46:B0:8B:D2:FF:83:D3:4E:D5:55:36:9F:09:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AD0EBDA0E3F11F1A4EE06A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.2.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:6a:db:42:2c:da:1f:64:ec:ab:94:eb:45:05:7b:0b:88:d8:
e0:8d:2f:55:d6:46:32:cc:6d:6d:26:29:01:78:3d:5e:b7:95:
54:b2:ea:c1:f1:b3:de:3a:71:87:56:94:39:96:35:64:b3:13:
a2:83:8b:f8:48:cd:8c:4c:0b:aa:24:15:56:6b:93:48:65:06:
98:b3:0e:81:d9:73:57:2b:a2:d8:1a:d9:f0:8f:4f:0f:a0:11:
bf:1c:0d:30:10:38:81:2f:e8:1c:1f:f3:40:5e:b7:ff:da:20:
33:05:3a:d4:d3:5b:0a:33:64:b2:16:53:2c:21:4d:41:ab:da:
22:00:61:44:72:a1:d5:fe:99:58:c8:7c:da:1e:70:73:d9:de:
20:6f:be:3a:43:6a:fe:e6:d1:83:86:2f:36:e4:b2:a0:e0:de:
d0:30:e9:00:cb:d0:0a:f8:f0:28:87:13:fe:42:9b:83:2e:ff:
8c:ef:7b:70:df:9a:82:cc:39:9d:c9:5e:98:da:e5:07:c7:23:
97:29:1a:30:8f:33:43:3f:d8:32:f1:d3:b8:d6:1b:1b:fc:6b:
dd:de:c6:4f:78:41:98:3a:e7:d0:53:44:48:c0:d9:12:66:da:
67:70:f7:22:cc:74:ba:ce:c2:05:84:b7:b3:6f:73:04:70:48:
50:91:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:45 2026 by rpki-client