Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAF9D3E065111F195BF14E7DAE4EC9C.roa
File: 0CAF9D3E065111F195BF14E7DAE4EC9C.roa (raw, json)
Hash identifier: hdVMz2fFcfRuUAiyMikwTBlpS/MhcysxUkf4R+ySe6A=
Subject key identifier: 10:E4:87:81:AE:D9:3F:AA:A3:F3:EB:A2:DF:97:C3:DD:72:35:00:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAF9D3E065111F195BF14E7DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 07:21:00 +0000
ROA not before: Tue 10 Feb 2026 07:20:54 +0000
ROA not after: Wed 25 Mar 2026 07:20:54 +0000
asID: 328608
IP address blocks: 156.229.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105597 (0x19c7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 07:20:54 2026 GMT
Not After : Mar 25 07:20:54 2026 GMT
Subject: CN=698adc5c-b3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:1a:1a:d2:3a:49:af:48:e8:72:c1:5c:fe:
d5:98:77:94:0e:d6:10:64:40:33:62:f0:cd:1b:bf:
16:2c:7d:06:4f:3c:18:99:99:77:82:c2:9d:14:1a:
a0:0b:2c:f9:cd:e4:fe:09:cd:d4:49:35:bc:4c:dd:
9b:55:04:be:9d:03:34:99:cc:74:0c:6b:92:76:b7:
c4:0b:75:9f:ea:47:c7:6e:0d:ab:22:d0:c1:ed:26:
96:2d:9d:a5:bd:74:83:5f:da:67:87:c1:3d:cf:f4:
96:8a:af:33:59:dd:54:5a:e6:58:0b:11:dd:8b:00:
eb:1c:22:23:ae:32:24:64:e8:f5:69:10:10:85:5c:
8d:b4:de:c3:aa:a6:6a:29:65:1e:71:16:be:a7:b1:
3c:75:e2:2e:8d:43:b0:75:83:26:66:6b:60:da:e9:
8e:fe:79:d9:43:b1:bc:18:66:ae:fc:1d:64:90:eb:
03:8b:41:f4:3f:a0:d6:c0:74:25:e9:24:af:6a:7c:
cd:de:cb:1b:cf:d9:77:07:50:c0:6a:93:56:a8:c1:
5f:2d:c8:87:7d:b5:0d:dd:07:67:1e:76:13:ff:98:
20:ab:71:10:d1:49:4d:aa:5a:06:6f:16:0c:85:f1:
fb:1a:ec:da:ca:00:fc:00:18:d8:ea:bb:cf:a0:ec:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:87:81:AE:D9:3F:AA:A3:F3:EB:A2:DF:97:C3:DD:72:35:00:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CAF9D3E065111F195BF14E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.96.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:2b:59:3f:ac:4c:cd:16:be:50:7e:6a:98:eb:0e:8a:8b:86:
92:d1:82:f4:1c:5a:0a:4a:cb:f4:d6:d7:9c:90:a5:9b:36:a7:
74:87:4e:c8:87:29:e5:78:fd:e4:35:01:c0:58:d8:5c:4f:99:
e9:b7:81:5e:8e:9a:e6:8a:62:13:c1:e8:9c:a0:ca:bd:6e:c9:
4e:3f:da:34:69:89:22:57:79:a3:93:0b:89:d1:fb:e4:d6:3d:
a9:97:59:68:32:8c:eb:1e:d5:b6:c1:a3:23:94:ed:5a:42:dc:
01:8f:93:a3:46:0e:d4:17:07:91:13:9c:0c:fe:94:d7:ef:d1:
d2:46:22:05:db:7d:d2:f1:ce:ad:fd:c6:d4:f5:45:e5:5e:39:
4d:c4:67:ad:81:44:21:6f:e7:64:48:2f:46:82:78:fc:4f:eb:
4c:57:5f:5e:64:49:4a:e0:7f:bd:33:b0:9f:3b:04:5f:7b:1e:
e5:02:ed:76:2b:8e:0e:0f:29:f7:b1:4c:e4:98:00:75:a1:90:
53:e8:6a:9b:15:69:ef:21:d8:68:10:90:18:93:13:71:c4:a1:
9e:c3:c9:14:4f:d5:a7:63:cb:27:e5:55:ca:8b:99:0c:b5:15:
20:00:92:df:e2:2d:08:3b:19:ae:4d:b2:46:b3:9f:b4:fe:58:
24:15:a6:99
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZx9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjEwMDcyMDU0WhcNMjYwMzI1MDcyMDU0WjAYMRYw
FAYDVQQDEw02OThhZGM1Yy1iM2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAukwaGtI6Sa9I6HLBXP7VmHeUDtYQZEAzYvDNG78WLH0GTzwYmZl3gsKd
FBqgCyz5zeT+Cc3USTW8TN2bVQS+nQM0mcx0DGuSdrfEC3Wf6kfHbg2rItDB7SaW
LZ2lvXSDX9pnh8E9z/SWiq8zWd1UWuZYCxHdiwDrHCIjrjIkZOj1aRAQhVyNtN7D
qqZqKWUecRa+p7E8deIujUOwdYMmZmtg2umO/nnZQ7G8GGau/B1kkOsDi0H0P6DW
wHQl6SSvanzN3ssbz9l3B1DAapNWqMFfLciHfbUN3QdnHnYT/5ggq3EQ0UlNqloG
bxYMhfH7GuzaygD8ABjY6rvPoOzzGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBDk
h4Gu2T+qo/Prot+Xw91yNQBPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQ0FGOUQzRTA2NTExMUYxOTVCRjE0RTdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOVgMA0GCSqGSIb3DQEBCwUA
A4IBAQB8K1k/rEzNFr5QfmqY6w6Ki4aS0YL0HFoKSsv01teckKWbNqd0h07Ihynl
eP3kNQHAWNhcT5npt4FejprmimITweicoMq9bslOP9o0aYkiV3mjkwuJ0fvk1j2p
l1loMozrHtW2waMjlO1aQtwBj5OjRg7UFweRE5wM/pTX79HSRiIF233S8c6t/cbU
9UXlXjlNxGetgUQhb+dkSC9Ggnj8T+tMV19eZElK4H+9M7CfOwRfex7lAu12K44O
Dyn3sUzkmAB1oZBT6GqbFWnvIdhoEJAYkxNxxKGew8kUT9WnY8sn5VXKi5kMtRUg
AJLf4i0IOxmuTbJGs5+0/lgkFaaZ
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:02 2026 by rpki-client