Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CFFB1A208E011F1806BDF99DAE4EC9C.roa
File: 0CFFB1A208E011F1806BDF99DAE4EC9C.roa (raw, json)
Hash identifier: gWR971Eu+miSIJMrtI4qBe4TY9C2/2GwqyhZRIioGbQ=
Subject key identifier: A7:FC:E8:AD:E9:98:EE:32:B6:ED:59:F0:54:C7:DA:5B:A8:34:F2:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CFFB1A208E011F1806BDF99DAE4EC9C.roa
Signing time: Fri 13 Feb 2026 13:29:41 +0000
ROA not before: Fri 13 Feb 2026 13:29:37 +0000
ROA not after: Fri 20 Mar 2026 13:29:37 +0000
asID: 20326
IP address blocks: 156.233.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105804 (0x19d4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 13 13:29:37 2026 GMT
Not After : Mar 20 13:29:37 2026 GMT
Subject: CN=698f2745-d6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7d:64:d8:dd:d0:aa:7f:e2:95:53:b0:59:04:
a4:16:19:60:02:d1:a8:37:27:f8:82:b3:87:43:f5:
47:a6:bf:d2:60:1f:d1:55:93:d6:d6:66:62:09:38:
b6:f9:f5:a1:7c:79:b8:17:44:07:0d:bb:bc:7a:16:
1f:26:26:ee:f5:0a:cb:74:8d:f8:07:7a:7d:9d:87:
2d:9f:55:4b:0e:b3:dd:0d:26:5c:be:6b:cd:81:a8:
7b:a9:b3:e2:15:07:dd:c1:1b:75:14:30:32:ac:bf:
7e:f3:85:16:2c:2b:1f:fe:13:5e:97:c1:2b:5b:88:
5f:7d:87:b2:aa:c3:92:fc:9e:bf:1c:eb:73:49:0a:
69:85:82:d5:50:f2:0b:5f:2e:fb:9d:a2:ff:11:4f:
8e:02:82:4a:fe:fc:22:ad:e3:61:b7:3c:8b:b6:07:
34:b6:cf:74:05:76:9c:1a:bc:66:59:fb:ae:39:11:
d7:0a:42:58:33:75:b3:26:6b:ea:a3:2e:91:ac:af:
e7:47:0c:9b:b4:f6:36:0a:28:97:ec:e3:a8:2d:a1:
c9:4d:ff:2e:08:72:0f:25:71:67:07:96:33:0d:43:
1b:9f:03:a1:6b:dd:07:de:6d:fc:ae:00:54:72:c9:
5f:1d:5c:d6:3e:fa:a2:46:20:ce:c9:1f:3e:36:97:
a6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:E8:AD:E9:98:EE:32:B6:ED:59:F0:54:C7:DA:5B:A8:34:F2:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CFFB1A208E011F1806BDF99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
41:fe:d8:cb:0a:e2:6a:f8:3a:a9:61:d4:89:e2:a0:1b:c9:a9:
8b:a9:f6:ac:1f:68:a7:2a:8b:a3:9a:2f:63:7a:f8:59:58:b1:
4e:4b:f1:c2:56:26:55:67:b0:8e:f8:42:37:7c:97:b2:99:82:
43:c2:dc:73:e6:3e:9f:57:07:2b:4b:1c:bd:dc:35:66:03:89:
9d:70:54:38:a1:67:d4:91:91:5a:c9:63:b6:b4:b6:73:6b:2b:
58:55:81:55:8c:8b:de:20:a3:1c:3a:30:47:d7:e3:87:70:bf:
73:f9:a7:83:fb:22:0f:56:9f:42:9b:04:46:93:e9:bb:c8:56:
3e:cd:2c:af:74:13:11:ea:1c:3e:10:f0:19:65:1e:bb:6b:e4:
d9:b1:4c:ae:bc:10:99:84:24:47:f4:75:cd:3f:59:13:e3:38:
69:cd:3a:9c:84:d5:45:4e:77:63:9d:db:7a:4c:aa:c2:8a:ab:
f1:36:ec:40:b1:a8:c3:2d:ac:ff:ef:4d:da:e1:8a:7f:98:47:
2d:97:0c:a5:ba:89:d3:b1:29:be:2e:9c:bc:b3:05:90:f0:7c:
69:ee:2e:d3:e7:ca:2d:24:69:8b:d4:48:e8:59:cd:95:57:3b:
a4:d6:68:1a:53:15:1b:c9:a2:e4:45:63:9a:81:96:de:92:30:
70:9d:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:43 2026 by rpki-client