Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D966592130E11F18C23AAA7DAE4EC9C.roa
File: 0D966592130E11F18C23AAA7DAE4EC9C.roa (raw, json)
Hash identifier: ocFpZySgo1rEP+2swa5CK9OKIFdvEefYTgK4OfrAu04=
Subject key identifier: D1:E4:38:71:B5:E5:D4:93:5A:E9:BE:A6:A1:98:BD:2B:5E:4C:10:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D966592130E11F18C23AAA7DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 12:24:10 +0000
ROA not before: Thu 26 Feb 2026 12:24:06 +0000
ROA not after: Mon 30 Mar 2026 12:24:06 +0000
asID: 32043
IP address blocks: 156.228.5.0/24 maxlen: 24
156.231.20.0/22 maxlen: 24
156.249.128.0/22 maxlen: 24
156.249.204.0/22 maxlen: 24
156.249.212.0/22 maxlen: 24
156.249.216.0/22 maxlen: 24
156.249.220.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106677 (0x1a0b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 12:24:06 2026 GMT
Not After : Mar 30 12:24:06 2026 GMT
Subject: CN=69a03b6a-7118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7c:e0:a2:3f:aa:66:f6:01:2a:92:fa:6e:f5:
bb:43:0b:16:c0:d7:a6:3d:ae:aa:2f:6e:2f:3c:79:
22:4a:7d:70:54:ac:b1:ca:8a:67:8e:fb:55:61:be:
cc:a2:06:4f:e3:d0:c5:6b:74:08:22:1c:d0:21:ee:
eb:ee:40:e4:58:50:32:2a:b1:1c:ab:98:0a:c4:f7:
a5:3e:9d:0b:ac:3c:e5:f8:46:03:64:62:5a:f0:bc:
da:d7:3f:ff:cb:4a:5c:8e:fd:fa:65:67:08:12:44:
46:6b:cc:47:14:2a:74:b7:34:66:f2:80:76:a9:46:
b2:7e:b5:12:32:64:8f:35:41:6f:32:92:57:f8:68:
82:8a:b3:d5:11:f6:3b:81:1b:6f:fb:ee:a7:ff:22:
06:35:cb:bf:34:97:29:68:86:a8:ba:6c:cc:0b:61:
a6:51:e6:63:1f:6b:4e:04:da:dd:8e:ba:99:14:59:
ec:01:34:c6:72:03:13:0b:5a:7c:bb:6e:5b:b7:8e:
56:00:55:7b:37:0c:ce:83:38:fe:ce:41:49:35:99:
e9:1a:64:04:d6:76:2b:50:e6:f7:a3:da:80:d2:6b:
e4:25:21:4d:37:23:f6:8d:3f:3f:04:40:5f:13:81:
f8:7e:7d:08:a7:6d:5f:d3:f8:b2:b9:f0:23:6c:22:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E4:38:71:B5:E5:D4:93:5A:E9:BE:A6:A1:98:BD:2B:5E:4C:10:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D966592130E11F18C23AAA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.5.0/24
156.231.20.0/22
156.249.128.0/22
156.249.204.0/22
156.249.212.0-156.249.223.255
156.249.244.0-156.249.251.255
156.252.6.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:cf:e2:33:ce:59:b6:fe:50:47:3b:5e:2b:8b:49:2e:15:43:
bf:94:d8:45:5f:db:40:a6:21:7e:0f:f0:d7:b1:a4:e7:db:69:
9c:02:5a:e3:b8:b3:95:94:44:a3:bf:64:d3:d6:73:5b:1d:ab:
f3:ed:a9:0b:74:f0:ad:5b:81:e5:3f:a7:cd:28:59:75:4b:cd:
24:bc:2a:81:45:ec:96:1f:db:2b:9d:8e:7e:71:9e:c6:af:4c:
27:e6:35:8f:45:82:a0:e5:0e:b8:24:70:97:7c:41:f1:87:cb:
63:29:8e:7f:3d:b8:fc:01:13:d6:56:07:c2:ad:3d:9c:d8:5e:
b9:3d:88:97:7a:fb:2f:9d:8a:e2:95:3d:cb:05:8c:9d:f9:22:
0d:30:09:67:03:97:5e:53:c8:6d:1a:30:c7:81:f1:83:e6:c5:
ee:a0:d4:bb:a8:32:31:eb:bb:5a:8b:e8:8b:0c:d5:4f:dc:21:
2e:66:b7:62:fc:70:21:6e:c6:99:84:e1:fc:8c:76:56:a6:d7:
03:9e:0b:ec:4d:09:f0:e1:93:9c:0e:0c:13:f4:63:fe:d5:34:
b6:fd:f7:56:8e:5b:c9:53:02:47:ba:b7:fc:c1:64:57:d4:47:
7c:e1:cc:67:91:d8:01:ef:ec:a5:cc:1b:a1:c0:97:23:1e:ed:
9e:d2:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:35 2026 by rpki-client