Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B6BB18059411F198CB2EDBDAE4EC9C.roa
File: 11B6BB18059411F198CB2EDBDAE4EC9C.roa (raw, json)
Hash identifier: Nrcgsqo4rOm96GkGrTllUaJAtaq63x8SRpBwDMmWc+8=
Subject key identifier: A7:DD:26:41:A0:4C:A4:F3:2E:42:41:36:72:34:7C:CF:FD:72:F4:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B6BB18059411F198CB2EDBDAE4EC9C.roa
Signing time: Mon 09 Feb 2026 08:48:14 +0000
ROA not before: Mon 09 Feb 2026 08:48:09 +0000
ROA not after: Wed 16 Feb 2028 08:48:09 +0000
asID: 135600
IP address blocks: 156.246.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105574 (0x19c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 9 08:48:09 2026 GMT
Not After : Feb 16 08:48:09 2028 GMT
Subject: CN=69899f4e-e1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:2d:23:7b:61:a2:f6:29:ed:9e:0b:ee:df:
8a:74:38:32:44:7d:cc:1f:6d:ad:a5:1a:e3:d4:aa:
a6:55:a3:70:aa:fd:b4:bc:ad:8f:9b:a7:5c:8c:3a:
83:3a:91:9a:6e:9a:13:1e:29:b5:38:bc:e4:ba:99:
4f:b7:fd:5e:6b:25:a1:49:c4:ab:49:5c:27:75:ce:
b7:01:a2:ad:c7:ad:f4:2d:a9:d7:6a:8d:48:27:d6:
5a:34:e4:3f:52:76:8b:a9:a4:1e:df:c1:44:1d:a5:
85:ca:6f:6a:17:e4:cc:59:0f:09:18:a8:20:c0:b3:
e3:67:7c:19:c0:ae:c5:17:b0:d0:e2:8e:14:d4:41:
9a:b8:3b:28:a6:85:f1:5f:2b:c6:bc:af:77:82:03:
b0:86:95:df:83:6c:c5:6a:be:73:cd:19:6c:21:c9:
59:f1:30:54:82:de:89:16:41:e6:c2:c1:58:f4:38:
22:db:fc:ef:af:18:02:34:7e:c2:2a:1a:84:1b:35:
ee:02:a8:ee:b5:9b:19:61:81:91:03:80:78:0b:72:
3a:21:80:34:6b:87:9f:e0:16:63:f8:15:6f:7c:ac:
94:58:43:e4:f7:8e:46:7b:4b:c6:7e:1a:99:ed:9d:
c0:a9:10:dc:8c:67:f5:74:56:34:e4:b8:11:95:b8:
14:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DD:26:41:A0:4C:A4:F3:2E:42:41:36:72:34:7C:CF:FD:72:F4:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B6BB18059411F198CB2EDBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.72.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:bc:85:b3:80:cc:00:e8:00:c8:93:60:f0:69:c3:30:61:83:
64:e0:75:14:cb:00:35:2e:7d:30:55:e0:36:3a:a7:a7:7e:27:
89:44:b3:e9:b2:a3:c4:78:0d:3d:e9:f3:70:91:a9:ce:cf:c2:
f0:f7:dc:77:11:5c:cc:83:9f:87:fb:5d:98:03:5f:d5:d5:8e:
41:88:30:f1:d8:05:b4:fd:28:35:07:74:58:f7:25:1e:a2:25:
e6:36:9b:ef:d6:45:49:c6:b0:ca:5d:b7:ed:b5:b7:ac:09:94:
af:66:32:c8:9b:5d:0b:ba:17:88:c1:ab:14:7b:d4:62:7b:f0:
10:2d:45:37:ad:72:f0:6b:95:93:28:01:4b:cd:8e:4e:3a:15:
d0:92:51:12:0b:b8:ce:8a:49:33:f3:25:31:1c:40:6b:95:3e:
43:2f:c6:11:79:c1:87:5d:9a:c5:5f:fa:d6:27:73:04:71:0d:
40:5d:d8:74:aa:60:fd:df:b8:b4:b4:33:91:25:d2:4b:53:18:
86:fa:53:36:ce:c8:86:d7:53:62:8b:12:35:d8:c4:0b:bf:f4:
56:60:41:ed:23:3b:05:7b:13:0e:a1:46:f7:bb:4c:b1:ec:83:
11:0d:2b:4a:72:c2:0e:25:e6:9c:84:9b:3b:19:1e:5c:6c:2b:
08:46:7b:83
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZxmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA5MDg0ODA5WhcNMjgwMjE2MDg0ODA5WjAYMRYw
FAYDVQQDEw02OTg5OWY0ZS1lMWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs/QtI3thovYp7Z4L7t+KdDgyRH3MH22tpRrj1KqmVaNwqv20vK2Pm6dc
jDqDOpGabpoTHim1OLzkuplPt/1eayWhScSrSVwndc63AaKtx630LanXao1IJ9Za
NOQ/UnaLqaQe38FEHaWFym9qF+TMWQ8JGKggwLPjZ3wZwK7FF7DQ4o4U1EGauDso
poXxXyvGvK93ggOwhpXfg2zFar5zzRlsIclZ8TBUgt6JFkHmwsFY9Dgi2/zvrxgC
NH7CKhqEGzXuAqjutZsZYYGRA4B4C3I6IYA0a4ef4BZj+BVvfKyUWEPk945Ge0vG
fhqZ7Z3AqRDcjGf1dFY05LgRlbgU6QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKfd
JkGgTKTzLkJBNnI0fM/9cvROMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMUI2QkIxODA1OTQxMUYxOThDQjJFREJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPZIMA0GCSqGSIb3DQEBCwUA
A4IBAQAtvIWzgMwA6ADIk2DwacMwYYNk4HUUywA1Ln0wVeA2OqenfieJRLPpsqPE
eA096fNwkanOz8Lw99x3EVzMg5+H+12YA1/V1Y5BiDDx2AW0/Sg1B3RY9yUeoiXm
Npvv1kVJxrDKXbfttbesCZSvZjLIm10LuheIwasUe9Rie/AQLUU3rXLwa5WTKAFL
zY5OOhXQklESC7jOikkz8yUxHEBrlT5DL8YRecGHXZrFX/rWJ3MEcQ1AXdh0qmD9
37i0tDORJdJLUxiG+lM2zsiG11NiixI12MQLv/RWYEHtIzsFexMOoUb3u0yx7IMR
DStKcsIOJeachJs7GR5cbCsIRnuD
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:16:58 2026 by rpki-client