Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1694E78E12FC11F1BB3A7CBDDAE4EC9C.roa
File: 1694E78E12FC11F1BB3A7CBDDAE4EC9C.roa (raw, json)
Hash identifier: +x8QyXKy9HDj7Qx6yLVp5L0bRExq+hnDupUOri5rMgE=
Subject key identifier: D5:D7:7B:AA:17:C6:79:6D:51:9D:B8:05:07:6B:18:AE:C6:8B:40:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1694E78E12FC11F1BB3A7CBDDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 10:15:35 +0000
ROA not before: Thu 26 Feb 2026 10:15:30 +0000
ROA not after: Mon 30 Mar 2026 10:15:30 +0000
asID: 9304
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.245.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106663 (0x1a0a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 10:15:30 2026 GMT
Not After : Mar 30 10:15:30 2026 GMT
Subject: CN=69a01d46-2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dc:5e:c4:64:a3:e3:26:7d:7d:20:a4:42:7f:
a4:73:e5:11:54:3f:c7:6b:34:9c:0d:3f:bb:31:66:
86:71:44:71:ba:0c:81:c0:50:c5:0d:ad:ee:ff:e2:
b5:44:78:78:ff:90:d4:3e:7c:9a:94:19:5c:39:80:
ff:66:7c:65:89:e8:88:4c:25:c2:c2:55:e1:28:d1:
53:02:19:96:fb:2b:1a:8f:f5:5d:3e:34:ca:58:6d:
4d:e2:d2:92:56:00:da:76:11:dd:91:0d:f2:62:2e:
56:9a:42:53:60:d7:50:17:f6:35:24:e9:f1:0c:c9:
5f:a4:e6:84:75:18:58:12:0b:e6:9c:51:6b:79:97:
6f:5a:57:fa:58:7c:57:42:74:49:6b:a5:81:ca:a2:
ef:f1:0c:db:85:99:58:0a:aa:2e:92:3e:c2:81:30:
cf:42:65:aa:48:3f:ca:c8:97:ad:fe:73:34:f2:59:
46:ae:68:77:4e:ae:3d:4e:73:94:c7:9d:3a:b0:e7:
67:ca:35:b5:2b:ec:bd:20:96:b0:39:29:17:98:8d:
44:70:18:da:37:96:99:4e:03:c1:f2:52:3e:38:6a:
da:32:68:27:26:6b:1e:a8:12:59:5e:73:b0:c4:19:
ed:53:25:36:92:bd:9a:e9:ff:ec:f6:a9:a9:f7:37:
85:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D7:7B:AA:17:C6:79:6D:51:9D:B8:05:07:6B:18:AE:C6:8B:40:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1694E78E12FC11F1BB3A7CBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.233.66.0/24
156.245.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f4:f7:c0:2f:da:1e:8c:c3:21:76:91:b9:5f:f0:b0:30:9e:
3d:c7:b1:12:fe:5c:a1:66:67:7b:1f:72:b5:25:57:9e:41:a5:
45:a1:74:de:18:38:91:90:27:2a:90:00:5a:6a:e7:a3:d4:5a:
0c:86:2f:a3:c2:af:d2:5c:92:34:5f:fb:54:a4:f6:6e:a5:72:
9c:e6:5d:4f:3d:11:d8:37:7d:29:d9:98:fe:35:1b:c7:b3:95:
56:96:9f:74:45:96:28:3b:6c:02:80:a9:7c:d6:49:59:b5:e1:
79:fc:a6:f1:26:b0:75:44:7b:c8:b3:83:35:b6:91:21:f2:91:
9e:25:4e:cd:85:d8:0b:41:72:3f:8b:9c:70:a5:fb:b4:d4:06:
bb:3e:b0:1f:6f:51:f2:e2:64:90:e1:81:5e:46:5c:15:8a:6f:
a9:31:48:c3:73:91:88:73:2e:c1:a7:2b:ec:4b:3b:7e:80:37:
c9:75:cb:b1:d7:e2:be:0d:a9:c3:8d:55:8e:50:5e:c9:72:b5:
fe:0d:06:a2:8d:a6:c5:6b:0f:a8:83:0e:2e:f6:89:59:c9:6b:
45:6b:c8:24:e1:f9:85:8e:3e:74:78:e1:a6:0a:cd:27:34:76:
94:92:b2:13:7c:3e:a2:11:2f:34:a4:5e:6a:78:fc:cc:81:92:
41:79:c0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:10 2026 by rpki-client