Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263ABF7C097B11F198EB2CD9DAE4EC9C.roa
File: 263ABF7C097B11F198EB2CD9DAE4EC9C.roa (raw, json)
Hash identifier: GuUSjez+rfHL+NzbmnwhxsVMewN848sHBmfOkVZpijI=
Subject key identifier: D8:F7:55:08:FE:93:A8:FA:52:50:01:20:47:A0:F4:21:AB:2D:16:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263ABF7C097B11F198EB2CD9DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:59:55 +0000
ROA not before: Sat 14 Feb 2026 07:59:51 +0000
ROA not after: Sun 22 Mar 2026 07:59:51 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105860 (0x19d84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:59:51 2026 GMT
Not After : Mar 22 07:59:51 2026 GMT
Subject: CN=69902b7b-5f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7a:2d:f7:a9:3a:c6:7f:6a:a7:52:7c:aa:d4:
29:c4:7a:a6:17:7e:20:05:00:e2:c7:c5:53:b6:4f:
cf:5e:20:da:da:7a:cb:af:35:37:cc:7d:fc:83:12:
76:b3:5a:25:e9:a5:36:3f:40:b7:3f:d1:a4:0d:25:
25:5d:d6:f4:5e:50:9e:fe:86:c5:c9:78:18:62:d9:
a4:df:cf:ba:ec:27:e4:55:78:0b:27:9d:3c:7b:61:
00:49:53:27:46:f0:b2:23:e8:ec:9f:22:24:82:39:
f2:ab:c5:2e:75:72:cf:1f:83:c4:38:89:cd:93:a7:
79:09:9c:0e:ef:46:59:77:80:f4:f0:77:e6:94:f2:
35:35:c2:d2:42:af:93:06:a1:8e:84:b7:5c:9f:07:
8c:a6:62:65:38:96:c7:d0:67:81:20:f4:7f:ce:db:
c9:ad:fc:8f:70:56:cf:0f:20:41:f9:48:3c:47:8c:
b1:7f:4a:bd:26:d8:b2:e7:ab:60:24:77:a0:fa:c0:
bf:8e:b1:a9:16:5c:75:c6:64:e5:66:f2:a1:dd:3d:
84:ce:e1:dc:dc:65:90:7f:bb:c1:b5:f4:49:cc:ac:
ff:22:9b:38:82:98:83:5b:ab:85:3a:9e:76:2a:b1:
53:e0:83:49:dd:bc:27:e2:a7:1f:e2:45:6b:35:39:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:55:08:FE:93:A8:FA:52:50:01:20:47:A0:F4:21:AB:2D:16:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/263ABF7C097B11F198EB2CD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
32:14:8f:53:bc:74:a2:5e:17:a7:37:27:46:72:d2:38:75:0d:
90:ef:7f:f1:33:cc:ff:d2:03:fd:c5:e8:84:9e:e3:7a:d8:6d:
15:be:66:46:ad:72:68:6b:e3:63:0d:2d:96:34:64:05:60:8c:
f1:46:41:a5:f9:f3:e0:7b:7a:c9:10:b9:d0:0a:f9:84:08:25:
9b:39:87:3d:48:69:0f:dd:cd:a1:9c:a9:70:39:21:d5:d6:00:
31:42:a4:d6:37:23:e0:54:77:24:49:0f:ad:01:a9:07:52:f7:
3b:ca:99:f1:19:b7:c1:b4:83:a6:55:00:cf:5e:af:8f:4f:29:
77:77:77:bb:71:87:f8:e3:41:7b:bf:fc:79:4a:8e:28:f2:35:
8b:be:b7:dc:30:d7:26:18:d8:07:8b:31:52:92:f9:9d:85:f1:
19:2c:4a:cf:42:68:2e:86:09:1c:23:37:a7:1e:c7:0d:ee:03:
4d:2f:6f:1f:45:07:ff:e0:70:ab:17:3e:b1:b9:b3:f0:64:33:
d6:bb:d9:67:bd:a1:58:73:5f:a0:c5:40:81:46:e2:31:09:1e:
2b:88:92:eb:38:8c:34:88:00:7b:7c:8a:20:5c:89:81:5e:5d:
e6:5a:32:81:55:74:7f:d5:ff:95:a1:95:20:97:1b:64:5a:ef:
40:0e:e3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:59 2026 by rpki-client