Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300314DAFA8C11F0BF624893DAE4EC9C.roa
File: 300314DAFA8C11F0BF624893DAE4EC9C.roa (raw, json)
Hash identifier: mMCOx4tU/P/0JKNgahfoXH41cp3NXTiFJknp2IW47DY=
Subject key identifier: 72:6B:35:81:5D:F9:F2:65:45:E1:D5:C2:67:FE:5B:26:AD:10:AA:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0199EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300314DAFA8C11F0BF624893DAE4EC9C.roa
Signing time: Mon 26 Jan 2026 07:54:06 +0000
ROA not before: Mon 26 Jan 2026 07:54:01 +0000
ROA not after: Wed 04 Mar 2026 07:54:01 +0000
asID: 214016
IP address blocks: 156.225.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104938 (0x199ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 26 07:54:01 2026 GMT
Not After : Mar 4 07:54:01 2026 GMT
Subject: CN=69771d9e-fd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d7:63:c4:41:ec:d7:ca:b4:75:c1:e6:69:85:
18:cc:fd:25:dc:8c:6a:7b:08:4d:70:07:7d:74:c2:
d3:c4:2d:d2:00:7e:7a:fe:74:02:9f:bd:3f:9b:4d:
f0:f4:73:78:93:4a:0a:fa:fa:26:21:59:c1:99:c0:
ce:aa:66:18:6c:19:c7:98:41:67:61:8c:12:44:a7:
eb:2e:9c:50:70:47:83:58:d8:76:c5:9c:39:74:30:
47:db:ef:06:fe:22:1e:d7:2a:cf:fa:37:3e:bc:e0:
91:b6:cb:be:f9:6a:5f:57:70:70:4c:41:50:2b:4e:
a7:96:fc:d7:c4:60:fa:be:48:8b:82:ca:0a:69:5a:
ca:34:85:6b:5d:09:ff:d2:e3:9c:d6:3d:f9:c1:af:
42:63:e0:76:89:68:ca:fa:ce:e0:33:3b:94:3c:01:
54:2e:2f:a0:0d:e1:02:fb:78:30:13:a3:af:d4:93:
8b:ab:1d:39:67:d2:54:02:1e:a5:44:c1:66:df:59:
cc:78:3a:a6:d4:d3:3c:dd:9c:a5:da:bc:86:db:19:
b7:95:03:af:11:81:63:ee:5a:2d:37:f0:ce:e5:a7:
27:11:e7:4c:5f:bb:fa:bf:f5:d8:b9:c9:03:0b:f5:
fb:b8:b1:62:b5:0c:02:fb:b7:7d:bc:86:4b:25:62:
dc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6B:35:81:5D:F9:F2:65:45:E1:D5:C2:67:FE:5B:26:AD:10:AA:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/300314DAFA8C11F0BF624893DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.42.0/24
Signature Algorithm: sha256WithRSAEncryption
37:0a:3a:96:16:90:ac:3a:13:e5:1d:cd:04:c5:6e:c6:9b:a8:
71:b8:4d:de:51:52:76:e1:4b:62:45:7c:a3:19:1e:74:1d:92:
06:26:30:19:1f:da:4b:46:40:e3:84:73:d6:d2:5b:30:59:63:
66:d4:c1:64:d1:f6:bb:b7:f1:12:ae:eb:00:c4:a5:10:35:33:
1f:81:db:e9:ae:86:67:2c:65:f0:8c:10:e7:39:af:94:fc:4f:
03:00:ae:c7:a9:65:c5:71:07:be:50:ef:bb:e9:0a:20:51:3d:
99:d6:99:74:4c:e4:27:ee:f2:43:b6:18:16:9a:f1:b2:f4:eb:
c2:a7:a4:95:d3:b9:5d:67:49:5a:76:4d:94:94:e6:5d:1f:29:
f4:6a:80:81:0b:2a:12:47:08:a0:a9:6c:2f:c9:99:07:13:03:
71:7e:8f:42:35:24:53:c6:18:11:17:8a:66:aa:70:4d:96:95:
45:ca:1d:7f:31:56:dd:5f:a3:fe:53:bd:37:90:cf:1e:4c:a4:
de:aa:68:99:86:9d:7f:bd:2d:eb:5c:63:9e:17:06:ae:f1:ed:
68:4d:3a:26:f3:1f:84:e7:8f:65:99:dd:1e:25:2f:e5:f2:c8:
da:9f:7d:e8:f5:3d:97:d0:2c:71:77:73:7b:ba:de:cd:2e:56:
52:fc:96:e0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZnqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI2MDc1NDAxWhcNMjYwMzA0MDc1NDAxWjAYMRYw
FAYDVQQDEw02OTc3MWQ5ZS1mZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1NdjxEHs18q0dcHmaYUYzP0l3IxqewhNcAd9dMLTxC3SAH56/nQCn70/
m03w9HN4k0oK+vomIVnBmcDOqmYYbBnHmEFnYYwSRKfrLpxQcEeDWNh2xZw5dDBH
2+8G/iIe1yrP+jc+vOCRtsu++WpfV3BwTEFQK06nlvzXxGD6vkiLgsoKaVrKNIVr
XQn/0uOc1j35wa9CY+B2iWjK+s7gMzuUPAFULi+gDeEC+3gwE6Ov1JOLqx05Z9JU
Ah6lRMFm31nMeDqm1NM83Zyl2ryG2xm3lQOvEYFj7lotN/DO5acnEedMX7v6v/XY
uckDC/X7uLFitQwC+7d9vIZLJWLcEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHJr
NYFd+fJlReHVwmf+WyatEKpyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMDAzMTREQUZBOEMxMUYwQkY2MjQ4OTNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEqMA0GCSqGSIb3DQEBCwUA
A4IBAQA3CjqWFpCsOhPlHc0ExW7Gm6hxuE3eUVJ24UtiRXyjGR50HZIGJjAZH9pL
RkDjhHPW0lswWWNm1MFk0fa7t/ESrusAxKUQNTMfgdvproZnLGXwjBDnOa+U/E8D
AK7HqWXFcQe+UO+76QogUT2Z1pl0TOQn7vJDthgWmvGy9OvCp6SV07ldZ0ladk2U
lOZdHyn0aoCBCyoSRwigqWwvyZkHEwNxfo9CNSRTxhgRF4pmqnBNlpVFyh1/MVbd
X6P+U703kM8eTKTeqmiZhp1/vS3rXGOeFwau8e1oTTom8x+E549lmd0eJS/l8sja
n33o9T2X0Cxxd3N7ut7NLlZS/Jbg
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:43:07 2026 by rpki-client