Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/351B1308108711F1AC7B5FACDAE4EC9C.roa
File: 351B1308108711F1AC7B5FACDAE4EC9C.roa (raw, json)
Hash identifier: yTlcwuf5r6Z/t9FRjbrIgZ+PBt8sJlDzheLnupKmyIY=
Subject key identifier: E7:5C:CB:02:61:34:3D:F6:74:A0:C7:23:D6:73:7D:CE:D2:DA:61:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/351B1308108711F1AC7B5FACDAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:13:52 +0000
ROA not before: Mon 23 Feb 2026 07:13:48 +0000
ROA not after: Fri 06 Mar 2026 07:13:48 +0000
asID: 395793
IP address blocks: 156.230.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106439 (0x19fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:13:48 2026 GMT
Not After : Mar 6 07:13:48 2026 GMT
Subject: CN=699bfe30-48c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:29:b6:cd:17:87:40:a5:1b:15:69:6a:09:
5c:e4:8e:2d:5b:2d:6e:46:b2:b7:e0:04:12:60:05:
df:95:d0:88:88:cd:6f:3d:da:1f:dc:ef:bc:47:68:
c7:48:86:98:e7:41:99:20:5a:d7:f2:78:83:e5:58:
0d:b2:1b:ec:37:03:87:64:94:c7:65:2a:90:29:1b:
8b:63:e3:50:08:7a:11:77:66:b5:98:e9:91:e8:0d:
f0:86:47:ba:38:a5:5d:f3:ab:5a:98:eb:8d:a1:cb:
57:bb:00:2b:4c:fb:b6:94:05:53:58:be:3f:3f:ce:
84:fe:58:94:74:15:21:3f:d0:fb:08:59:e1:4d:4f:
ac:74:64:d8:07:af:20:7e:89:cd:e1:b7:91:0c:f8:
cb:24:b7:dd:fb:3d:9a:50:98:8f:64:90:e7:41:b1:
d9:55:1e:7a:8f:18:1a:30:42:48:5e:91:bf:a1:e6:
0e:07:3b:0f:8c:a4:05:b2:30:67:23:db:4d:8f:8c:
fd:a2:e9:cf:2e:a0:72:69:82:a1:3c:43:b5:76:d7:
8d:65:c3:c0:c1:d4:b3:87:b7:d1:5e:e6:4e:37:6d:
97:78:a8:45:d7:1d:5c:b3:e9:02:6c:f3:11:07:fe:
51:e1:6c:39:1a:1c:25:b9:46:35:c2:34:bf:73:c1:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5C:CB:02:61:34:3D:F6:74:A0:C7:23:D6:73:7D:CE:D2:DA:61:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/351B1308108711F1AC7B5FACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:95:bc:05:f2:f4:09:b3:4e:53:39:23:42:4e:a3:b9:7f:93:
12:f8:17:2e:67:ad:16:c6:57:08:cd:87:5f:03:86:da:61:01:
20:ca:62:28:25:d8:51:e1:ff:f3:b6:9c:73:7a:1f:95:fd:f9:
e6:d9:2b:7e:e9:91:e5:e4:89:a8:2d:33:2f:5e:93:fd:a2:35:
c3:5a:b4:f2:d2:04:18:28:eb:46:b1:ed:20:d5:fe:6b:6e:65:
64:fc:37:03:2b:71:24:a7:cb:f5:7d:29:8f:f4:60:67:d5:82:
93:ce:99:8c:50:64:db:67:a9:33:04:12:99:62:cb:e0:aa:e6:
bf:65:9c:1e:be:e1:fb:9c:0c:b6:19:57:54:cf:6e:bd:6f:a2:
68:cc:39:1c:90:0f:35:00:bf:3e:29:e2:9b:9d:4f:2a:44:fd:
8c:22:f3:9a:de:41:6d:3f:06:fc:f7:2d:09:f2:36:2d:41:42:
39:4b:93:7f:39:65:c9:3e:46:54:bc:42:ad:9e:12:a3:64:12:
47:05:1a:8e:83:1f:86:88:68:ef:81:37:c3:c2:ec:d2:09:4a:
c2:58:52:b9:82:fe:ee:18:ed:43:2d:68:48:e2:28:97:f3:fe:
ec:27:26:f2:19:cc:1a:2d:13:ea:8d:8a:bf:c3:92:9d:a5:ed:
35:00:fc:0f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ/HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIzMDcxMzQ4WhcNMjYwMzA2MDcxMzQ4WjAYMRYw
FAYDVQQDEw02OTliZmUzMC00OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApm4pts0Xh0ClGxVpaglc5I4tWy1uRrK34AQSYAXfldCIiM1vPdof3O+8
R2jHSIaY50GZIFrX8niD5VgNshvsNwOHZJTHZSqQKRuLY+NQCHoRd2a1mOmR6A3w
hke6OKVd86tamOuNoctXuwArTPu2lAVTWL4/P86E/liUdBUhP9D7CFnhTU+sdGTY
B68gfonN4beRDPjLJLfd+z2aUJiPZJDnQbHZVR56jxgaMEJIXpG/oeYOBzsPjKQF
sjBnI9tNj4z9ounPLqByaYKhPEO1dteNZcPAwdSzh7fRXuZON22XeKhF1x1cs+kC
bPMRB/5R4Ww5GhwluUY1wjS/c8HwLwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOdc
ywJhND32dKDHI9Zzfc7S2mHqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNTFCMTMwODEwODcxMUYxQUM3QjVGQUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOafMA0GCSqGSIb3DQEBCwUA
A4IBAQA6lbwF8vQJs05TOSNCTqO5f5MS+BcuZ60WxlcIzYdfA4baYQEgymIoJdhR
4f/ztpxzeh+V/fnm2St+6ZHl5ImoLTMvXpP9ojXDWrTy0gQYKOtGse0g1f5rbmVk
/DcDK3Ekp8v1fSmP9GBn1YKTzpmMUGTbZ6kzBBKZYsvgqua/ZZwevuH7nAy2GVdU
z269b6JozDkckA81AL8+KeKbnU8qRP2MIvOa3kFtPwb89y0J8jYtQUI5S5N/OWXJ
PkZUvEKtnhKjZBJHBRqOgx+GiGjvgTfDwuzSCUrCWFK5gv7uGO1DLWhI4iiX8/7s
JybyGcwaLRPqjYq/w5Kdpe01APwP
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:42 2026 by rpki-client