Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393FBBC60F2111F1B9CECD94DAE4EC9C.roa
File: 393FBBC60F2111F1B9CECD94DAE4EC9C.roa (raw, json)
Hash identifier: DhML5L9JAl4yeNGhJxBC2PkZSMtkviiBB6axnndIKUg=
Subject key identifier: 41:25:D9:C3:96:F8:BF:F2:E4:CF:F3:4A:E5:F9:97:3C:E4:53:A0:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F7B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393FBBC60F2111F1B9CECD94DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:31:19 +0000
ROA not before: Sat 21 Feb 2026 12:31:15 +0000
ROA not after: Sat 28 Mar 2026 12:31:15 +0000
asID: 44559
IP address blocks: 156.246.215.0/24 maxlen: 24
156.246.216.0/24 maxlen: 24
156.246.217.0/24 maxlen: 24
156.246.218.0/24 maxlen: 24
156.246.219.0/24 maxlen: 24
156.246.220.0/24 maxlen: 24
156.246.221.0/24 maxlen: 24
156.246.222.0/24 maxlen: 24
156.246.223.0/24 maxlen: 24
156.246.224.0/24 maxlen: 24
156.246.225.0/24 maxlen: 24
156.246.226.0/24 maxlen: 24
156.246.227.0/24 maxlen: 24
156.246.228.0/24 maxlen: 24
156.246.229.0/24 maxlen: 24
156.246.230.0/24 maxlen: 24
156.246.231.0/24 maxlen: 24
156.246.232.0/24 maxlen: 24
156.246.233.0/24 maxlen: 24
156.246.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106363 (0x19f7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:31:15 2026 GMT
Not After : Mar 28 12:31:15 2026 GMT
Subject: CN=6999a597-36c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6f:e6:58:14:22:35:26:66:ba:d7:21:f4:8d:
a1:64:64:12:06:c4:82:1a:ac:e9:9c:72:9a:35:7c:
8c:9f:0c:bf:f8:5f:9b:9c:d5:3e:8b:5f:9a:5a:1b:
46:15:1d:eb:a3:02:f7:65:7a:98:79:62:e3:88:4d:
03:52:19:aa:a0:c5:7b:a6:0b:93:07:27:64:20:f8:
03:d6:e8:95:8c:97:3d:95:db:80:a5:7c:42:17:eb:
42:20:e6:4c:94:3d:29:08:38:9a:b7:80:8e:96:69:
bf:67:b8:d4:ad:97:f1:11:3b:3f:17:a2:f0:fc:47:
87:b4:18:63:d3:7f:21:30:62:a1:67:1e:76:35:f9:
ec:39:97:c4:bc:c9:ca:a0:e6:ad:97:52:2f:69:c4:
57:a0:ea:75:cc:3d:cd:05:48:06:11:84:0e:2d:f1:
45:22:9f:8a:76:15:5c:b3:30:1b:e3:c7:e5:40:f8:
10:d6:e9:c5:8c:18:b9:fa:60:71:d4:4d:8f:69:43:
2c:95:70:5b:96:6c:1a:37:57:4b:62:a8:ec:ba:ff:
a3:22:ed:2c:51:33:e4:0b:38:95:62:43:00:10:6e:
b3:e6:1d:00:34:a4:66:f3:21:cb:d2:ac:22:b4:7c:
64:53:68:1c:1d:72:13:51:b3:30:fb:fe:fe:d7:49:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:D9:C3:96:F8:BF:F2:E4:CF:F3:4A:E5:F9:97:3C:E4:53:A0:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/393FBBC60F2111F1B9CECD94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.215.0-156.246.234.255
Signature Algorithm: sha256WithRSAEncryption
65:bc:a5:3a:0c:7f:88:72:49:76:88:27:3a:73:93:93:d5:9c:
79:41:3b:88:0e:e5:fa:10:da:25:21:24:38:3a:31:f1:81:e5:
75:b7:7f:3c:59:8d:46:11:c1:83:dd:fc:bb:dc:e7:68:da:11:
58:fe:3f:52:e6:ef:55:2b:71:26:66:b6:da:19:ad:3c:4f:10:
a7:8e:05:fe:27:0e:68:bb:0e:9a:2a:7f:08:61:de:37:73:55:
5e:3d:7f:0d:ed:81:97:51:af:03:2f:fb:74:b5:e1:47:e7:62:
04:35:d8:dd:f1:c4:80:67:ea:4b:86:4b:08:d1:99:34:d3:4d:
3d:44:2c:07:22:b7:ea:8d:b6:53:21:89:c8:73:3d:fe:6b:64:
d4:8c:f4:29:bf:a0:3d:b8:7f:25:be:ba:25:34:97:1b:52:a3:
df:b4:d6:de:9a:f5:27:41:28:43:ce:64:29:15:b5:76:51:26:
24:cc:10:99:0f:dc:3b:a5:b8:27:a7:53:f9:4a:6b:bc:86:b6:
d5:39:dd:35:bb:bc:d5:2f:51:37:4d:78:db:07:d7:3d:10:eb:
1e:60:4f:c7:a1:17:3b:81:bc:d4:39:54:c6:1c:58:cd:5a:ea:
eb:e8:4b:4f:dd:a4:75:39:d0:f2:d1:67:dc:a0:f1:a1:d3:6b:
47:7c:e5:70
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZ97MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMTIzMTE1WhcNMjYwMzI4MTIzMTE1WjAYMRYw
FAYDVQQDEw02OTk5YTU5Ny0zNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt2/mWBQiNSZmutch9I2hZGQSBsSCGqzpnHKaNXyMnwy/+F+bnNU+i1+a
WhtGFR3rowL3ZXqYeWLjiE0DUhmqoMV7pguTBydkIPgD1uiVjJc9lduApXxCF+tC
IOZMlD0pCDiat4COlmm/Z7jUrZfxETs/F6Lw/EeHtBhj038hMGKhZx52NfnsOZfE
vMnKoOatl1IvacRXoOp1zD3NBUgGEYQOLfFFIp+KdhVcszAb48flQPgQ1unFjBi5
+mBx1E2PaUMslXBblmwaN1dLYqjsuv+jIu0sUTPkCziVYkMAEG6z5h0ANKRm8yHL
0qwitHxkU2gcHXITUbMw+/7+10mgbQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEEl
2cOW+L/y5M/zSuX5lzzkU6D4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOTNGQkJDNjBGMjExMUYxQjlDRUNEOTREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9tcDBACc9uowDQYJKoZI
hvcNAQELBQADggEBAGW8pToMf4hySXaIJzpzk5PVnHlBO4gO5foQ2iUhJDg6MfGB
5XW3fzxZjUYRwYPd/Lvc52jaEVj+P1Lm71UrcSZmttoZrTxPEKeOBf4nDmi7Dpoq
fwhh3jdzVV49fw3tgZdRrwMv+3S14UfnYgQ12N3xxIBn6kuGSwjRmTTTTT1ELAci
t+qNtlMhichzPf5rZNSM9Cm/oD24fyW+uiU0lxtSo9+01t6a9SdBKEPOZCkVtXZR
JiTMEJkP3DuluCenU/lKa7yGttU53TW7vNUvUTdNeNsH1z0Q6x5gT8ehFzuBvNQ5
VMYcWM1a6uvoS0/dpHU50PLRZ9yg8aHTa0d85XA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:42 2026 by rpki-client