Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1137C20B0D11F1BF28AD7FDAE4EC9C.roa
File: 3A1137C20B0D11F1BF28AD7FDAE4EC9C.roa (raw, json)
Hash identifier: mNqOrjrf893McXOIFZLoQdQwOuLWkAvbo7QiPXJalyg=
Subject key identifier: 0D:A4:A6:76:37:4E:94:F4:31:01:8F:51:B4:FA:46:E7:23:38:08:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1137C20B0D11F1BF28AD7FDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 07:58:06 +0000
ROA not before: Mon 16 Feb 2026 07:58:01 +0000
ROA not after: Fri 20 Mar 2026 07:58:01 +0000
asID: 214432
IP address blocks: 156.254.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106002 (0x19e12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 07:58:01 2026 GMT
Not After : Mar 20 07:58:01 2026 GMT
Subject: CN=6992ce0e-6b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e7:ca:ec:8d:51:f2:25:0e:a6:8c:40:7e:53:
0b:6f:88:24:fa:11:74:ba:1a:4b:32:e7:c4:e7:1d:
a7:99:37:ff:e7:35:c1:f8:8d:10:28:38:fa:88:46:
7f:2f:fe:a8:3e:8b:53:6d:2c:97:20:93:26:e8:48:
c5:c6:e4:6f:85:68:94:5a:c8:c3:26:3f:6c:39:dd:
ba:a8:2c:da:75:36:f7:93:00:a4:88:df:c7:61:42:
81:34:f8:75:20:c8:4d:08:c4:8c:39:0b:9e:db:27:
4a:35:0a:1c:84:a5:e0:3a:a6:8a:90:02:8c:64:66:
c7:27:73:06:c6:d3:05:ba:4b:66:c4:3b:76:92:75:
93:a6:79:44:33:a1:ec:0a:62:dc:18:67:8b:e5:4b:
94:ee:b6:a6:30:0f:cf:92:17:85:f0:17:2b:b9:c6:
82:93:91:91:ec:67:3c:eb:c9:58:bf:e9:01:8c:ce:
51:2d:6e:77:f2:bb:af:c8:55:2f:06:3e:37:9f:f0:
d0:ac:3a:c1:3d:98:e5:63:5c:41:0b:9b:3a:e2:f1:
22:41:73:3d:31:90:6a:a1:85:b6:7d:76:e7:f1:8a:
d2:50:a2:24:1a:b8:5e:b1:b4:26:5c:27:30:c2:f5:
fc:33:37:6c:13:68:56:64:8f:4c:5c:c0:a3:ec:34:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:A6:76:37:4E:94:F4:31:01:8F:51:B4:FA:46:E7:23:38:08:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A1137C20B0D11F1BF28AD7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.20.0/23
Signature Algorithm: sha256WithRSAEncryption
52:8e:19:0e:a4:20:17:c6:ef:10:2c:e4:cd:4d:06:7d:3d:9b:
96:32:b6:73:f5:fa:4c:0d:e2:d9:81:01:57:9d:04:7d:e4:d4:
f9:38:86:2c:dc:09:c4:da:2a:03:bd:1a:7f:b9:ba:ba:7e:ed:
71:50:be:00:9b:34:d7:07:36:c8:36:8d:11:1d:99:2d:9a:d9:
d7:5b:6d:1c:e3:10:06:35:33:36:5e:ff:5c:ed:aa:75:f7:fb:
7e:36:ce:c0:6e:22:72:4b:45:fe:3e:8d:a9:10:ba:1a:ab:ff:
48:1f:5e:f9:3b:88:1f:f2:c5:bb:2e:6c:e7:14:b3:7e:d8:ab:
76:f9:0e:54:8f:e3:1b:22:b7:82:24:e1:4d:27:6b:d4:6b:d4:
cc:6c:49:fb:ea:f6:88:d1:5a:8f:53:a1:66:49:50:c9:3a:34:
64:b6:59:75:df:d8:6c:78:dd:4b:f0:5a:2f:ac:17:7b:bf:8a:
47:4a:47:b1:ef:45:d8:fe:db:c5:c2:50:38:66:52:03:5a:00:
53:16:f2:b1:dd:ac:c5:96:a3:a7:a3:6a:16:e4:af:ba:a9:40:
8d:30:d3:15:ca:3b:ed:77:70:7b:8e:76:aa:38:0f:75:d0:23:
c4:3f:13:97:e1:3f:f5:bf:fb:8f:e6:b0:85:cd:72:28:ec:8c:
86:88:7e:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ4SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE2MDc1ODAxWhcNMjYwMzIwMDc1ODAxWjAYMRYw
FAYDVQQDEw02OTkyY2UwZS02YjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxufK7I1R8iUOpoxAflMLb4gk+hF0uhpLMufE5x2nmTf/5zXB+I0QKDj6
iEZ/L/6oPotTbSyXIJMm6EjFxuRvhWiUWsjDJj9sOd26qCzadTb3kwCkiN/HYUKB
NPh1IMhNCMSMOQue2ydKNQochKXgOqaKkAKMZGbHJ3MGxtMFuktmxDt2knWTpnlE
M6HsCmLcGGeL5UuU7ramMA/PkheF8BcrucaCk5GR7Gc868lYv+kBjM5RLW538ruv
yFUvBj43n/DQrDrBPZjlY1xBC5s64vEiQXM9MZBqoYW2fXbn8YrSUKIkGrhesbQm
XCcwwvX8MzdsE2hWZI9MXMCj7DS+DwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA2k
pnY3TpT0MQGPUbT6RucjOAh5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQTExMzdDMjBCMEQxMUYxQkYyOEFEN0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP4UMA0GCSqGSIb3DQEBCwUA
A4IBAQBSjhkOpCAXxu8QLOTNTQZ9PZuWMrZz9fpMDeLZgQFXnQR95NT5OIYs3AnE
2ioDvRp/ubq6fu1xUL4AmzTXBzbINo0RHZktmtnXW20c4xAGNTM2Xv9c7ap19/t+
Ns7AbiJyS0X+Po2pELoaq/9IH175O4gf8sW7LmznFLN+2Kt2+Q5Uj+MbIreCJOFN
J2vUa9TMbEn76vaI0VqPU6FmSVDJOjRktll139hseN1L8FovrBd7v4pHSkex70XY
/tvFwlA4ZlIDWgBTFvKx3azFlqOno2oW5K+6qUCNMNMVyjvtd3B7jnaqOA910CPE
PxOX4T/1v/uP5rCFzXIo7IyGiH70
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:37 2026 by rpki-client