Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B390C520EEF11F1AE6907E5DAE4EC9C.roa
File: 3B390C520EEF11F1AE6907E5DAE4EC9C.roa (raw, json)
Hash identifier: yeVvcZzlRhCIVOkQu15ziUcdxcod51ZUDmM4WB9ea80=
Subject key identifier: CC:99:ED:5F:60:B0:E9:5A:56:E2:5D:71:A6:EC:40:D7:3C:D1:AE:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B390C520EEF11F1AE6907E5DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 06:33:28 +0000
ROA not before: Sat 21 Feb 2026 06:33:24 +0000
ROA not after: Fri 27 Mar 2026 06:33:24 +0000
asID: 63139
IP address blocks: 156.227.200.0/24 maxlen: 24
156.227.201.0/24 maxlen: 24
156.227.202.0/24 maxlen: 24
156.227.220.0/22 maxlen: 24
156.227.224.0/23 maxlen: 24
156.227.226.0/23 maxlen: 24
156.227.228.0/23 maxlen: 24
156.227.230.0/23 maxlen: 24
156.227.252.0/22 maxlen: 24
156.229.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106248 (0x19f08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 06:33:24 2026 GMT
Not After : Mar 27 06:33:24 2026 GMT
Subject: CN=699951b8-c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6d:4c:05:6c:9d:8f:76:e7:47:9c:71:f5:fb:
15:1d:1a:dd:76:11:72:8f:19:27:41:f9:d1:0f:36:
18:3e:4f:56:5e:0a:b5:44:02:0b:25:1d:22:c3:15:
2f:b2:2f:40:a7:b9:88:4a:fe:05:2a:66:bc:61:50:
9e:28:36:27:b5:94:a2:cb:24:25:fd:35:fb:8c:d5:
54:14:8e:47:62:ac:52:bd:5e:21:28:5e:66:9d:04:
85:aa:b5:8c:aa:c5:57:8a:06:95:cb:a2:6a:3c:28:
fa:40:c0:c0:d9:a3:1e:10:fc:f3:9e:1a:24:c2:e8:
45:c3:41:bc:79:2f:f2:42:76:c2:3f:7d:cc:3f:cc:
42:c4:ef:c8:b1:99:5d:22:b7:70:b6:1c:8d:73:9c:
5f:93:25:08:77:4b:03:1d:3a:12:c5:df:5c:de:2f:
2b:a7:99:0b:0a:df:f1:9b:81:98:5d:06:bd:1d:43:
8d:3c:0e:44:83:f3:6d:e6:35:12:fc:5d:01:8c:3f:
a1:37:6e:3c:76:1d:d1:e0:3b:d2:ec:d7:0e:b0:5d:
23:bc:b2:78:ee:13:63:06:2e:b4:9f:7f:8e:0b:bc:
5a:ac:bd:0a:48:68:dc:ac:62:70:f4:20:29:6e:c9:
84:f8:52:e9:1f:cb:3c:2a:ad:98:6c:dc:1c:ad:8c:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:99:ED:5F:60:B0:E9:5A:56:E2:5D:71:A6:EC:40:D7:3C:D1:AE:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B390C520EEF11F1AE6907E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.200.0-156.227.202.255
156.227.220.0-156.227.231.255
156.227.252.0/22
156.229.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:ef:95:5a:ef:be:ec:ba:9a:87:b3:f9:c4:96:3a:ed:12:54:
a3:94:50:04:51:8b:6b:b0:4d:7b:ce:e4:78:4b:e9:8c:65:61:
78:1e:9a:45:1b:cd:c3:5d:96:a9:e9:11:6e:8c:54:28:8f:29:
cb:6a:36:e1:0f:5c:88:44:94:d0:4d:ee:d7:54:5e:58:c9:b9:
a6:08:ab:1d:58:30:cf:3e:11:5d:78:81:3b:f5:d4:b7:74:96:
ab:11:a4:28:07:07:11:3f:c8:ba:db:b3:52:bc:16:c4:2b:c6:
a0:83:22:bb:3a:ec:d2:96:6f:fc:5a:db:9f:41:9b:7b:a2:7f:
11:c7:05:51:04:d1:c4:05:79:bb:da:f4:41:22:e9:ee:bf:a9:
0c:e0:8f:5f:31:43:b8:0b:f3:fe:d0:4a:14:47:e5:34:51:98:
08:0e:3d:1a:ac:0a:bc:dc:a0:ff:d4:11:b4:f9:eb:cd:22:0e:
7e:d3:77:49:9e:2c:45:4b:c9:61:05:a1:6b:5a:65:84:f5:e6:
88:76:10:f3:19:bb:2a:0c:49:ca:7b:0c:17:60:1e:85:b5:cd:
c9:5a:d0:86:e3:9e:cc:81:14:31:c8:47:f2:58:21:47:3d:fb:
1f:fd:e7:98:a6:c0:06:65:b9:f3:4b:dc:da:20:34:f1:b4:a0:
af:08:0a:e4
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIDAZ8IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMDYzMzI0WhcNMjYwMzI3MDYzMzI0WjAYMRYw
FAYDVQQDEw02OTk5NTFiOC1jMzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5G1MBWydj3bnR5xx9fsVHRrddhFyjxknQfnRDzYYPk9WXgq1RAILJR0i
wxUvsi9Ap7mISv4FKma8YVCeKDYntZSiyyQl/TX7jNVUFI5HYqxSvV4hKF5mnQSF
qrWMqsVXigaVy6JqPCj6QMDA2aMeEPzznhokwuhFw0G8eS/yQnbCP33MP8xCxO/I
sZldIrdwthyNc5xfkyUId0sDHToSxd9c3i8rp5kLCt/xm4GYXQa9HUONPA5Eg/Nt
5jUS/F0BjD+hN248dh3R4DvS7NcOsF0jvLJ47hNjBi60n3+OC7xarL0KSGjcrGJw
9CApbsmE+FLpH8s8Kq2YbNwcrYwx5wIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFMyZ
7V9gsOlaVuJdcabsQNc80a7+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjM5MEM1MjBFRUYxMUYxQUU2OTA3RTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAOc48gDBACc48owDAMEApzj
3AMEA5zj4AMEApzj/AMEAZzlAjANBgkqhkiG9w0BAQsFAAOCAQEAmu+VWu++7Lqa
h7P5xJY67RJUo5RQBFGLa7BNe87keEvpjGVheB6aRRvNw12WqekRboxUKI8py2o2
4Q9ciESU0E3u11ReWMm5pgirHVgwzz4RXXiBO/XUt3SWqxGkKAcHET/IutuzUrwW
xCvGoIMiuzrs0pZv/Frbn0Gbe6J/EccFUQTRxAV5u9r0QSLp7r+pDOCPXzFDuAvz
/tBKFEflNFGYCA49GqwKvNyg/9QRtPnrzSIOftN3SZ4sRUvJYQWha1plhPXmiHYQ
8xm7KgxJynsMF2AehbXNyVrQhuOezIEUMchH8lghRz37H/3nmKbABmW580vc2iA0
8bSgrwgK5A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:44 2026 by rpki-client