Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FE8EA920EFE11F1BDC220C1DAE4EC9C.roa
File: 3FE8EA920EFE11F1BDC220C1DAE4EC9C.roa (raw, json)
Hash identifier: 7TwUnOOZRxMEk3KcpTWu2bVseCDnsp9e/p6p1uboT3s=
Subject key identifier: A6:D7:28:AA:6F:24:98:53:45:78:C8:00:C4:5E:7E:AD:A6:44:66:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FE8EA920EFE11F1BDC220C1DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:20:58 +0000
ROA not before: Sat 21 Feb 2026 08:20:54 +0000
ROA not after: Sat 07 Mar 2026 08:20:54 +0000
asID: 54801
IP address blocks: 156.226.208.0/23 maxlen: 24
156.233.205.0/24 maxlen: 24
156.233.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106286 (0x19f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 08:20:54 2026 GMT
Not After : Mar 7 08:20:54 2026 GMT
Subject: CN=69996aea-d131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:72:90:04:5b:30:27:23:73:8d:fd:d3:04:67:
49:53:08:f6:c8:1f:a1:91:25:20:c4:c8:1e:bc:c9:
5c:92:70:7d:f9:46:a6:15:e9:75:18:46:26:8b:56:
9e:55:fa:a3:7c:0a:b8:d7:dc:59:bb:b6:4f:9b:6d:
79:2d:b9:42:d4:51:01:c0:a7:6e:0e:f6:8c:f2:e6:
af:3b:a6:e0:d8:7c:bc:1f:3f:64:8d:d9:e1:68:06:
41:60:3d:0d:42:43:4a:f8:ae:d9:85:46:2b:98:0a:
9d:a8:7a:ea:93:13:ef:0f:77:b8:f9:42:81:75:5d:
c1:fe:a7:b0:78:06:81:a1:6a:1b:96:de:77:c1:f2:
16:3b:19:d1:71:d5:eb:0c:1b:2d:80:b0:3a:45:1a:
b7:10:4c:ca:75:86:d2:e4:1f:01:3c:fe:73:ff:02:
02:d8:1a:8f:37:31:c6:19:b6:0b:ac:d8:cf:01:df:
fd:04:1d:b4:bf:17:50:52:0d:55:76:7b:53:23:b4:
91:ec:43:c7:ca:12:33:4b:1a:4e:bc:50:4b:14:d5:
c1:88:37:d6:3a:c6:8d:aa:ff:9c:31:86:08:db:76:
89:57:c8:91:09:00:11:5e:e9:bb:79:f6:9c:71:b6:
a3:72:fd:f4:1f:64:2a:91:77:f2:32:c8:86:6f:3d:
3b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:28:AA:6F:24:98:53:45:78:C8:00:C4:5E:7E:AD:A6:44:66:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FE8EA920EFE11F1BDC220C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.208.0/23
156.233.205.0-156.233.207.255
Signature Algorithm: sha256WithRSAEncryption
a1:a2:da:fa:03:55:82:2a:57:59:9a:98:a0:57:f4:f5:8b:cf:
2e:65:f8:87:e4:16:34:cb:73:4b:c0:01:36:ce:f9:cf:60:cf:
4f:32:ea:0b:ea:a3:3a:52:ec:8a:b2:95:91:ec:75:b7:9d:81:
3b:33:2e:e5:76:21:e1:c0:16:65:59:5c:b2:01:ed:d4:4a:40:
0b:9b:99:23:06:df:71:88:f0:fd:96:74:5f:58:19:31:e5:0b:
c4:8a:b7:4a:c5:a0:4e:c2:d5:22:35:f6:71:1e:0e:00:7a:b6:
d2:d8:87:4c:50:aa:a3:8a:fc:eb:a2:78:ba:12:b9:34:92:95:
3c:b5:0f:61:4b:98:86:32:54:86:96:e6:29:38:95:c4:aa:10:
1e:a9:75:6c:50:d9:b8:fa:92:34:f1:45:88:49:c6:39:fa:f0:
bf:b8:60:ff:17:38:d2:41:e5:5c:ce:12:1f:1a:4d:96:29:ec:
4e:80:58:e1:8b:6b:cc:1b:5e:ef:65:f9:03:94:7d:08:99:db:
32:bc:a1:0c:a1:20:53:9d:d8:c6:1c:b1:e9:08:0c:25:76:84:
a1:06:3c:e1:7d:0a:88:49:65:2f:f8:2c:a0:d2:99:98:8a:04:
e2:d0:53:c5:0b:f9:13:f3:64:dd:57:f3:eb:39:2c:a5:49:3d:
20:48:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:23 2026 by rpki-client