Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B5944212FB11F1B3504DB7DAE4EC9C.roa
File: 40B5944212FB11F1B3504DB7DAE4EC9C.roa (raw, json)
Hash identifier: AnH6aTRnq+Zhiqs2x4j3zvqLcirgm7cwrJb9RmtYiZs=
Subject key identifier: B4:90:74:C9:53:17:2C:6A:4C:D8:11:3B:B8:AD:A0:CC:2C:40:67:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B5944212FB11F1B3504DB7DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 10:09:36 +0000
ROA not before: Thu 26 Feb 2026 10:09:29 +0000
ROA not after: Mon 30 Mar 2026 10:09:29 +0000
asID: 9304
IP address blocks: 156.227.136.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.231.6.0/24 maxlen: 24
156.245.160.0/24 maxlen: 24
156.245.168.0/24 maxlen: 24
156.245.194.0/24 maxlen: 24
156.245.211.0/24 maxlen: 24
156.245.224.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106661 (0x1a0a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 10:09:29 2026 GMT
Not After : Mar 30 10:09:29 2026 GMT
Subject: CN=69a01be0-18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:20:fa:e5:19:c9:a4:40:15:94:5f:ff:25:
70:50:b1:3e:5b:27:50:e8:c2:6f:b4:a8:5f:53:b1:
86:a9:60:46:dc:d7:af:ac:34:22:d3:c3:88:88:86:
14:d9:ab:a6:cc:9c:6f:60:c3:34:3f:99:8a:fb:a8:
0e:99:1e:f8:bf:63:f0:63:24:4a:43:98:b7:7e:21:
06:43:ad:b7:29:ed:52:1a:95:5f:3a:92:f7:45:ea:
74:a4:0f:df:c3:c4:e1:a5:3d:94:18:17:d2:0c:42:
13:95:6c:84:30:a1:f5:94:b1:92:b0:4c:23:f2:92:
22:01:82:02:3c:f2:c5:41:48:1d:e6:d0:a8:a7:f0:
08:97:2b:61:9d:d1:fd:ed:21:66:6e:de:b4:5c:97:
f5:7e:78:5f:5c:02:97:5d:f1:69:ca:e2:51:4f:f9:
06:de:0f:f6:84:dd:47:0e:01:41:4b:16:90:aa:d0:
21:13:c3:ee:53:e1:57:6f:d3:1a:fc:e0:39:82:8a:
de:42:bf:76:89:37:18:2b:af:06:26:fa:dd:20:f0:
3a:d6:31:d3:a2:97:17:5d:25:ff:f2:47:69:46:ca:
0b:b6:ec:fe:c2:e2:ac:6e:f5:1c:eb:75:0c:d9:04:
0d:33:61:0d:b2:3a:0a:2a:1f:d1:58:6f:f8:d5:22:
28:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:74:C9:53:17:2C:6A:4C:D8:11:3B:B8:AD:A0:CC:2C:40:67:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40B5944212FB11F1B3504DB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.136.0/24
156.231.4.0-156.231.6.255
156.245.160.0/24
156.245.168.0/24
156.245.194.0/24
156.245.211.0/24
156.245.224.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0d:81:67:be:52:78:48:76:4a:08:04:5f:9d:92:81:01:b5:
25:c2:ba:84:14:5c:ee:f8:61:10:e9:83:50:1b:42:c4:80:f2:
97:40:b2:44:58:77:1f:8c:20:5b:01:0a:3e:30:cc:5d:2d:e4:
fc:97:65:47:7b:f2:f4:e3:46:26:45:28:e8:77:3e:0d:f1:61:
95:43:25:3f:b0:52:d6:61:98:2e:56:14:28:f6:41:c7:1c:54:
bd:96:b8:e3:ba:ab:3b:73:38:2e:6d:6f:11:d3:67:1d:7e:aa:
c4:6a:30:d7:0e:e1:55:24:f3:a8:00:fb:01:8a:74:53:f4:ed:
0c:aa:6b:8c:45:8f:9c:9b:03:b4:f6:7c:b4:34:dd:0a:bc:52:
5b:84:18:cf:fe:64:2f:6b:f2:27:90:0c:4a:03:39:2b:6a:02:
8c:66:f2:a3:24:d4:51:29:47:5b:5d:e2:6a:3c:25:72:f1:3f:
c9:79:ad:6a:c9:39:eb:fd:74:16:6a:74:2c:6b:34:80:9d:ad:
18:b2:1f:85:b1:06:ab:44:e1:42:6c:ba:05:55:97:f1:b4:75:
27:b3:65:74:8a:ba:83:5c:c8:9b:62:c4:16:e2:fe:06:e5:b8:
20:2a:9d:78:ae:bd:7f:03:8d:3a:76:9d:f3:fb:be:26:ba:7b:
8d:1c:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:38:13 2026 by rpki-client