Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6EA9F213C511F189B60792DAE4EC9C.roa
File: 4C6EA9F213C511F189B60792DAE4EC9C.roa (raw, json)
Hash identifier: 5yQYcxA1SOGnxrRhmSZbzzgIJRg3D3N9eXlwsWWisx4=
Subject key identifier: E1:FA:3C:AF:1D:BA:65:C1:E4:46:A3:90:20:50:DA:11:26:5B:93:79
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A124
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6EA9F213C511F189B60792DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 10:15:54 +0000
ROA not before: Fri 27 Feb 2026 10:15:48 +0000
ROA not after: Thu 09 Apr 2026 10:15:48 +0000
asID: 401783
IP address blocks: 156.254.117.0/24 maxlen: 24
156.254.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106788 (0x1a124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 10:15:48 2026 GMT
Not After : Apr 9 10:15:48 2026 GMT
Subject: CN=69a16eda-da23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:89:5e:c4:a5:be:92:f0:8b:c2:6c:ec:45:
73:42:61:50:e5:c2:85:a9:76:c7:02:84:fb:51:26:
08:89:e2:1c:fe:a6:8e:8f:fc:92:72:35:08:c7:b4:
49:e3:9e:0e:c4:f1:6f:e7:7b:f4:83:ae:4a:71:6a:
4b:b2:89:01:a5:59:29:c5:4a:ee:39:92:70:75:7c:
45:7d:9c:9b:51:84:b0:38:f5:10:8a:18:64:b4:2d:
99:ef:4d:de:77:9f:21:39:f8:50:b1:d6:91:ec:fb:
07:6a:e1:4c:4b:85:c9:e7:0f:48:67:b8:f0:5d:d8:
9a:7e:5d:55:8a:40:4e:57:fc:ae:54:cd:1d:bc:1a:
37:76:e4:a8:c8:f4:67:0e:53:4d:40:d6:df:93:90:
b2:20:5a:7c:a8:34:b9:68:7f:5e:c0:92:69:43:2d:
9c:b4:13:fb:af:21:d2:7c:0c:96:05:e8:29:da:f2:
a3:85:7a:26:ba:48:4c:75:32:43:2f:de:7b:a7:77:
9e:f0:49:c6:ef:10:e7:8f:3f:32:bc:2d:42:97:0c:
12:9b:ba:67:e3:ff:8b:37:8b:ce:1f:b0:70:39:33:
9d:26:72:86:b8:cc:cd:91:0d:b3:a7:6c:f4:08:a0:
61:9a:73:e7:1a:4d:be:e6:74:de:16:aa:6c:11:ef:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FA:3C:AF:1D:BA:65:C1:E4:46:A3:90:20:50:DA:11:26:5B:93:79
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6EA9F213C511F189B60792DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.117.0-156.254.119.255
Signature Algorithm: sha256WithRSAEncryption
09:0e:d7:c6:60:78:98:80:ea:8e:ae:ed:40:8c:f5:ad:16:82:
a0:b1:80:5c:3f:b4:01:66:63:61:91:a8:f0:db:84:25:cd:04:
bb:63:11:3a:02:32:4e:f2:ad:d0:9d:1e:20:de:5b:6c:a8:4f:
69:d4:02:06:b4:54:82:53:89:d7:ac:d0:8e:88:db:01:35:e3:
8e:6b:b3:1b:7a:5c:9a:ce:4c:1e:bc:2a:2d:2c:33:2e:24:5e:
c6:0d:51:b1:f5:87:ef:86:ad:46:15:3d:6f:ea:92:da:df:b7:
5f:6b:2b:27:0d:58:6d:8f:57:95:2f:8e:34:21:67:9e:c8:53:
74:b0:7f:97:01:e2:e0:64:e0:31:bc:19:c4:9d:75:bf:9e:a3:
81:09:e7:08:c3:a2:29:8d:70:dc:c8:5a:5c:3a:e7:bd:1b:9f:
28:54:95:49:50:0f:7f:48:7f:6e:84:93:4b:04:9b:42:27:ec:
fe:5b:7b:ce:4b:41:1e:c0:86:bb:da:1a:a7:2f:16:59:67:54:
fd:a5:0a:98:f8:20:7c:8d:65:5b:e9:dd:c0:92:09:89:6c:27:
aa:4c:ba:09:e4:aa:53:51:f7:f0:06:a1:88:41:bf:2b:3a:76:
d7:e0:3d:c0:26:8f:97:af:40:48:ea:d6:15:0e:22:53:8b:29:
be:29:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:06 2026 by rpki-client