Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C758826108C11F1BFBD08CEDAE4EC9C.roa
File: 4C758826108C11F1BFBD08CEDAE4EC9C.roa (raw, json)
Hash identifier: j0k6ZO57KhGOKaF5xmuurZ8AcrBkW8EIWVKcHxHUpIk=
Subject key identifier: 03:5D:42:06:0F:89:AA:FE:3C:FA:E7:EF:FE:1A:11:73:B6:AF:A0:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C758826108C11F1BFBD08CEDAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:50:19 +0000
ROA not before: Mon 23 Feb 2026 07:50:13 +0000
ROA not after: Tue 10 Mar 2026 07:50:13 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106462 (0x19fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:50:13 2026 GMT
Not After : Mar 10 07:50:13 2026 GMT
Subject: CN=699c06bb-dc90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:3d:ff:e2:c8:81:4d:94:d5:4e:5b:7c:22:
d9:96:78:32:0a:1c:6d:10:ee:62:22:22:eb:9f:69:
81:0b:6f:ab:c2:e7:0a:73:2c:dc:2f:57:6c:88:8a:
99:d2:7f:97:e9:fd:4a:f7:d4:18:a0:01:bd:21:4d:
52:81:ee:d6:fc:a4:a5:46:68:24:3a:e7:95:17:33:
f5:ba:df:b7:dd:1a:29:c3:63:6d:5d:58:93:62:87:
75:c8:86:91:bd:85:47:fa:ee:0f:ec:84:c6:2a:72:
eb:ff:f1:6b:78:0e:29:67:f1:31:b3:77:f1:28:2b:
5f:9c:7a:b0:1e:22:6d:6a:1e:65:9d:b4:75:5c:cb:
2f:95:3f:de:dc:0c:fa:a7:9f:24:a6:fa:11:da:1c:
05:6c:25:be:02:8e:9d:ab:cb:5a:41:e1:29:73:06:
95:a2:60:53:c2:37:8c:44:e0:95:a7:4c:ae:11:4b:
02:42:20:fb:bf:1e:a0:87:71:37:4c:56:58:67:4c:
a2:61:2d:11:c7:91:f0:00:a4:89:71:82:bf:27:52:
9e:b3:ec:73:08:49:50:60:d3:35:6a:01:0a:e4:65:
f8:87:96:c3:a0:51:b8:65:69:c2:d3:02:ab:ad:78:
85:0e:87:96:cc:08:13:75:31:cc:0b:1f:24:f8:bf:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:42:06:0F:89:AA:FE:3C:FA:E7:EF:FE:1A:11:73:B6:AF:A0:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C758826108C11F1BFBD08CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
21:bc:e7:57:fc:bf:2d:9c:aa:0c:51:63:14:e9:35:16:49:3a:
18:14:53:17:7f:82:b8:20:a3:3b:d9:35:b4:7d:15:4b:76:5f:
b7:7b:e5:aa:3b:8b:5c:94:1f:96:9a:26:92:57:19:4f:2f:0e:
24:0c:b5:bd:02:39:2b:c6:b8:14:e8:da:94:f0:02:1a:1b:ec:
cc:ee:98:60:7a:40:0c:e5:61:59:e8:1a:af:9f:ca:01:59:7d:
15:f5:cf:98:e5:67:58:a9:88:4b:c9:d9:3e:08:64:b5:04:01:
a5:88:17:b3:f2:03:ed:70:cd:23:30:9d:9e:4f:3f:01:f4:cd:
01:e2:a2:9c:d3:e5:84:70:b9:e4:3a:80:52:ca:87:12:0a:da:
b6:d2:99:50:5c:a9:cd:f7:57:ee:36:11:89:9e:52:fa:98:a2:
5d:28:27:35:60:92:19:d3:f7:13:0e:1d:7e:c8:57:c3:1b:8d:
40:7e:41:1f:71:79:b0:37:53:31:48:c0:c9:a9:c6:48:8c:b0:
76:1b:f4:0c:76:4c:53:83:e6:d9:88:30:7a:cd:10:00:30:e7:
5e:e8:7f:30:eb:7d:fd:ce:b2:b1:f4:d4:17:24:99:3f:d5:f4:
94:52:9b:26:51:fe:59:ce:f2:57:08:f4:30:ce:2f:54:29:91:
14:6c:7e:3c
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZ/eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIzMDc1MDEzWhcNMjYwMzEwMDc1MDEzWjAYMRYw
FAYDVQQDEw02OTljMDZiYi1kYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0Ag9/+LIgU2U1U5bfCLZlngyChxtEO5iIiLrn2mBC2+rwucKcyzcL1ds
iIqZ0n+X6f1K99QYoAG9IU1Sge7W/KSlRmgkOueVFzP1ut+33Ropw2NtXViTYod1
yIaRvYVH+u4P7ITGKnLr//FreA4pZ/Exs3fxKCtfnHqwHiJtah5lnbR1XMsvlT/e
3Az6p58kpvoR2hwFbCW+Ao6dq8taQeEpcwaVomBTwjeMROCVp0yuEUsCQiD7vx6g
h3E3TFZYZ0yiYS0Rx5HwAKSJcYK/J1Kes+xzCElQYNM1agEK5GX4h5bDoFG4ZWnC
0wKrrXiFDoeWzAgTdTHMCx8k+L85oQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFANd
QgYPiar+PPrn7/4aEXO2r6AjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80Qzc1ODgyNjEwOEMxMUYxQkZCRDA4Q0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc/iADBAWc/kAwDQYJKoZI
hvcNAQELBQADggEBACG851f8vy2cqgxRYxTpNRZJOhgUUxd/grggozvZNbR9FUt2
X7d75ao7i1yUH5aaJpJXGU8vDiQMtb0COSvGuBTo2pTwAhob7MzumGB6QAzlYVno
Gq+fygFZfRX1z5jlZ1ipiEvJ2T4IZLUEAaWIF7PyA+1wzSMwnZ5PPwH0zQHiopzT
5YRwueQ6gFLKhxIK2rbSmVBcqc33V+42EYmeUvqYol0oJzVgkhnT9xMOHX7IV8Mb
jUB+QR9xebA3UzFIwMmpxkiMsHYb9Ax2TFOD5tmIMHrNEAAw517ofzDrff3OsrH0
1BckmT/V9JRSmyZR/lnO8lcI9DDOL1QpkRRsfjw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:40:11 2026 by rpki-client