Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A56F53E0E2E11F19F370FC3DAE4EC9C.roa
File: 5A56F53E0E2E11F19F370FC3DAE4EC9C.roa (raw, json)
Hash identifier: +SVs2CmnV8W6ekUBm22UpLIu393BheAoBCSO2BO2xzQ=
Subject key identifier: AC:F2:8A:9C:A9:F6:2B:66:B3:5D:65:72:FA:9D:E0:DC:04:A1:44:DA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019ED2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A56F53E0E2E11F19F370FC3DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 07:32:50 +0000
ROA not before: Fri 20 Feb 2026 07:32:35 +0000
ROA not after: Thu 19 Mar 2026 07:32:35 +0000
asID: 11404
IP address blocks: 156.226.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106194 (0x19ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 07:32:35 2026 GMT
Not After : Mar 19 07:32:35 2026 GMT
Subject: CN=69980e22-9320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:00:69:1c:e6:a5:26:92:1f:27:3f:12:e6:87:
5b:ec:79:12:1b:b8:b6:ab:ea:9c:2e:7c:18:e4:4e:
36:3f:5c:c5:51:d0:24:ca:8b:0d:d2:ff:5e:11:32:
fa:8d:31:30:9d:82:be:8f:39:fa:e3:67:a1:ef:84:
4d:d3:47:ab:f9:4b:5c:43:61:23:24:e1:b5:80:f9:
69:ec:c6:93:81:78:b1:d6:ed:39:d8:24:71:50:43:
d2:62:a5:70:7b:dc:92:4c:ca:5f:3f:61:e4:00:1a:
c4:d8:20:fb:27:08:77:ee:a2:d1:e2:f2:61:4c:56:
49:79:17:4d:93:3d:ba:b5:ab:f4:51:c9:6c:45:5c:
5a:64:7a:d8:ce:7c:db:0b:39:55:1e:b3:48:e9:b2:
f5:dc:91:c4:80:8c:01:16:fc:1e:11:fb:60:03:b5:
ae:eb:e9:26:ac:51:20:3e:b3:58:af:7a:06:85:2a:
6c:29:19:a1:d6:28:43:7f:d3:f9:fb:73:be:01:2c:
94:c0:fd:5d:10:44:c8:6f:46:e5:5c:be:64:bf:df:
b2:69:94:f1:60:7c:f1:f1:f0:87:dd:fb:7b:eb:c4:
98:6f:9d:5d:ba:62:74:3d:70:18:1d:6d:d0:68:b9:
79:0d:ff:23:6f:24:5c:d0:dd:35:19:db:41:91:48:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:8A:9C:A9:F6:2B:66:B3:5D:65:72:FA:9D:E0:DC:04:A1:44:DA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A56F53E0E2E11F19F370FC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.144.0/20
Signature Algorithm: sha256WithRSAEncryption
83:fd:29:dd:de:45:03:49:c3:67:d7:05:7c:35:c4:d2:e6:90:
7f:76:ea:87:ab:5b:0a:ef:a4:36:f2:b9:7f:a5:7a:b3:e1:ed:
35:e4:a2:9f:84:ff:72:e3:26:79:c9:6a:69:a3:a0:cb:ac:4c:
fa:2b:fd:98:ed:e3:72:8b:68:dc:2a:4e:8e:ec:c1:9c:e8:9f:
f2:76:78:dd:8f:20:76:42:5b:f5:73:09:a4:94:9e:06:aa:5f:
a1:a0:e8:6a:9d:54:57:a5:72:eb:28:1f:72:28:ab:24:ac:bc:
1d:bf:6a:63:a9:ee:68:db:c2:8c:eb:a1:6a:3d:67:14:d2:3c:
c3:89:fb:0d:da:1b:b5:e8:5b:0f:a9:fe:c4:30:ec:ee:2c:b9:
21:f5:76:38:3d:60:88:23:d4:18:0c:88:4a:b5:00:75:6c:4b:
18:2e:a8:1e:5b:85:a1:58:11:d0:b2:57:16:25:d9:9f:19:94:
80:5f:28:7d:f1:f1:2c:76:d2:3f:c1:4d:e5:3d:97:6c:37:93:
6b:1c:15:8d:51:cb:04:c5:76:46:08:2a:b5:43:fd:00:cc:7b:
51:e1:78:cd:51:07:27:1a:f8:ed:c1:30:20:a4:45:bc:41:4e:
ae:49:87:74:d2:f6:6b:7c:63:c7:a9:ca:c6:00:89:8f:91:d4:
0a:19:f7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:54 2026 by rpki-client