Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C9ED8E0F9A11F1B835137EDAE4EC9C.roa
File: 63C9ED8E0F9A11F1B835137EDAE4EC9C.roa (raw, json)
Hash identifier: CofI1tKBQs8B6i8Ew/QLM8vLWJSEiiYj/10xM2a0ebE=
Subject key identifier: D4:4D:53:FA:AB:A8:E3:AD:E7:57:0F:11:05:AD:12:88:9F:9D:86:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C9ED8E0F9A11F1B835137EDAE4EC9C.roa
Signing time: Sun 22 Feb 2026 02:58:40 +0000
ROA not before: Sun 22 Feb 2026 02:58:35 +0000
ROA not after: Tue 02 Mar 2027 02:58:35 +0000
asID: 140227
IP address blocks: 156.240.104.0/24 maxlen: 24
156.240.105.0/24 maxlen: 24
156.240.106.0/24 maxlen: 24
156.240.107.0/24 maxlen: 24
156.240.108.0/24 maxlen: 24
156.240.109.0/24 maxlen: 24
156.240.110.0/24 maxlen: 24
156.240.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106410 (0x19faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 22 02:58:35 2026 GMT
Not After : Mar 2 02:58:35 2027 GMT
Subject: CN=699a70e0-5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:ac:5b:a6:4d:7c:5d:e3:f0:46:ca:b3:0b:
d3:7b:64:fa:72:2a:fb:74:de:3c:d1:86:42:81:14:
06:e9:3a:0f:f7:8a:fb:49:2c:40:f8:b7:4b:ed:68:
05:df:81:fe:3f:ab:32:c7:ec:f1:61:f5:15:c7:26:
2c:22:df:ba:d2:ac:1a:7a:0f:67:21:81:75:fb:af:
1e:fc:fb:0d:16:78:fd:32:22:a2:78:73:c6:97:e1:
f4:b9:52:c0:18:d4:83:cc:4e:75:01:ef:0a:3d:07:
c6:7f:ce:22:39:a4:53:12:d0:34:2a:9f:a0:f1:e8:
be:6f:1c:39:ee:47:32:e7:a9:a6:a3:21:ed:00:92:
66:5f:1f:dd:5e:8b:25:b5:ad:ae:78:5e:69:ca:13:
e2:95:ca:1f:dd:ff:64:ef:c5:b0:df:cf:b3:e8:39:
d2:5a:ba:70:af:74:57:f3:43:91:34:44:bd:9d:49:
27:66:ad:7e:3e:17:06:14:99:10:d1:77:23:2c:65:
5c:b5:66:70:a6:ff:02:06:98:c9:1b:0c:95:3b:cf:
8a:31:67:29:e4:ad:6c:cc:c6:f0:1e:5b:bd:6b:6e:
f0:e9:7b:6c:e4:ce:43:4e:ce:8e:da:e4:1f:1e:3c:
81:2b:aa:b4:32:6a:ba:2e:5e:fc:11:b6:ee:9b:0e:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4D:53:FA:AB:A8:E3:AD:E7:57:0F:11:05:AD:12:88:9F:9D:86:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63C9ED8E0F9A11F1B835137EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.104.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:a9:ec:9e:e2:7c:86:7b:8f:9a:e2:d1:8e:bb:8c:f2:08:9a:
88:61:d3:8e:af:84:8d:47:d5:46:38:0b:e4:59:99:9b:52:54:
e7:1b:6a:5e:31:59:10:6b:2c:d3:06:25:de:02:aa:44:f9:9c:
7c:85:0c:b5:2e:14:4f:37:0d:02:fb:b6:47:21:da:60:2a:58:
a6:53:91:95:90:54:46:2c:88:a7:65:42:9b:b0:c8:46:e8:f8:
d7:b0:e1:4a:d0:a4:67:39:22:5c:cc:4e:dc:eb:96:c1:cc:05:
aa:a9:f7:67:37:3e:0d:73:99:15:53:16:83:9c:bd:17:c7:ca:
bd:06:65:64:f5:e5:52:42:0f:e9:59:5e:cc:04:f7:01:5e:e4:
ba:95:39:fc:26:0f:07:cf:79:6b:2f:cb:a5:27:50:eb:b0:dc:
59:d9:5f:42:2d:77:c6:35:59:20:cc:93:7d:ce:94:36:32:af:
a2:9f:f2:28:3c:76:dc:57:29:e1:e7:e3:dc:b3:32:a8:43:e2:
96:ba:5e:c4:db:30:1f:09:15:4d:f9:b8:50:b7:5b:93:e3:16:
f2:ff:df:42:43:c3:6b:87:f4:26:a1:94:46:70:48:6f:7d:32:
48:90:a3:79:29:39:95:39:49:2d:67:ec:72:49:f4:96:f3:71:
f9:73:28:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ+qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIyMDI1ODM1WhcNMjcwMzAyMDI1ODM1WjAYMRYw
FAYDVQQDEw02OTlhNzBlMC01ZjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzzusW6ZNfF3j8EbKswvTe2T6cir7dN480YZCgRQG6ToP94r7SSxA+LdL
7WgF34H+P6syx+zxYfUVxyYsIt+60qwaeg9nIYF1+68e/PsNFnj9MiKieHPGl+H0
uVLAGNSDzE51Ae8KPQfGf84iOaRTEtA0Kp+g8ei+bxw57kcy56mmoyHtAJJmXx/d
Xoslta2ueF5pyhPilcof3f9k78Ww38+z6DnSWrpwr3RX80ORNES9nUknZq1+PhcG
FJkQ0XcjLGVctWZwpv8CBpjJGwyVO8+KMWcp5K1szMbwHlu9a27w6Xts5M5DTs6O
2uQfHjyBK6q0Mmq6Ll78Ebbumw4yGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNRN
U/qrqOOt51cPEQWtEoifnYZjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82M0M5RUQ4RTBGOUExMUYxQjgzNTEzN0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnPBoMA0GCSqGSIb3DQEBCwUA
A4IBAQA+qeye4nyGe4+a4tGOu4zyCJqIYdOOr4SNR9VGOAvkWZmbUlTnG2peMVkQ
ayzTBiXeAqpE+Zx8hQy1LhRPNw0C+7ZHIdpgKlimU5GVkFRGLIinZUKbsMhG6PjX
sOFK0KRnOSJczE7c65bBzAWqqfdnNz4Nc5kVUxaDnL0Xx8q9BmVk9eVSQg/pWV7M
BPcBXuS6lTn8Jg8Hz3lrL8ulJ1DrsNxZ2V9CLXfGNVkgzJN9zpQ2Mq+in/IoPHbc
Vynh5+PcszKoQ+KWul7E2zAfCRVN+bhQt1uT4xby/99CQ8Nrh/QmoZRGcEhvfTJI
kKN5KTmVOUktZ+xySfSW83H5cyiH
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:56:45 2026 by rpki-client