Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F6CB66A149211F1AE8CE67ADAE4EC9C.roa
File: 6F6CB66A149211F1AE8CE67ADAE4EC9C.roa (raw, json)
Hash identifier: 0YI6CEoQYjZPL9fpYhMsVwAn9riMCu+yJY64sPN23s8=
Subject key identifier: CB:81:7C:63:58:C3:DB:34:31:A3:38:37:35:EC:5A:1F:B0:B3:6A:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A157
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F6CB66A149211F1AE8CE67ADAE4EC9C.roa
Signing time: Sat 28 Feb 2026 10:44:19 +0000
ROA not before: Sat 28 Feb 2026 10:44:14 +0000
ROA not after: Sat 04 Apr 2026 10:44:14 +0000
asID: 138643
IP address blocks: 156.234.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106839 (0x1a157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 10:44:14 2026 GMT
Not After : Apr 4 10:44:14 2026 GMT
Subject: CN=69a2c703-9a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c7:d6:7f:ea:25:fc:73:9a:f7:98:67:b6:b8:
02:36:3d:6b:70:52:08:47:53:8a:cc:e3:05:63:ea:
aa:cc:98:de:cd:db:9c:5e:2b:b4:e6:62:3e:61:15:
8b:8f:e0:6e:f2:7e:2a:f8:3b:a5:1c:a4:2c:ea:f6:
5d:f8:df:63:93:2d:9c:26:14:b8:34:ce:7e:71:cf:
2d:cc:2f:f4:d9:27:90:47:7c:32:63:68:71:a3:01:
b7:e6:29:9a:c8:6c:ad:1b:b2:37:5d:a1:1f:16:fd:
22:1a:f1:4d:ed:b8:e3:e5:5d:ea:64:53:7e:fc:cb:
c8:db:f3:b4:c8:82:d2:90:ea:18:2a:f7:12:a3:00:
c1:f8:06:1e:09:ea:57:27:ec:8f:6e:be:ca:ab:51:
b8:59:83:4f:b5:63:b9:3e:5d:c6:08:ef:05:59:11:
a9:8e:a2:c5:ad:7c:99:93:0c:c8:13:68:ae:fd:47:
07:6a:0c:41:27:39:2d:a1:d3:b8:e1:a5:f3:dc:b3:
c9:ac:bf:4f:42:22:79:50:3e:62:d9:8a:fe:0c:c6:
a6:05:87:83:55:0e:02:10:12:d0:16:29:1e:9e:55:
2b:71:92:70:39:c3:58:4e:47:28:da:d7:70:8a:c3:
f3:fb:f4:2b:87:ad:2f:08:9d:cd:c3:37:23:63:46:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:81:7C:63:58:C3:DB:34:31:A3:38:37:35:EC:5A:1F:B0:B3:6A:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F6CB66A149211F1AE8CE67ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f1:a7:3c:00:b6:e5:6d:52:ee:d3:fb:8a:16:58:5d:39:ad:
24:57:a2:26:ca:91:bd:50:87:d1:33:ad:ab:df:24:83:14:5d:
40:fd:e7:39:d8:58:05:5a:e3:4e:ec:a9:46:0d:8a:5b:99:93:
28:77:26:a0:b4:b3:23:04:df:0d:bc:cd:c5:9b:ce:f8:cd:45:
bb:5f:9e:6b:36:71:0a:02:32:db:b7:01:ba:47:ee:f3:44:1e:
63:1f:16:00:30:3f:96:4e:fd:0c:0b:30:3d:c8:6c:6d:35:45:
fd:8f:bd:a0:47:d4:37:58:a9:16:36:11:fa:f9:18:a2:38:b5:
30:e2:c2:3b:95:48:99:76:5b:59:28:27:4c:5e:d8:40:49:03:
d3:9e:67:6d:e6:e1:d4:33:11:24:9e:10:47:71:74:cf:ad:53:
79:93:af:5c:4b:11:43:7a:b5:b2:62:30:df:be:ed:d8:d5:8f:
5a:eb:e7:40:7d:04:12:fe:97:fe:6d:9e:13:96:67:5a:3a:c7:
20:b8:82:d2:d6:ec:9d:c0:4c:70:f6:48:ba:7b:08:ed:8f:9a:
58:e8:89:85:87:69:7d:d0:ce:b4:d1:31:ca:33:d5:a2:c9:f0:
d1:cf:b3:53:43:bf:9e:2e:ee:93:86:4b:75:6a:7d:29:21:98:
d3:e3:6d:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaFXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI4MTA0NDE0WhcNMjYwNDA0MTA0NDE0WjAYMRYw
FAYDVQQDEw02OWEyYzcwMy05YTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9cfWf+ol/HOa95hntrgCNj1rcFIIR1OKzOMFY+qqzJjezducXiu05mI+
YRWLj+Bu8n4q+DulHKQs6vZd+N9jky2cJhS4NM5+cc8tzC/02SeQR3wyY2hxowG3
5imayGytG7I3XaEfFv0iGvFN7bjj5V3qZFN+/MvI2/O0yILSkOoYKvcSowDB+AYe
CepXJ+yPbr7Kq1G4WYNPtWO5Pl3GCO8FWRGpjqLFrXyZkwzIE2iu/UcHagxBJzkt
odO44aXz3LPJrL9PQiJ5UD5i2Yr+DMamBYeDVQ4CEBLQFikenlUrcZJwOcNYTkco
2tdwisPz+/Qrh60vCJ3NwzcjY0aNEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMuB
fGNYw9s0MaM4NzXsWh+ws2oEMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82RjZDQjY2QTE0OTIxMUYxQUU4Q0U2N0FEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoAMA0GCSqGSIb3DQEBCwUA
A4IBAQC08ac8ALblbVLu0/uKFlhdOa0kV6ImypG9UIfRM62r3ySDFF1A/ec52FgF
WuNO7KlGDYpbmZModyagtLMjBN8NvM3Fm874zUW7X55rNnEKAjLbtwG6R+7zRB5j
HxYAMD+WTv0MCzA9yGxtNUX9j72gR9Q3WKkWNhH6+RiiOLUw4sI7lUiZdltZKCdM
XthASQPTnmdt5uHUMxEknhBHcXTPrVN5k69cSxFDerWyYjDfvu3Y1Y9a6+dAfQQS
/pf+bZ4TlmdaOscguILS1uydwExw9ki6ewjtj5pY6ImFh2l90M600THKM9WiyfDR
z7NTQ7+eLu6Thkt1an0pIZjT423e
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:32 2026 by rpki-client