Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5BF8CE0F0611F197102BF3DAE4EC9C.roa
File: 7A5BF8CE0F0611F197102BF3DAE4EC9C.roa (raw, json)
Hash identifier: jrAmW2degSKUzrEbTdxlGL+JN38o2miXPM6SKmgAqVE=
Subject key identifier: 80:E9:2A:19:6D:AC:C2:6C:22:4F:D5:2D:0A:09:CF:78:92:8F:22:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5BF8CE0F0611F197102BF3DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:19:52 +0000
ROA not before: Sat 21 Feb 2026 09:19:48 +0000
ROA not after: Sat 28 Mar 2026 09:19:48 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
156.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106314 (0x19f4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:19:48 2026 GMT
Not After : Mar 28 09:19:48 2026 GMT
Subject: CN=699978b8-7e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:ed:47:bd:54:88:e0:93:e6:38:27:45:32:
97:4c:98:10:1b:ab:c7:46:1c:de:0d:52:56:a5:22:
8c:41:81:87:67:5b:0d:fd:ba:35:04:5b:8f:9b:bf:
21:e2:86:0a:0f:21:3c:55:9f:37:78:f1:3e:0a:0a:
0b:a6:2e:a8:e6:15:e0:a0:06:ab:10:b0:db:f5:fe:
b4:4f:9f:6b:04:30:78:71:97:30:bb:59:a4:63:d0:
1e:fc:a9:18:71:45:97:72:4f:78:2c:52:c0:ee:ab:
82:10:a7:52:2f:e2:3b:ec:7f:3b:c6:2e:69:e2:64:
21:62:4a:85:aa:f7:97:8b:59:eb:5f:47:c4:e2:53:
a5:b8:e1:27:35:9b:33:14:e5:be:8f:3c:4b:a0:71:
ea:00:8b:b9:db:a4:5b:19:3f:44:88:6b:df:a7:f4:
f1:69:17:ab:be:28:a1:98:37:a2:e3:1a:ba:c5:70:
67:5f:46:12:fa:fc:48:2f:aa:00:26:a0:bd:6d:1e:
45:05:fd:45:d3:c6:73:04:89:ed:fa:a7:72:6d:8e:
b9:b7:f2:ea:4b:b2:44:1d:e9:8e:40:36:21:ba:41:
dc:5b:41:a6:a3:88:bd:f2:d3:3a:47:2f:7d:ce:0f:
29:cc:1a:35:8e:4f:43:33:ee:37:c7:ed:d1:ea:20:
5a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E9:2A:19:6D:AC:C2:6C:22:4F:D5:2D:0A:09:CF:78:92:8F:22:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A5BF8CE0F0611F197102BF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
32:64:cc:83:92:57:27:e9:a8:87:f1:15:d6:c5:77:0b:c9:b5:
42:25:a2:17:b1:0c:27:48:0d:da:9e:f3:25:20:7b:5a:35:de:
c8:70:b0:a4:c2:ba:2e:c7:aa:2b:90:28:c6:00:57:b9:65:bf:
25:3e:60:2c:94:e4:7f:cb:49:ce:2a:29:0d:a3:d1:3e:fb:8a:
97:5b:ca:b5:96:f6:75:bf:f3:2a:74:c6:56:61:3f:31:e1:81:
61:59:17:b5:db:67:aa:64:82:b4:bd:37:8b:36:ec:ca:ba:d4:
9a:ab:18:c4:14:9b:9c:17:1a:45:5f:2e:36:be:9f:06:02:c2:
ff:93:ad:f6:5d:5e:c3:f9:92:71:5c:2b:32:cf:55:60:6a:74:
ce:79:2e:17:b7:03:16:4c:59:e1:0e:80:48:31:19:1e:9e:9b:
4a:48:b6:6b:d8:68:c6:be:9e:71:ef:0b:f0:9c:b6:a2:ea:20:
80:d1:b5:a0:ce:4f:ed:ac:1e:e4:95:f2:16:43:9c:5f:65:60:
30:0b:6c:3a:52:e0:35:e3:db:30:83:3a:cf:2b:8c:38:de:9c:
b0:e6:cb:ec:c0:be:20:e3:c4:4a:58:7b:9a:90:5c:e4:1c:16:
b4:c3:5e:f2:af:86:fa:07:51:13:30:ec:06:3a:5c:0f:57:5c:
8c:b4:8a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:36:23 2026 by rpki-client