Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C147A9CFCF511F08E644FE2DAE4EC9C.roa
File: 7C147A9CFCF511F08E644FE2DAE4EC9C.roa (raw, json)
Hash identifier: 23oREF/bASw63l5liW6epJi1k20grSry0lpxkA659B4=
Subject key identifier: CC:BB:B8:AF:7F:10:0D:6C:CE:FF:26:D6:D2:42:E5:69:78:05:48:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C147A9CFCF511F08E644FE2DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 09:32:53 +0000
ROA not before: Thu 29 Jan 2026 09:32:48 +0000
ROA not after: Wed 11 Mar 2026 09:32:48 +0000
asID: 213999
IP address blocks: 156.253.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105114 (0x19a9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 09:32:48 2026 GMT
Not After : Mar 11 09:32:48 2026 GMT
Subject: CN=697b2945-57d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:b1:a6:ac:51:0c:aa:a5:55:24:90:a9:4d:
02:8b:08:df:41:86:53:82:12:ef:94:6d:4b:47:7a:
5c:ef:6b:1f:92:6d:5a:71:ea:06:b2:31:a2:21:86:
32:4e:77:20:a1:f8:87:e5:c7:ea:1d:b5:ef:ba:2d:
7d:7a:42:d7:a2:1e:5b:f3:57:68:99:ee:eb:e3:d2:
00:b1:fe:ed:a6:24:8a:1a:11:c4:d2:4e:cf:03:bf:
aa:bf:0e:eb:1b:9d:a3:02:ae:29:53:a8:4b:7d:ba:
28:a3:23:5a:3a:a3:64:6c:bf:70:bc:45:2e:a0:40:
a6:0c:c3:28:b7:95:3e:3d:1c:f1:76:ce:1f:4c:94:
c6:b5:95:72:f3:fc:cb:9e:54:98:3f:7c:73:80:ad:
74:13:a4:22:6e:5c:e6:47:59:49:94:d4:df:ae:3d:
15:33:81:8e:1a:6b:7a:83:3e:eb:ec:85:9d:f3:8f:
0c:11:48:8c:c8:d9:9c:ac:33:8a:d0:89:65:dc:e1:
1c:a2:58:e9:89:1c:4c:9b:9b:2b:5e:6a:1f:39:ec:
fe:fd:91:1f:01:89:36:89:08:1d:62:69:12:53:bd:
a9:2c:ba:da:46:7b:27:ca:ab:e5:0d:2b:92:39:d9:
01:65:62:e4:53:54:01:14:10:6e:b9:77:cb:38:ab:
c2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BB:B8:AF:7F:10:0D:6C:CE:FF:26:D6:D2:42:E5:69:78:05:48:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C147A9CFCF511F08E644FE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:37:43:44:99:bc:20:31:d1:35:5f:63:d1:f3:ab:86:50:b3:
39:07:2c:3c:58:9c:60:0e:e5:51:59:96:00:02:21:2f:df:15:
9b:e0:5b:7f:4c:1b:35:81:df:a5:79:71:ed:e2:41:92:f9:51:
80:10:ba:0d:6f:e1:c1:a9:a2:9e:c8:0a:1e:15:ba:96:6c:f2:
69:71:36:c0:e5:44:a7:3b:80:5e:8a:1e:9e:c8:fd:7b:b3:8c:
16:a4:0c:01:5a:8e:2e:16:4d:93:60:cc:27:41:c9:09:44:f0:
05:c1:2f:ed:fc:92:27:ae:22:9e:76:92:2b:8d:ca:ba:b7:44:
f7:a5:0f:da:cd:a1:2c:1d:4d:25:60:b9:c3:54:e4:2f:50:ef:
dc:9a:2f:b1:6f:51:42:52:3e:e5:cc:9c:83:fc:a6:ca:e0:a6:
e9:98:88:d3:5b:27:72:be:13:c5:d0:7f:d9:bf:6e:a2:74:58:
c4:0f:1a:87:7c:05:36:40:9d:d0:96:7d:83:1c:22:b4:10:f7:
d1:95:e1:d9:8c:f8:08:1f:5e:fe:24:6b:70:6a:4d:8c:e9:e1:
a5:97:d0:11:43:69:7c:0a:1e:c3:f2:fe:54:2a:4c:b4:34:6c:
a4:47:78:36:1e:af:48:b3:0b:4b:cd:25:7a:e4:97:8d:95:09:
23:46:00:26
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZqaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI5MDkzMjQ4WhcNMjYwMzExMDkzMjQ4WjAYMRYw
FAYDVQQDEw02OTdiMjk0NS01N2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzfyxpqxRDKqlVSSQqU0CiwjfQYZTghLvlG1LR3pc72sfkm1aceoGsjGi
IYYyTncgofiH5cfqHbXvui19ekLXoh5b81dome7r49IAsf7tpiSKGhHE0k7PA7+q
vw7rG52jAq4pU6hLfboooyNaOqNkbL9wvEUuoECmDMMot5U+PRzxds4fTJTGtZVy
8/zLnlSYP3xzgK10E6QiblzmR1lJlNTfrj0VM4GOGmt6gz7r7IWd848MEUiMyNmc
rDOK0Ill3OEcoljpiRxMm5srXmofOez+/ZEfAYk2iQgdYmkSU72pLLraRnsnyqvl
DSuSOdkBZWLkU1QBFBBuuXfLOKvC+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMy7
uK9/EA1szv8m1tJC5Wl4BUhFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83QzE0N0E5Q0ZDRjUxMUYwOEU2NDRGRTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP0BMA0GCSqGSIb3DQEBCwUA
A4IBAQCkN0NEmbwgMdE1X2PR86uGULM5Byw8WJxgDuVRWZYAAiEv3xWb4Ft/TBs1
gd+leXHt4kGS+VGAELoNb+HBqaKeyAoeFbqWbPJpcTbA5USnO4Beih6eyP17s4wW
pAwBWo4uFk2TYMwnQckJRPAFwS/t/JInriKedpIrjcq6t0T3pQ/azaEsHU0lYLnD
VOQvUO/cmi+xb1FCUj7lzJyD/KbK4KbpmIjTWydyvhPF0H/Zv26idFjEDxqHfAU2
QJ3Qln2DHCK0EPfRleHZjPgIH17+JGtwak2M6eGll9ARQ2l8Ch7D8v5UKky0NGyk
R3g2Hq9IswtLzSV65JeNlQkjRgAm
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:09 2026 by rpki-client