Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868D72A20B1011F183057D94DAE4EC9C.roa
File: 868D72A20B1011F183057D94DAE4EC9C.roa (raw, json)
Hash identifier: mgU8UQ/o+0lJ9fH8J2iXO7p3rkOkscXNdHC4peLLY50=
Subject key identifier: 6F:F3:07:C8:5D:1C:F9:DE:55:20:18:C4:46:32:D6:37:E8:56:82:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868D72A20B1011F183057D94DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 08:21:43 +0000
ROA not before: Mon 16 Feb 2026 08:21:38 +0000
ROA not after: Fri 20 Mar 2026 08:21:38 +0000
asID: 139923
IP address blocks: 156.254.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106020 (0x19e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 08:21:38 2026 GMT
Not After : Mar 20 08:21:38 2026 GMT
Subject: CN=6992d397-fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:69:f4:e8:5a:19:e0:cd:04:56:6e:23:5c:
f0:25:61:d9:41:f5:1c:a8:46:10:16:cc:5e:b3:c9:
3f:13:5e:de:c2:10:38:86:3d:27:d7:95:cd:ff:72:
a9:a5:08:27:c7:8b:a7:fb:a4:f9:0f:1a:e0:09:33:
46:24:d1:2b:cd:5c:13:26:cf:ef:cb:a2:d5:60:e1:
b7:f9:c9:ed:b5:92:0c:49:27:21:ed:b9:a7:48:9b:
1c:3c:d3:34:25:af:a1:4a:52:f3:af:0f:c8:ad:e1:
a4:97:c1:dc:af:00:6a:55:7c:7b:03:47:0b:79:ad:
b5:3d:e5:f1:78:51:05:4d:3d:88:4d:f0:bb:e0:ff:
fb:ed:79:25:dc:bb:0e:05:a8:08:ee:27:09:10:fd:
75:11:2d:4c:06:8f:29:7a:40:bc:22:49:42:a0:ef:
c0:ed:d3:9d:61:ea:42:43:22:8d:87:af:89:18:c6:
b6:22:de:80:46:a8:36:2b:6c:c2:a7:37:c1:39:59:
f2:09:3b:47:ad:80:0d:cb:2a:5f:22:d7:9c:fd:9b:
b6:a2:aa:06:34:a9:4f:83:c1:59:1f:b5:b9:10:a7:
24:14:9c:69:9d:32:89:41:1a:3c:02:07:ed:1a:b4:
54:f3:14:ab:4b:49:7f:ed:37:5c:58:1b:7e:5c:b6:
10:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F3:07:C8:5D:1C:F9:DE:55:20:18:C4:46:32:D6:37:E8:56:82:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/868D72A20B1011F183057D94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:20:d8:f7:ba:c4:78:11:ad:b2:73:98:e3:be:f1:00:2b:63:
7f:12:b3:30:9d:23:a0:67:86:1e:b2:04:7c:28:b5:0d:91:22:
01:e6:db:ca:5c:64:71:d8:20:4a:c3:04:17:cb:22:6c:93:d8:
ca:dd:19:b2:2a:02:57:85:97:60:5d:bb:16:d3:fb:6f:d4:2f:
38:95:aa:ad:73:1d:48:60:18:79:d5:eb:8c:26:b3:7e:f8:1d:
20:c2:53:be:dd:0b:7a:fe:9a:7c:c2:bf:49:ba:79:bf:0f:7f:
64:a4:56:57:33:31:24:5b:9c:17:b1:07:07:ec:0f:83:aa:0a:
04:8f:49:42:a7:64:8d:ec:d6:bc:fb:54:d2:2d:36:66:e6:f2:
ae:0c:08:5f:22:8f:36:ff:23:13:fe:16:3d:97:37:0f:e0:90:
e6:57:6c:67:2b:90:4d:93:6b:97:ba:f8:47:9f:31:41:bc:43:
91:2b:c9:9b:9b:6c:14:fc:82:96:e2:01:48:6c:df:5d:45:5e:
c7:47:1d:58:c5:c6:79:4e:5c:87:aa:aa:72:c7:ff:69:96:d8:
ea:98:0f:69:9d:5d:c0:9c:9d:bf:51:ac:8f:1c:e9:6a:1d:0e:
3d:89:43:14:d5:e2:da:6d:71:df:31:92:47:8b:3b:76:ba:44:
6f:88:8c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:57:26 2026 by rpki-client