Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8774FA1E108811F1A7A1A5B5DAE4EC9C.roa
File: 8774FA1E108811F1A7A1A5B5DAE4EC9C.roa (raw, json)
Hash identifier: HnItxqTx/+nZIQ2wXXA7JuOs9/hcTh5RreQm2KnVCwc=
Subject key identifier: 13:DD:45:DD:72:6B:19:85:01:CB:A7:C9:D2:2D:A9:63:01:63:24:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8774FA1E108811F1A7A1A5B5DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:23:20 +0000
ROA not before: Mon 23 Feb 2026 07:23:16 +0000
ROA not after: Mon 30 Mar 2026 07:23:16 +0000
asID: 154321
IP address blocks: 156.245.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106445 (0x19fcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:23:16 2026 GMT
Not After : Mar 30 07:23:16 2026 GMT
Subject: CN=699c0068-80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:9d:62:98:70:0a:cc:29:25:4b:2d:c4:95:
79:24:32:7c:aa:03:70:ba:b6:f8:4b:6b:d7:39:b2:
9b:c9:9c:55:18:c2:8f:66:b3:dd:6d:35:12:b8:2b:
c8:fa:ad:e8:57:e3:4b:f3:b9:99:3a:8b:d5:9c:e9:
cb:f8:c3:aa:25:ce:41:bb:ff:c3:39:9e:1d:c7:55:
c3:1d:ea:4a:9a:42:8d:b7:ec:38:f6:0c:a1:ee:3d:
85:df:4a:12:e0:35:f0:13:31:78:d6:3f:3f:06:a3:
33:e0:23:9a:1c:4d:83:2b:fb:5c:c6:d7:c0:23:8f:
b7:4b:c8:04:54:56:23:b8:53:98:23:b6:80:1e:60:
6b:f7:8d:ae:9d:8d:2e:b9:b9:aa:b1:ec:d9:90:b0:
f8:30:e9:21:0a:7d:13:0f:7f:ce:e0:e9:a3:d8:cb:
f8:93:2d:22:03:61:f2:c1:69:47:39:a6:51:3b:7e:
53:40:75:f1:c7:e3:4c:19:1c:e0:f8:1f:05:1f:e2:
73:fc:d3:3e:53:47:28:86:e7:a9:7a:7f:62:ff:c3:
f1:dd:0e:07:88:da:2b:55:d5:e7:dc:ab:5d:08:11:
1f:e8:2d:0d:6f:f1:cf:99:d4:65:a2:19:c4:fa:8f:
9b:68:7b:e6:23:81:7f:88:eb:d4:f3:f4:7a:9b:a5:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:45:DD:72:6B:19:85:01:CB:A7:C9:D2:2D:A9:63:01:63:24:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8774FA1E108811F1A7A1A5B5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:53:93:df:48:92:a9:0a:14:d6:d3:63:c8:f5:3a:e4:a3:02:
e4:e1:ff:24:54:12:9a:88:ff:a4:5f:8e:3a:af:5e:1a:aa:5b:
0e:0d:14:59:20:0e:3c:c3:21:cb:82:b4:e0:96:82:a7:ed:8d:
7f:39:43:06:0f:d7:08:21:d3:8c:3d:7d:a1:f2:67:ec:12:75:
8f:29:d2:cf:bc:d8:36:b4:77:c1:30:85:14:da:63:75:7e:35:
7c:64:44:49:cc:5c:e8:d0:46:ba:af:ea:79:98:33:7b:4c:c2:
09:d9:7a:98:10:b6:72:d3:7b:61:ff:25:4d:d6:bd:78:6e:14:
18:bf:50:17:af:4e:42:e4:a4:3b:2b:da:f6:58:38:33:49:ad:
cf:85:d1:be:d4:93:d7:b8:24:57:af:1f:13:ab:25:1a:a1:3d:
8e:e7:5f:34:66:23:63:a4:19:71:72:f3:b2:2b:4b:1b:18:5c:
2c:69:6c:d4:60:38:59:e6:13:ba:80:bb:e6:17:4a:99:3b:bc:
bf:70:90:1a:98:88:69:e8:f6:2a:f1:1c:44:f2:e1:6b:9e:c2:
57:d5:bf:f7:27:87:d4:20:36:60:69:04:d8:93:00:2a:9f:4c:
26:ec:c9:63:0b:c7:f8:49:90:d3:28:0e:e7:74:d8:5c:e3:a1:
13:9d:84:f5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ/NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIzMDcyMzE2WhcNMjYwMzMwMDcyMzE2WjAYMRYw
FAYDVQQDEw02OTljMDA2OC04MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsNydYphwCswpJUstxJV5JDJ8qgNwurb4S2vXObKbyZxVGMKPZrPdbTUS
uCvI+q3oV+NL87mZOovVnOnL+MOqJc5Bu//DOZ4dx1XDHepKmkKNt+w49gyh7j2F
30oS4DXwEzF41j8/BqMz4COaHE2DK/tcxtfAI4+3S8gEVFYjuFOYI7aAHmBr942u
nY0uubmqsezZkLD4MOkhCn0TD3/O4Omj2Mv4ky0iA2HywWlHOaZRO35TQHXxx+NM
GRzg+B8FH+Jz/NM+U0cohuepen9i/8Px3Q4HiNorVdXn3KtdCBEf6C0Nb/HPmdRl
ohnE+o+baHvmI4F/iOvU8/R6m6VdPQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBPd
Rd1yaxmFAcunydItqWMBYyQ7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84Nzc0RkExRTEwODgxMUYxQTdBMUE1QjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQCdU5PfSJKpChTW02PI9TrkowLk4f8kVBKaiP+kX446r14aqlsODRRZIA48
wyHLgrTgloKn7Y1/OUMGD9cIIdOMPX2h8mfsEnWPKdLPvNg2tHfBMIUU2mN1fjV8
ZERJzFzo0Ea6r+p5mDN7TMIJ2XqYELZy03th/yVN1r14bhQYv1AXr05C5KQ7K9r2
WDgzSa3PhdG+1JPXuCRXrx8TqyUaoT2O5180ZiNjpBlxcvOyK0sbGFwsaWzUYDhZ
5hO6gLvmF0qZO7y/cJAamIhp6PYq8RxE8uFrnsJX1b/3J4fUIDZgaQTYkwAqn0wm
7MljC8f4SZDTKA7ndNhc46ETnYT1
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:33 2026 by rpki-client