Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD52C32058211F1B763CDF1DAE4EC9C.roa
File: 8DD52C32058211F1B763CDF1DAE4EC9C.roa (raw, json)
Hash identifier: WH84kpsIsjGhRvbBSIikte07vyYNoQZHTeR9kcMkNqE=
Subject key identifier: 04:D2:4F:0C:9B:8D:3D:A4:9E:F1:47:8C:F1:6A:A4:BE:50:D3:10:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD52C32058211F1B763CDF1DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 06:42:51 +0000
ROA not before: Mon 09 Feb 2026 06:42:47 +0000
ROA not after: Tue 10 Mar 2026 06:42:47 +0000
asID: 401696
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105561 (0x19c59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 9 06:42:47 2026 GMT
Not After : Mar 10 06:42:47 2026 GMT
Subject: CN=698981eb-c2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:ee:1e:2c:81:2a:02:82:d4:89:39:b3:2a:
3d:f9:18:65:aa:87:e1:9b:1a:7b:9c:ad:a0:9e:06:
71:7e:c9:81:29:d2:b0:aa:e3:a2:d5:09:a0:64:af:
fe:fe:84:5a:66:82:af:0d:fc:d6:30:90:bd:97:32:
ab:27:b4:8c:a7:b7:c3:6a:7a:6f:5f:d9:59:35:c7:
a3:ad:3c:d8:29:af:07:73:cf:6d:2a:03:9b:02:80:
7d:d9:ed:b1:eb:9b:f9:83:10:ca:07:1c:07:26:f1:
03:c3:20:71:7a:e6:09:b4:6e:50:aa:b2:e7:fa:76:
fa:7c:91:f7:12:d8:bd:65:66:af:a8:02:37:73:6c:
11:8e:9b:cd:df:39:08:5f:c0:83:87:fb:30:cc:87:
26:e2:5a:a2:91:95:48:26:b4:2e:bb:68:cb:d2:84:
61:75:2c:a2:88:e7:5a:96:fe:98:2c:38:4e:46:eb:
35:50:4c:f5:2e:ab:79:fb:e3:6e:6d:8a:10:57:13:
51:0d:bc:45:ad:a9:93:c3:62:bf:3e:1a:c9:db:c4:
65:83:46:d7:af:8f:05:23:15:eb:93:1a:5d:66:50:
e4:8b:10:8d:8b:e0:9d:56:dc:44:03:c5:80:6a:8c:
57:83:0b:5a:82:5a:61:5d:32:32:eb:18:96:93:64:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D2:4F:0C:9B:8D:3D:A4:9E:F1:47:8C:F1:6A:A4:BE:50:D3:10:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DD52C32058211F1B763CDF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:3c:95:ac:88:30:22:0a:cb:90:bb:80:00:a8:6f:a1:bc:57:
5e:5e:a0:54:41:e5:07:07:3c:e9:92:b8:7a:76:a6:3a:54:4d:
a8:de:cd:db:f7:1e:54:45:78:58:29:2e:2c:ca:4c:ad:c5:d0:
05:19:76:fc:9c:6f:e2:42:9e:59:57:0b:e4:63:c7:cf:85:96:
74:e3:cb:ad:6a:62:24:97:93:57:e8:32:d1:fa:d7:3f:d6:af:
f6:fe:f3:2b:b8:6a:96:a8:21:d5:05:19:86:0c:85:46:6e:de:
48:da:60:57:83:f1:2e:29:6a:c6:56:e0:6e:af:bc:51:17:7f:
a7:93:13:02:9d:e4:eb:f0:17:f8:49:d2:eb:94:f9:4c:19:ba:
c0:90:b0:7b:dc:25:24:ae:d5:03:7c:ee:c4:6d:03:89:0b:11:
bc:c7:6f:1e:1a:24:09:b0:66:57:82:85:80:c7:4f:b0:b3:e9:
9b:7e:1e:f5:fc:65:c1:d2:60:18:e2:99:71:df:01:34:bc:d1:
2b:e5:45:f2:72:69:86:d7:df:16:ed:25:5f:89:9a:01:8d:fe:
10:58:74:2c:c7:a1:43:ad:34:2b:d0:43:69:4f:de:52:55:84:
13:ad:26:92:74:ea:31:03:d2:db:da:c6:03:c2:1c:61:39:06:
b8:90:cd:02
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZxZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA5MDY0MjQ3WhcNMjYwMzEwMDY0MjQ3WjAYMRYw
FAYDVQQDEw02OTg5ODFlYi1jMmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmvuHiyBKgKC1Ik5syo9+Rhlqofhmxp7nK2gngZxfsmBKdKwquOi1Qmg
ZK/+/oRaZoKvDfzWMJC9lzKrJ7SMp7fDanpvX9lZNcejrTzYKa8Hc89tKgObAoB9
2e2x65v5gxDKBxwHJvEDwyBxeuYJtG5QqrLn+nb6fJH3Eti9ZWavqAI3c2wRjpvN
3zkIX8CDh/swzIcm4lqikZVIJrQuu2jL0oRhdSyiiOdalv6YLDhORus1UEz1Lqt5
++NubYoQVxNRDbxFramTw2K/PhrJ28Rlg0bXr48FIxXrkxpdZlDkixCNi+CdVtxE
A8WAaoxXgwtaglphXTIy6xiWk2Sq6wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFATS
TwybjT2knvFHjPFqpL5Q0xDoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84REQ1MkMzMjA1ODIxMUYxQjc2M0NERjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQA9PJWsiDAiCsuQu4AAqG+hvFdeXqBUQeUHBzzpkrh6dqY6VE2o3s3b9x5U
RXhYKS4sykytxdAFGXb8nG/iQp5ZVwvkY8fPhZZ048utamIkl5NX6DLR+tc/1q/2
/vMruGqWqCHVBRmGDIVGbt5I2mBXg/EuKWrGVuBur7xRF3+nkxMCneTr8Bf4SdLr
lPlMGbrAkLB73CUkrtUDfO7EbQOJCxG8x28eGiQJsGZXgoWAx0+ws+mbfh71/GXB
0mAY4plx3wE0vNEr5UXycmmG198W7SVfiZoBjf4QWHQsx6FDrTQr0ENpT95SVYQT
rSaSdOoxA9Lb2sYDwhxhOQa4kM0C
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:02 2026 by rpki-client