Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90076CBC113611F197304FE4DAE4EC9C.roa
File: 90076CBC113611F197304FE4DAE4EC9C.roa (raw, json)
Hash identifier: xvyXpHfOXA26axuABhi4drvb/LqPWxE4EWUedL4xKyI=
Subject key identifier: 3A:F8:72:0B:C5:B6:96:14:77:9F:06:FD:4B:9F:FD:88:7B:F2:9D:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A001
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90076CBC113611F197304FE4DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 04:09:07 +0000
ROA not before: Tue 24 Feb 2026 04:09:02 +0000
ROA not after: Tue 03 Mar 2026 04:09:02 +0000
asID: 149014
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 04:09:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106497 (0x1a001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 04:09:02 2026 GMT
Not After : Mar 3 04:09:02 2026 GMT
Subject: CN=699d2463-f4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:aa:7a:c7:6d:ca:55:be:99:ce:ed:92:80:8d:
bc:c9:98:5c:bb:eb:d7:ca:e0:86:19:4e:cc:fb:91:
fd:84:89:a8:ed:15:4b:8d:94:24:c8:80:26:be:db:
6f:71:2b:5b:08:25:32:9e:c6:dd:b1:10:45:49:fc:
f1:71:b2:bd:16:11:13:16:9b:91:5e:df:58:84:d9:
20:ae:a5:09:dd:73:d8:ed:4b:88:05:51:d1:d3:13:
58:27:95:bf:e9:58:50:0a:88:e2:44:bb:87:70:61:
38:a5:8e:88:1f:f2:05:dc:d1:9e:d7:2e:8b:4e:70:
89:f7:d0:58:51:9b:e4:09:87:5c:2f:47:8b:07:f4:
9f:18:20:f0:fe:f3:fb:51:e0:cf:a5:32:41:da:37:
9f:32:e9:8b:c5:f7:60:03:8d:9d:1b:7a:13:e3:e5:
c3:c5:36:50:b8:db:91:20:49:90:f1:7e:c3:a4:69:
68:c1:3e:68:f0:3d:5f:67:55:0f:32:af:52:21:7c:
e5:da:0c:37:aa:9d:d9:a2:75:95:f6:a0:c8:19:d5:
bf:3b:41:6c:fa:c9:7c:c2:75:61:1c:da:aa:e2:fe:
30:9f:e3:83:bb:7f:f8:9f:e2:e6:00:26:d0:ca:00:
07:20:d9:a6:a3:e4:1b:8e:35:12:b9:42:36:af:ed:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F8:72:0B:C5:B6:96:14:77:9F:06:FD:4B:9F:FD:88:7B:F2:9D:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90076CBC113611F197304FE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
24:e2:a8:1f:2e:57:90:16:87:0a:8e:c1:e5:94:62:b8:c2:89:
eb:1a:30:8d:e3:e9:3c:c4:61:40:60:47:9f:c3:b2:b6:8e:52:
22:60:2a:d2:85:a2:c7:cf:97:57:a9:17:ae:ae:e2:24:33:31:
5e:46:b2:41:ce:c7:9d:40:0e:3a:33:f7:66:4d:6f:35:89:dd:
e7:d5:8f:73:f9:3d:49:36:d5:e2:df:37:64:c0:35:0c:32:21:
d3:34:c8:12:b6:43:d5:9b:cf:60:ea:8a:40:16:48:81:94:36:
c5:b3:07:12:03:4e:aa:bd:ca:d3:c5:e7:47:41:74:1d:d9:55:
b6:ff:50:22:80:c9:39:f8:3b:a9:70:fd:c6:cc:23:55:c8:92:
67:a4:3c:67:14:52:9c:61:a0:e3:4f:75:9c:c6:5d:53:6c:a5:
18:e1:d7:7f:ba:a4:fe:db:89:de:c9:c6:2d:33:9d:ed:ea:93:
1e:ca:7c:b8:53:5e:87:32:d4:96:67:d7:ad:b2:4a:b2:25:e1:
f6:91:75:70:30:3d:42:1e:2f:9f:d6:1b:b4:55:d6:b8:84:66:
97:a5:c3:f4:14:57:f6:d1:9f:47:99:d2:d3:75:30:2d:bb:1f:
ac:3c:95:46:e9:a3:5e:32:4e:04:c4:f7:91:9e:cf:f7:a1:d3:
53:34:8e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:51:50 2026 by rpki-client