Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9069D492135711F1ABE959E2DAE4EC9C.roa
File: 9069D492135711F1ABE959E2DAE4EC9C.roa (raw, json)
Hash identifier: 4Udd6CMrcktHiQyGHM9M+4IszQkuobnC7Pb+AfGPeOM=
Subject key identifier: F7:39:7B:26:22:5C:A4:3B:CE:66:A7:46:E0:7D:39:A3:3F:3B:02:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9069D492135711F1ABE959E2DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 21:10:23 +0000
ROA not before: Thu 26 Feb 2026 21:10:19 +0000
ROA not after: Mon 30 Mar 2026 21:10:19 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.249.187.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106735 (0x1a0ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 21:10:19 2026 GMT
Not After : Mar 30 21:10:19 2026 GMT
Subject: CN=69a0b6bf-f392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:ff:e6:a7:f7:54:f0:29:0c:78:89:ee:40:
7e:e0:44:0e:be:de:33:e5:e7:1c:f4:c5:b9:c2:56:
cb:a1:34:54:71:03:82:14:5b:b2:f9:db:1d:64:40:
4d:44:a4:00:b5:75:24:ae:89:d2:fb:a0:e6:a5:ea:
af:78:f5:f2:eb:5a:84:99:3f:44:52:7b:d4:80:29:
83:6b:df:e8:88:e0:88:30:7f:da:da:1a:d6:18:5a:
85:bf:78:11:71:6d:eb:5f:91:ae:61:99:9a:0a:eb:
6e:a7:63:da:e8:8d:f4:b8:d8:74:28:91:eb:c2:1f:
7b:7e:7b:15:5a:c4:1c:8b:35:e7:7c:f2:f1:8e:cc:
04:07:7d:3c:7d:14:87:7c:f3:3d:96:d0:f2:72:52:
b1:3e:06:f0:01:43:9d:a3:57:6e:0c:06:9c:29:6c:
65:af:54:e6:82:1b:fc:d2:99:f8:fa:d5:e5:2d:b3:
83:c7:4f:d1:0c:a9:df:2e:dc:92:56:ca:4b:4c:67:
86:35:0c:23:76:96:3d:af:98:6c:f3:5a:fa:3c:df:
17:18:15:26:a5:41:b3:87:3f:0a:64:91:48:39:f3:
ba:7e:a7:8b:ec:19:9e:f5:96:b8:0a:a0:7d:3d:77:
a5:c2:8b:ae:c4:66:f2:ad:f9:74:5e:20:33:fb:5d:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:39:7B:26:22:5C:A4:3B:CE:66:A7:46:E0:7D:39:A3:3F:3B:02:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9069D492135711F1ABE959E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0/23
156.233.66.0/24
156.249.187.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a2:ec:3c:15:c6:fb:4e:4b:4c:b8:08:d7:51:ad:09:3d:75:
b0:fa:58:77:66:ec:34:fb:69:95:a6:18:ff:76:f6:0a:74:c8:
2a:02:2d:48:e1:77:6a:ae:dd:71:5a:66:d1:f8:fe:d6:4c:dd:
fc:8d:34:61:6b:da:bc:da:ca:81:86:21:68:4b:c4:7e:ea:a8:
c2:2e:2b:f6:2e:09:8b:a9:d2:6a:5f:95:6f:4d:46:ef:17:7f:
c1:04:5e:ba:62:75:4e:48:ac:c9:89:64:5c:b4:67:10:af:52:
2f:ef:9f:56:89:b9:10:3e:98:81:08:ef:c6:9b:ad:f4:3b:07:
03:b9:6d:e0:5d:02:97:e2:48:22:87:59:fa:17:55:a8:fe:08:
2b:a4:2d:bb:1b:ad:9c:0a:6f:2a:2e:b8:8e:f9:04:d9:67:f9:
09:a5:9c:d8:6d:f5:17:fe:92:24:9b:2b:27:8b:39:dd:b5:d3:
07:7e:33:64:ba:cd:c2:53:27:99:c0:01:75:eb:2e:35:29:00:
e0:c7:14:4a:ad:47:19:ed:3e:bc:aa:db:49:35:fd:b5:f7:88:
2c:85:f8:12:eb:d8:da:ce:11:71:58:1a:bf:29:94:a7:14:07:
b1:81:eb:9c:97:89:fa:04:33:38:5f:4e:48:c5:22:45:20:67:
d7:f7:cc:28
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIDAaDvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI2MjExMDE5WhcNMjYwMzMwMjExMDE5WjAYMRYw
FAYDVQQDEw02OWEwYjZiZi1mMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApk//5qf3VPApDHiJ7kB+4EQOvt4z5ecc9MW5wlbLoTRUcQOCFFuy+dsd
ZEBNRKQAtXUkronS+6DmpeqvePXy61qEmT9EUnvUgCmDa9/oiOCIMH/a2hrWGFqF
v3gRcW3rX5GuYZmaCutup2Pa6I30uNh0KJHrwh97fnsVWsQcizXnfPLxjswEB308
fRSHfPM9ltDyclKxPgbwAUOdo1duDAacKWxlr1Tmghv80pn4+tXlLbODx0/RDKnf
LtySVspLTGeGNQwjdpY9r5hs81r6PN8XGBUmpUGzhz8KZJFIOfO6fqeL7Bme9Za4
CqB9PXelwouuxGbyrfl0XiAz+11Y4wIDAQABo4IC1DCCAtAwHQYDVR0OBBYEFPc5
eyYiXKQ7zmanRuB9OaM/OwJTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MDY5RDQ5MjEzNTcxMUYxQUJFOTU5RTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAnOOEAwQAnOOIMAwDBACc44sD
BACc44wDBACc458DBAGc5wQDBACc6UIDBACc+bsDBACc/bswDQYJKoZIhvcNAQEL
BQADggEBABai7DwVxvtOS0y4CNdRrQk9dbD6WHdm7DT7aZWmGP929gp0yCoCLUjh
d2qu3XFaZtH4/tZM3fyNNGFr2rzayoGGIWhLxH7qqMIuK/YuCYup0mpflW9NRu8X
f8EEXrpidU5IrMmJZFy0ZxCvUi/vn1aJuRA+mIEI78abrfQ7BwO5beBdApfiSCKH
WfoXVaj+CCukLbsbrZwKbyouuI75BNln+QmlnNht9Rf+kiSbKyeLOd210wd+M2S6
zcJTJ5nAAXXrLjUpAODHFEqtRxntPryq20k1/bX3iCyF+BLr2NrOEXFYGr8plKcU
B7GB65yXifoEMzhfTkjFIkUgZ9f3zCg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:26 2026 by rpki-client