Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9091A01A0F0811F19FC7987FDAE4EC9C.roa
File: 9091A01A0F0811F19FC7987FDAE4EC9C.roa (raw, json)
Hash identifier: XH2UkXynVoNCjLMhWBEBCYDYLXlqb0se9pp/L9Q6zpI=
Subject key identifier: 31:90:90:70:EB:01:FF:3C:0C:39:C8:74:27:7F:A4:0F:4F:88:A1:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9091A01A0F0811F19FC7987FDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:34:48 +0000
ROA not before: Sat 21 Feb 2026 09:34:44 +0000
ROA not after: Sat 28 Mar 2026 09:34:44 +0000
asID: 140475
IP address blocks: 156.230.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106320 (0x19f50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:34:44 2026 GMT
Not After : Mar 28 09:34:44 2026 GMT
Subject: CN=69997c38-fadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:68:9c:33:63:08:11:c8:b9:20:16:83:17:
f0:7e:42:fc:3f:ee:f3:0f:72:ad:86:6f:90:87:fe:
1e:4b:0e:51:81:a0:ee:ad:e3:36:1d:02:c4:52:0a:
34:32:8c:fb:ea:44:42:a6:4b:35:cf:1e:49:ac:89:
97:e3:a2:12:58:b0:3a:68:ed:f5:86:1f:95:ca:60:
38:b0:da:0a:36:29:e5:ff:6c:7b:cb:e4:e4:6e:99:
5a:81:ab:53:5e:60:af:8b:65:6f:e9:9e:95:55:48:
80:9a:87:d8:b1:7e:97:86:1e:10:7d:0e:6c:e9:49:
e9:34:1c:6f:1d:b2:ce:93:a4:f3:97:28:cb:ae:d9:
02:9a:bb:f1:af:d1:e5:de:e1:5e:14:51:f7:aa:bc:
73:92:3c:ff:dc:75:3c:dd:c3:75:09:26:fb:30:a7:
4e:18:8d:fe:b5:47:69:47:8d:24:0e:f7:31:98:2e:
2e:18:74:b2:a2:04:b3:22:c0:71:40:93:2b:4e:b2:
61:66:47:61:6e:03:b8:c5:bb:bf:83:bd:59:2f:be:
3d:18:a8:95:f8:ee:a4:84:93:0a:db:ad:30:64:58:
2e:31:01:98:6a:ae:89:b9:cb:9a:78:18:6b:3b:dd:
67:cb:b6:c5:c4:7c:14:01:3c:be:76:1a:8f:c5:7f:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:90:90:70:EB:01:FF:3C:0C:39:C8:74:27:7F:A4:0F:4F:88:A1:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9091A01A0F0811F19FC7987FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.20.0/24
Signature Algorithm: sha256WithRSAEncryption
63:26:f3:59:c8:c6:39:ca:33:6f:64:22:31:be:dc:9e:75:18:
75:2d:40:60:de:78:a8:19:fa:40:e2:d7:8f:0d:f3:b1:48:3a:
51:b8:24:4c:3d:33:db:54:20:9d:0b:b5:61:b0:36:17:bd:bf:
74:1a:c9:3b:0f:8f:ad:67:87:72:73:43:d3:fe:9e:5e:9c:f7:
98:53:32:34:84:48:eb:9e:63:aa:ec:0e:a6:3d:f2:8f:12:73:
b5:09:e2:43:20:fa:30:8f:36:39:9f:8e:93:75:22:a3:6f:5e:
0c:c9:2a:33:91:f5:58:3c:ef:42:e3:24:b6:de:cf:62:ac:1d:
aa:4a:51:ca:60:4a:67:66:ec:d7:e1:a7:a1:9d:5f:c5:11:8a:
1d:47:a9:b4:2d:25:9a:56:65:68:70:d6:e0:9e:69:65:b3:7b:
08:f5:ff:9d:b3:7b:75:05:51:23:7b:7b:39:0b:d9:48:22:e1:
1c:49:43:6e:58:e6:de:37:7d:8c:c5:7f:68:df:4b:cb:5c:85:
b9:e4:ee:5a:0c:20:2a:31:65:db:bb:df:3f:bd:88:02:4d:59:
e3:7e:8a:ff:16:0e:78:ae:39:01:70:be:99:4c:37:9b:9f:97:
fd:19:a7:02:ad:8b:4f:32:29:8f:c3:6a:e2:44:a6:3c:78:d1:
ad:86:11:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:17 2026 by rpki-client