Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D1C092118311F19B6C75B4DAE4EC9C.roa
File: 94D1C092118311F19B6C75B4DAE4EC9C.roa (raw, json)
Hash identifier: 9FhSAivOnph6me5LJnMyKFw1r6jIJGFGRoAen7BpUGc=
Subject key identifier: 95:CA:C3:39:DE:91:D1:FB:89:E3:13:76:E3:DB:05:66:2A:C3:76:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A01D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D1C092118311F19B6C75B4DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 13:20:26 +0000
ROA not before: Tue 24 Feb 2026 13:20:21 +0000
ROA not after: Tue 31 Mar 2026 13:20:21 +0000
asID: 44559
IP address blocks: 156.233.116.0/24 maxlen: 24
156.233.117.0/24 maxlen: 24
156.233.127.0/24 maxlen: 24
156.233.193.0/24 maxlen: 24
156.233.194.0/24 maxlen: 24
156.233.195.0/24 maxlen: 24
156.233.204.0/24 maxlen: 24
156.239.140.0/24 maxlen: 24
156.239.142.0/24 maxlen: 24
156.239.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106525 (0x1a01d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 13:20:21 2026 GMT
Not After : Mar 31 13:20:21 2026 GMT
Subject: CN=699da59a-8805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c1:8d:84:c0:5e:d9:18:4c:2b:d2:da:e8:73:
86:31:18:08:3b:bd:7d:14:52:e0:57:45:61:d5:a1:
01:0d:e2:ad:0a:74:84:58:b6:1e:35:15:9d:f6:95:
7a:4d:60:2f:b0:a2:4b:3d:af:f8:af:c0:da:01:15:
d6:dc:4e:5f:ec:59:38:a7:52:ee:5c:ef:a3:22:f9:
a5:35:9f:07:25:f4:bf:ec:e6:d3:2b:4f:fb:41:52:
0e:76:5c:23:0c:e0:ce:85:72:dc:e1:54:1b:4a:9a:
5a:60:a6:0b:1f:68:d0:5b:60:16:b6:ce:f4:e9:f2:
e0:40:ac:2d:47:02:d9:f4:72:1e:db:af:f9:0d:c5:
81:d1:ea:ac:0b:70:23:f0:9e:52:21:76:58:65:2f:
da:20:15:da:2a:c1:81:e0:da:d1:08:25:18:4b:91:
49:5c:c0:68:1d:eb:8f:14:73:34:f7:f7:d6:e5:8d:
e6:a0:db:36:22:e6:82:42:f0:a2:1b:0c:e2:a9:1e:
e3:f0:04:18:53:c2:a4:ae:b6:8d:6b:2c:ea:ea:87:
d8:4f:81:9d:94:ba:eb:b4:75:15:89:1f:10:c0:64:
cc:f2:84:65:9e:31:57:58:ed:bd:99:24:9b:40:1b:
00:a3:0e:dd:ed:32:f7:02:19:8d:40:f8:ef:35:61:
6d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CA:C3:39:DE:91:D1:FB:89:E3:13:76:E3:DB:05:66:2A:C3:76:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D1C092118311F19B6C75B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.116.0/23
156.233.127.0/24
156.233.193.0-156.233.195.255
156.233.204.0/24
156.239.140.0/24
156.239.142.0/23
Signature Algorithm: sha256WithRSAEncryption
42:9b:de:6b:47:a5:84:3f:1e:93:a3:1e:c7:8c:79:4f:34:0d:
a2:aa:c8:d4:b7:7c:9a:4d:82:a1:d9:f5:f6:cc:4d:02:54:a2:
d8:15:f2:dd:87:ef:93:70:f9:97:01:13:ee:ff:7b:ed:ca:30:
74:d9:b0:2d:49:1a:7d:1e:22:ce:6c:34:15:f1:5b:9e:84:fc:
c8:75:84:79:4e:2d:dd:ab:9c:71:e8:cd:13:ca:b0:b1:4d:fc:
38:b0:2c:63:35:7e:c9:87:ad:90:4e:f9:33:8b:4f:7d:c9:b6:
f4:cd:39:88:9f:d0:a7:0b:a4:ef:c1:62:03:b9:13:43:e4:7b:
6b:9c:8b:3a:66:47:34:56:70:74:65:f1:9b:49:f9:9d:77:1c:
92:92:92:f6:9f:e5:72:fb:e7:bd:3f:b9:66:b9:d3:12:26:61:
55:bc:60:45:b0:19:34:1c:5b:10:31:6b:29:f3:a8:99:93:ee:
40:64:9a:49:5b:6f:21:57:18:08:4b:5c:19:8b:d1:ae:34:85:
e0:c6:6a:e3:6e:2d:d0:00:57:7c:5c:38:de:5a:c4:c7:7c:1e:
43:40:74:aa:c5:2d:6f:e8:82:0d:fa:7f:5c:f2:4f:b4:c2:58:
48:83:16:55:39:af:a6:08:3c:26:fe:7d:43:51:98:94:c0:fd:
df:eb:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:40 2026 by rpki-client