Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBE26680F2411F1A41742A9DAE4EC9C.roa
File: 9BBE26680F2411F1A41742A9DAE4EC9C.roa (raw, json)
Hash identifier: IKvJDAKzL5BQ1mHT0E+RNZXTVhv07n4oxKQ5SE2VNXU=
Subject key identifier: 9A:4F:BA:57:AA:29:88:44:EC:1B:60:0F:A9:B9:E3:21:4B:3C:44:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBE26680F2411F1A41742A9DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:55:33 +0000
ROA not before: Sat 21 Feb 2026 12:55:29 +0000
ROA not after: Sat 28 Mar 2026 12:55:29 +0000
asID: 44559
IP address blocks: 156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106376 (0x19f88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:55:29 2026 GMT
Not After : Mar 28 12:55:29 2026 GMT
Subject: CN=6999ab45-d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:03:c5:d5:97:e6:be:e6:93:49:af:c2:ef:2d:
5a:d4:1a:3e:e8:bc:a3:79:00:7d:8d:74:77:ac:9c:
af:f4:2f:09:52:72:4c:a0:30:11:37:93:03:92:7d:
8b:11:0a:e1:f9:44:3f:22:58:56:40:a5:50:48:f4:
8d:92:1c:e8:5d:d4:39:5b:98:57:c5:65:f8:a8:a8:
03:0b:49:b0:da:ff:6d:53:b4:14:47:73:81:2d:dc:
d8:63:25:dd:26:03:22:69:bf:ad:e0:9f:94:5f:9a:
29:ec:d7:b2:4e:c6:fe:5a:13:76:30:0a:81:88:8c:
3d:6b:6e:ca:c2:83:4f:91:d3:12:0b:cf:ec:35:ac:
bc:4d:02:37:46:74:cc:cf:fc:94:59:9a:1b:c2:58:
80:a9:5e:3b:78:b7:df:d6:8c:57:eb:fa:60:aa:f7:
1e:13:8f:a1:39:fb:df:70:b0:65:7f:0a:f4:55:bd:
f4:05:9b:de:ff:1f:3c:45:39:7f:0d:c4:f0:d9:bb:
8d:36:ba:af:2b:9a:9f:85:13:a2:b1:c1:5e:73:f9:
f5:fb:b3:68:f4:b8:50:34:53:95:b4:ac:2e:c4:13:
9d:02:82:41:3c:48:db:a1:b9:a0:3b:50:b6:65:74:
50:12:dc:f5:aa:ee:cc:88:2a:ac:2b:4f:57:1a:4a:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4F:BA:57:AA:29:88:44:EC:1B:60:0F:A9:B9:E3:21:4B:3C:44:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BBE26680F2411F1A41742A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.245.0-156.246.254.255
Signature Algorithm: sha256WithRSAEncryption
b8:92:34:c6:ca:5d:b3:44:50:58:76:8f:6b:2c:bc:2f:a1:5c:
0c:83:5b:64:3a:9e:94:a0:06:7e:b3:f1:ed:f4:df:18:a1:db:
15:26:00:94:8a:95:dc:aa:5c:05:e5:3e:42:ef:af:21:35:7b:
39:a5:06:ab:e1:9b:77:09:69:43:01:fc:c4:ca:02:98:4a:8f:
3e:ab:b9:1a:db:6c:6d:1e:1b:74:1b:29:e4:18:f2:21:3c:51:
e6:55:2f:66:68:01:54:5b:6c:e7:5a:ab:6c:7a:0b:e7:d9:9a:
8e:84:80:c9:bc:5b:8e:c5:c7:a2:d3:da:85:67:3a:fb:88:a0:
18:be:d0:f1:3d:ec:91:ee:56:c8:1e:77:8c:f7:11:be:d9:23:
0a:82:89:7f:07:04:f8:c0:59:9f:6d:e2:35:bd:0c:ad:81:59:
35:0d:91:63:f0:cc:ed:e7:bf:2d:ad:ec:67:6a:a7:36:58:e9:
bf:26:2c:bf:0f:b6:a6:22:84:ae:21:08:e5:59:cb:46:44:ab:
60:ba:ff:4a:5a:a9:6a:8d:9d:9a:7d:62:a6:f5:99:cc:38:fb:
5e:6f:5f:e3:91:fe:b4:c3:3f:77:83:39:12:6d:c1:df:01:c8:
e1:b3:15:67:f7:4e:51:05:cb:d3:60:98:71:35:28:8d:94:9c:
28:3b:5a:78
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZ+IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMTI1NTI5WhcNMjYwMzI4MTI1NTI5WjAYMRYw
FAYDVQQDEw02OTk5YWI0NS1kN2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArQPF1ZfmvuaTSa/C7y1a1Bo+6LyjeQB9jXR3rJyv9C8JUnJMoDARN5MD
kn2LEQrh+UQ/IlhWQKVQSPSNkhzoXdQ5W5hXxWX4qKgDC0mw2v9tU7QUR3OBLdzY
YyXdJgMiab+t4J+UX5op7NeyTsb+WhN2MAqBiIw9a27KwoNPkdMSC8/sNay8TQI3
RnTMz/yUWZobwliAqV47eLff1oxX6/pgqvceE4+hOfvfcLBlfwr0Vb30BZve/x88
RTl/DcTw2buNNrqvK5qfhROiscFec/n1+7No9LhQNFOVtKwuxBOdAoJBPEjbobmg
O1C2ZXRQEtz1qu7MiCqsK09XGkprRwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJpP
uleqKYhE7BtgD6m54yFLPETpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85QkJFMjY2ODBGMjQxMUYxQTQxNzQyQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9vUDBACc9v4wDQYJKoZI
hvcNAQELBQADggEBALiSNMbKXbNEUFh2j2ssvC+hXAyDW2Q6npSgBn6z8e303xih
2xUmAJSKldyqXAXlPkLvryE1ezmlBqvhm3cJaUMB/MTKAphKjz6ruRrbbG0eG3Qb
KeQY8iE8UeZVL2ZoAVRbbOdaq2x6C+fZmo6EgMm8W47Fx6LT2oVnOvuIoBi+0PE9
7JHuVsged4z3Eb7ZIwqCiX8HBPjAWZ9t4jW9DK2BWTUNkWPwzO3nvy2t7GdqpzZY
6b8mLL8PtqYihK4hCOVZy0ZEq2C6/0paqWqNnZp9Yqb1mcw4+15vX+OR/rTDP3eD
ORJtwd8ByOGzFWf3TlEFy9NgmHE1KI2UnCg7Wng=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:42 2026 by rpki-client