Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65669BE065F11F19491C8C0DAE4EC9C.roa
File: A65669BE065F11F19491C8C0DAE4EC9C.roa (raw, json)
Hash identifier: fJgvVAApj7CXjMG5ReBpHlBZT7TmDIZwxzVWEdpft1c=
Subject key identifier: CD:FF:6B:78:DA:64:7C:CF:C6:6C:A2:91:0B:99:51:81:52:70:3F:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C8D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65669BE065F11F19491C8C0DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 09:05:31 +0000
ROA not before: Tue 10 Feb 2026 09:05:26 +0000
ROA not after: Tue 17 Mar 2026 09:05:26 +0000
asID: 153671
IP address blocks: 156.231.70.0/23 maxlen: 24
156.231.88.0/22 maxlen: 24
156.231.92.0/22 maxlen: 24
156.238.12.0/23 maxlen: 24
156.238.28.0/22 maxlen: 24
156.238.60.0/22 maxlen: 24
156.242.64.0/23 maxlen: 24
156.242.100.0/22 maxlen: 24
156.242.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105613 (0x19c8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 09:05:26 2026 GMT
Not After : Mar 17 09:05:26 2026 GMT
Subject: CN=698af4db-dfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:17:7f:77:4c:87:74:5c:8e:c7:b7:66:5c:
90:0e:45:1f:05:54:fb:45:6c:cd:31:42:90:a1:35:
ef:0b:c5:07:81:4c:ab:c8:65:95:16:00:0a:d6:8d:
36:36:8f:9b:41:67:bb:1c:d8:a2:79:d7:ac:df:04:
ce:5d:43:95:63:71:ea:89:65:44:ca:67:2c:51:61:
47:b5:52:b1:64:4a:2b:1b:a9:85:c3:5c:5c:c8:09:
f2:74:e3:fb:5c:f8:d1:41:e6:20:b6:53:45:1e:79:
3a:a6:ab:f9:ed:0d:f9:e8:97:35:8d:9b:09:b6:a4:
ff:2d:d8:5d:78:53:bd:3f:f9:56:1c:92:3c:1a:d5:
bc:5a:c6:0a:7c:6e:0e:2a:e4:c9:23:a8:0a:71:47:
77:59:f0:f7:85:45:4f:49:59:52:82:1f:71:0d:76:
4d:ee:c1:ca:ad:be:b7:a2:35:d1:00:8a:5a:db:1d:
dc:9a:bb:6e:c7:82:de:a6:af:5d:13:43:db:6d:10:
b8:1c:32:0a:9e:1a:c5:fe:3d:b2:8a:fe:ad:0d:c7:
40:f0:ae:b4:4f:6f:ba:c7:82:f4:6f:0e:bd:24:cf:
b5:2a:aa:15:0a:82:e3:c5:55:94:21:9e:cb:7c:01:
eb:e4:d0:33:bf:b0:da:4b:df:f4:92:cf:56:f9:5b:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:6B:78:DA:64:7C:CF:C6:6C:A2:91:0B:99:51:81:52:70:3F:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A65669BE065F11F19491C8C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.70.0/23
156.231.88.0/21
156.238.12.0/23
156.238.28.0/22
156.238.60.0/22
156.242.64.0/23
156.242.100.0-156.242.107.255
Signature Algorithm: sha256WithRSAEncryption
6c:e4:55:80:fb:4c:0d:a6:e6:e7:4a:ab:c0:4d:2f:13:cc:3b:
3b:a8:13:29:fa:fe:d6:00:9f:ab:54:76:31:bb:25:8d:f4:15:
29:85:be:4b:58:e1:41:f5:5c:45:87:f7:4c:1e:e5:18:07:54:
eb:5e:bd:0a:f7:04:21:f8:53:aa:c0:24:be:a3:31:8d:02:c6:
40:20:43:bf:8b:90:2d:a9:08:30:8b:91:2f:d2:31:1d:0c:84:
ab:cc:12:91:67:b0:c0:ba:dc:86:c8:c3:bc:7c:cc:f1:ff:97:
16:20:ed:ad:ea:7a:86:8b:24:39:e9:33:1d:c8:e1:3d:6c:51:
42:21:47:a3:f7:5b:10:0b:07:d8:cb:09:e6:49:13:61:e3:40:
4f:f5:86:21:54:76:2c:8e:a5:5e:0a:9b:e3:b1:28:b9:d4:be:
6d:65:9e:a1:55:55:26:3a:56:4c:82:2e:61:b9:a1:2d:12:7a:
d7:b2:f6:49:4c:82:0b:08:d2:3a:98:e3:c3:6d:b9:62:4a:1d:
a7:03:39:a2:a3:fa:11:84:c4:85:90:f9:d2:00:25:c6:98:c1:
b6:bf:50:48:cf:ff:38:26:08:67:0f:bd:3c:33:3c:00:ea:42:
cd:73:df:b2:41:f8:6e:f9:5c:25:9c:b4:6b:6f:09:4b:74:99:
66:05:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:06 2026 by rpki-client