Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FBA5862AE411F1B053EADBDAE4EC9C.roa
File: A8FBA5862AE411F1B053EADBDAE4EC9C.roa (raw, json)
Hash identifier: s8eFJmpGXzii3jB+pyxSJ5y/ush1djqKxPADDuWLCdc=
Subject key identifier: 05:4B:4E:EB:DC:33:37:10:A3:29:E2:B3:12:15:DB:E1:D6:D8:7C:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A874
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FBA5862AE411F1B053EADBDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:28:21 +0000
ROA not before: Sat 28 Mar 2026 20:28:16 +0000
ROA not after: Fri 22 May 2026 20:28:16 +0000
asID: 137899
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108660 (0x1a874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:28:16 2026 GMT
Not After : May 22 20:28:16 2026 GMT
Subject: CN=69c839e4-fc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:e0:5a:7c:9e:0e:a9:92:c4:a9:ea:cb:ba:
fd:16:d0:13:df:4a:ca:d0:e6:cb:74:40:05:1e:17:
91:2d:35:a5:eb:db:f3:56:68:45:46:c1:56:17:cb:
d5:58:f2:b3:a4:5a:de:18:3d:cc:d0:69:be:70:22:
99:6c:dc:b3:6a:49:64:d6:b9:c8:38:65:21:d7:5f:
81:dc:ec:b9:89:9b:bd:ca:d1:f3:1b:d1:7c:8a:9d:
78:a4:55:ee:e5:bc:d4:77:9f:25:27:fe:b3:2a:5e:
79:f8:1a:89:46:1a:78:78:14:03:cb:93:2d:e0:88:
85:0a:c6:65:f4:35:a2:e8:e4:29:fd:78:d7:b0:5b:
bd:c4:fd:a7:60:48:5e:14:71:54:b1:43:0f:10:6b:
33:8a:45:66:8c:ab:c9:97:73:b6:8f:4a:49:11:47:
ee:60:b0:9f:46:8e:08:a9:c3:24:53:9d:ba:59:c5:
60:98:c2:64:f4:46:02:8c:11:b5:dc:47:50:1d:d0:
6a:56:6f:63:7d:24:e9:bd:06:88:d5:da:f1:ef:d5:
6b:6b:6e:6c:fd:a1:d6:2d:54:66:0d:ce:76:ef:e4:
95:5f:df:ec:0d:40:52:0d:85:58:31:9b:d2:ff:70:
fd:35:05:f3:98:f6:7c:95:a3:01:5f:0f:ee:4f:38:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4B:4E:EB:DC:33:37:10:A3:29:E2:B3:12:15:DB:E1:D6:D8:7C:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8FBA5862AE411F1B053EADBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:50:85:cc:3e:06:39:dd:6f:01:05:a1:f2:7e:26:7c:e8:99:
7c:3e:15:03:bc:ca:eb:40:9f:9f:20:9f:df:ed:d2:57:4f:aa:
b6:b5:3d:ae:26:c0:9f:ad:b8:4a:9b:ab:ab:24:73:39:d0:1a:
cf:7b:f1:ff:11:c1:b4:14:cc:e0:a4:df:93:0f:ea:75:19:78:
13:3b:36:3d:97:74:31:33:da:1e:e1:7e:8f:9e:89:44:a4:53:
b8:0d:0e:22:13:d8:5f:62:8a:0b:ee:cf:dc:e7:e0:72:53:d2:
c1:86:11:8d:f8:ef:ad:ca:f9:ab:18:d6:53:03:b4:41:9e:65:
25:24:c4:27:bc:47:df:99:12:92:8a:4f:84:01:56:de:38:2e:
08:82:0b:5b:72:f9:d4:fe:c1:d5:b9:3f:a4:cc:b5:dc:a2:6b:
24:c8:7d:b6:42:c5:cf:8e:6e:9d:a6:c8:b1:8f:e9:e4:04:a6:
87:6a:e4:7d:55:49:d8:40:f0:79:f0:46:2c:12:d1:1a:42:d0:
61:39:5b:9b:87:d8:9a:3d:2b:b0:53:16:b4:c8:fb:1c:41:4e:
f1:42:a9:a6:d6:e7:8a:97:e6:46:2a:8b:f3:29:b4:3e:f8:91:
6e:0c:fd:e8:b2:25:2f:65:c9:c8:da:16:72:42:63:84:0e:9b:
6d:ad:26:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAah0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI4MjAyODE2WhcNMjYwNTIyMjAyODE2WjAYMRYw
FAYDVQQDEw02OWM4MzllNC1mYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvAjgWnyeDqmSxKnqy7r9FtAT30rK0ObLdEAFHheRLTWl69vzVmhFRsFW
F8vVWPKzpFreGD3M0Gm+cCKZbNyzaklk1rnIOGUh11+B3Oy5iZu9ytHzG9F8ip14
pFXu5bzUd58lJ/6zKl55+BqJRhp4eBQDy5Mt4IiFCsZl9DWi6OQp/XjXsFu9xP2n
YEheFHFUsUMPEGszikVmjKvJl3O2j0pJEUfuYLCfRo4IqcMkU526WcVgmMJk9EYC
jBG13EdQHdBqVm9jfSTpvQaI1drx79Vra25s/aHWLVRmDc527+SVX9/sDUBSDYVY
MZvS/3D9NQXzmPZ8laMBXw/uTzi3/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAVL
TuvcMzcQoynisxIV2+HW2HxrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOEZCQTU4NjJBRTQxMUYxQjA1M0VBREJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQArUIXMPgY53W8BBaHyfiZ86Jl8PhUDvMrrQJ+fIJ/f7dJXT6q2tT2uJsCf
rbhKm6urJHM50BrPe/H/EcG0FMzgpN+TD+p1GXgTOzY9l3QxM9oe4X6PnolEpFO4
DQ4iE9hfYooL7s/c5+ByU9LBhhGN+O+tyvmrGNZTA7RBnmUlJMQnvEffmRKSik+E
AVbeOC4IggtbcvnU/sHVuT+kzLXcomskyH22QsXPjm6dpsixj+nkBKaHauR9VUnY
QPB58EYsEtEaQtBhOVubh9iaPSuwUxa0yPscQU7xQqmm1ueKl+ZGKovzKbQ++JFu
DP3osiUvZcnI2hZyQmOEDpttrSYN
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:43 2026 by rpki-client