Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2FEB0813BC11F1A3DAD6DCDAE4EC9C.roa
File: AB2FEB0813BC11F1A3DAD6DCDAE4EC9C.roa (raw, json)
Hash identifier: GmMS4jgisURbTvP7XoL938vTKtCHjuxMABbBqlys27U=
Subject key identifier: C5:08:B8:B3:22:9D:A3:D4:FD:16:F5:BC:87:34:68:9C:24:20:28:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A114
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2FEB0813BC11F1A3DAD6DCDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 09:14:07 +0000
ROA not before: Fri 27 Feb 2026 09:14:03 +0000
ROA not after: Thu 09 Apr 2026 09:14:03 +0000
asID: 395793
IP address blocks: 156.243.225.0/24 maxlen: 24
156.243.241.0/24 maxlen: 24
156.243.245.0/24 maxlen: 24
156.243.250.0/24 maxlen: 24
156.243.251.0/24 maxlen: 24
156.243.252.0/24 maxlen: 24
156.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106772 (0x1a114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 09:14:03 2026 GMT
Not After : Apr 9 09:14:03 2026 GMT
Subject: CN=69a1605f-71be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:f8:8a:77:0c:93:67:45:e8:ad:8b:97:fd:
9d:a1:96:02:c8:c5:e8:b7:fe:8e:3a:5c:09:27:fd:
c5:81:82:97:83:af:f6:95:95:8a:9d:23:fc:dc:e1:
60:c0:e3:15:f2:0f:a8:88:84:39:3b:21:a1:97:93:
6d:5e:7d:af:0f:56:46:1e:52:7f:52:cb:33:9c:99:
67:e6:82:3f:81:0d:fb:db:f1:ac:51:7e:93:80:e2:
75:cd:0b:5d:9f:ee:e9:21:8f:d0:01:a7:47:60:89:
c9:b2:12:24:e4:b8:d5:cc:50:75:d7:05:12:08:f1:
b4:a4:f6:97:1e:02:d5:fb:25:17:42:53:9b:75:79:
bd:62:bf:a8:e1:72:01:73:4e:5b:53:63:c9:5e:c8:
67:26:b2:ec:30:65:50:83:98:4c:dd:5e:02:de:2a:
43:81:e8:26:ad:c0:41:d3:47:d3:b4:43:13:1f:fa:
b7:e0:fa:d2:0b:07:00:11:5f:ca:a5:fa:49:95:aa:
d3:9b:2d:ad:b2:48:60:d4:4e:7d:46:e4:3b:f6:0f:
6a:b8:98:d5:0e:a4:69:eb:f4:b5:9b:5c:4d:37:1a:
64:4f:90:c2:44:92:b8:55:7b:12:13:92:e0:87:db:
8b:47:66:1d:48:57:6e:43:42:3d:7c:dd:bf:59:14:
af:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:08:B8:B3:22:9D:A3:D4:FD:16:F5:BC:87:34:68:9C:24:20:28:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB2FEB0813BC11F1A3DAD6DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.225.0/24
156.243.241.0/24
156.243.245.0/24
156.243.250.0-156.243.253.255
Signature Algorithm: sha256WithRSAEncryption
99:d7:a6:a6:a2:b8:e6:b9:e2:ae:34:89:2b:86:34:25:41:27:
9e:69:a7:9b:91:81:f0:84:2b:5e:26:7a:d1:77:db:cd:2e:4a:
bd:4c:de:b5:be:cd:fc:af:1f:d5:a4:b4:42:13:af:df:3c:14:
fb:98:2c:c0:ba:49:d5:ae:b1:3a:08:0e:67:4c:6d:15:69:77:
81:95:77:7c:ec:57:36:4a:80:c6:d9:31:ef:9e:64:45:1f:54:
05:0a:26:5b:d9:ec:af:cf:96:27:ca:bc:eb:35:a8:6e:c7:f5:
2a:4b:fa:20:ae:ae:f5:64:fc:3f:f5:c7:73:a3:0b:e8:62:d1:
13:0d:a7:a9:72:23:ae:29:ec:c2:1d:53:5c:43:a8:07:22:ea:
68:6f:a7:28:e6:76:8e:52:e5:5a:0d:63:a1:a8:ca:a5:e7:ca:
4f:f7:7f:f1:09:65:3f:48:7e:cf:03:a5:ec:99:d0:77:ce:fe:
d7:5d:69:42:f6:57:13:28:ae:af:bb:e3:ed:c9:96:9b:71:a7:
51:12:0a:6d:3d:fd:9c:5c:b8:92:c8:fa:ed:75:62:a5:a7:c1:
63:ae:d4:c7:96:05:3f:85:78:10:83:29:0d:8d:99:2b:25:6f:
db:f1:eb:4b:ba:3d:c0:1d:b3:51:22:7e:8c:43:48:0d:94:56:
69:fb:ce:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:20 2026 by rpki-client