Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFC7B9320F0911F1BDF93386DAE4EC9C.roa
File: AFC7B9320F0911F1BDF93386DAE4EC9C.roa (raw, json)
Hash identifier: mrOojGsmdKv9mSncpjUQ9A8uz6wMDZZKDIxHIiHh4ss=
Subject key identifier: 0B:A8:74:BA:CF:B1:F7:01:A3:64:F4:50:65:EB:00:E1:57:DB:64:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFC7B9320F0911F1BDF93386DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:42:50 +0000
ROA not before: Sat 21 Feb 2026 09:42:45 +0000
ROA not after: Sat 28 Mar 2026 09:42:45 +0000
asID: 44559
IP address blocks: 156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106324 (0x19f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:42:45 2026 GMT
Not After : Mar 28 09:42:45 2026 GMT
Subject: CN=69997e1a-bda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:6c:93:ee:9c:75:6c:9b:d4:fc:84:3b:4f:
52:b8:d1:46:a8:23:48:ae:2e:e1:74:33:e7:4a:18:
6d:5e:bd:2c:27:c9:2e:8a:01:99:98:4d:82:56:f0:
f6:1d:66:62:7f:17:e7:d0:51:62:27:02:6d:5e:8b:
6f:58:8e:20:8d:7f:75:66:78:fd:82:85:7d:6c:96:
a9:db:3f:86:15:a3:ee:26:60:b3:50:e0:e2:82:4d:
a7:a3:16:d7:1b:67:32:db:41:2f:4b:1b:19:94:c7:
14:e5:59:5a:2f:b2:32:3d:d6:1c:18:47:60:75:32:
64:5f:20:5b:a0:36:69:fd:7f:ba:b7:09:26:34:26:
6e:0a:f4:5e:a6:0a:42:d5:a8:a4:4b:e7:49:1e:59:
64:c0:ee:c0:f0:ec:15:b3:bd:e0:41:2e:e0:47:07:
69:27:0e:36:28:44:c6:85:91:cc:ba:11:e0:f2:9a:
5b:b9:5f:fd:5d:02:4c:37:58:dd:87:10:d4:13:0d:
c6:45:43:89:ee:6c:57:13:d2:32:ee:9c:0f:de:0f:
24:ed:eb:fe:15:4a:d5:06:76:73:29:5b:30:69:f8:
d3:d0:4f:a7:c9:ee:dd:f3:b5:12:14:5f:8d:1a:83:
dd:a9:a8:8e:16:7c:62:a5:a5:a7:98:9b:98:f6:cb:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A8:74:BA:CF:B1:F7:01:A3:64:F4:50:65:EB:00:E1:57:DB:64:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AFC7B9320F0911F1BDF93386DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0-156.246.186.255
156.246.198.0-156.246.214.255
Signature Algorithm: sha256WithRSAEncryption
ac:91:7d:69:79:ae:ed:44:01:54:c1:bf:50:55:18:36:84:48:
24:6c:83:ed:a5:d4:c2:a1:da:d2:a1:07:91:7c:3b:6b:5a:9c:
4b:e2:7e:9e:53:d3:70:d5:6f:68:44:66:5c:b5:a5:12:df:31:
f2:38:db:75:0e:22:da:86:1f:26:aa:42:f5:be:4f:a7:a2:7c:
64:33:c9:43:88:9f:b2:05:2e:73:3f:29:f4:86:4c:de:60:d0:
67:3b:42:26:85:4e:a6:4b:f1:33:2a:24:01:1c:00:eb:46:32:
7f:e8:88:d9:8c:ae:92:5d:1e:d6:dc:f0:b1:7a:7f:3a:8a:46:
28:bc:59:68:6e:dd:98:e7:9b:6a:cd:21:9b:91:78:c7:8e:2f:
e5:ad:13:56:81:3d:3e:3f:6c:1a:c6:cb:fb:65:9a:65:33:c1:
98:0d:67:2a:0d:a0:d3:05:f8:81:d7:b4:4a:9a:6b:17:5f:6c:
b1:d2:1e:d6:6a:ce:d0:e2:f3:6e:aa:55:3b:b8:4b:2f:09:0d:
5a:1a:12:27:96:cc:81:76:d3:4c:c9:30:4e:1d:28:cb:0f:dd:
fe:12:5a:4c:55:7a:06:52:0d:4e:b7:d2:35:ac:d2:d4:c5:bc:
ee:eb:03:da:43:40:62:42:df:eb:2d:ef:06:73:5c:43:87:7b:
66:c8:85:9b
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIDAZ9UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMDk0MjQ1WhcNMjYwMzI4MDk0MjQ1WjAYMRYw
FAYDVQQDEw02OTk5N2UxYS1iZGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuA1sk+6cdWyb1PyEO09SuNFGqCNIri7hdDPnShhtXr0sJ8kuigGZmE2C
VvD2HWZifxfn0FFiJwJtXotvWI4gjX91Znj9goV9bJap2z+GFaPuJmCzUODigk2n
oxbXG2cy20EvSxsZlMcU5VlaL7IyPdYcGEdgdTJkXyBboDZp/X+6twkmNCZuCvRe
pgpC1aikS+dJHllkwO7A8OwVs73gQS7gRwdpJw42KETGhZHMuhHg8ppbuV/9XQJM
N1jdhxDUEw3GRUOJ7mxXE9Iy7pwP3g8k7ev+FUrVBnZzKVswafjT0E+nye7d87US
FF+NGoPdqaiOFnxipaWnmJuY9ssp/wIDAQABo4ICuDCCArQwHQYDVR0OBBYEFAuo
dLrPsfcBo2T0UGXrAOFX22TmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRkM3QjkzMjBGMDkxMUYxQkRGOTMzODZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAOc9rgDBACc9rowDAMEAZz2
xgMEAJz21jANBgkqhkiG9w0BAQsFAAOCAQEArJF9aXmu7UQBVMG/UFUYNoRIJGyD
7aXUwqHa0qEHkXw7a1qcS+J+nlPTcNVvaERmXLWlEt8x8jjbdQ4i2oYfJqpC9b5P
p6J8ZDPJQ4ifsgUucz8p9IZM3mDQZztCJoVOpkvxMyokARwA60Yyf+iI2Yyukl0e
1tzwsXp/OopGKLxZaG7dmOebas0hm5F4x44v5a0TVoE9Pj9sGsbL+2WaZTPBmA1n
Kg2g0wX4gde0SpprF19ssdIe1mrO0OLzbqpVO7hLLwkNWhoSJ5bMgXbTTMkwTh0o
yw/d/hJaTFV6BlINTrfSNazS1MW87usD2kNAYkLf6y3vBnNcQ4d7ZsiFmw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:08 2026 by rpki-client