Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BABBB28A123D11F19AB228AEDAE4EC9C.roa
File: BABBB28A123D11F19AB228AEDAE4EC9C.roa (raw, json)
Hash identifier: OKd0iQnF1q+fdRd2g1/Es1hpE6sm2DuJwvfy3C05FiQ=
Subject key identifier: FC:5C:75:A7:DE:4E:89:83:23:82:92:3C:41:E0:64:48:BE:E4:2B:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A084
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BABBB28A123D11F19AB228AEDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 11:32:56 +0000
ROA not before: Wed 25 Feb 2026 11:32:52 +0000
ROA not after: Wed 04 Mar 2026 11:32:52 +0000
asID: 149014
IP address blocks: 156.236.96.0/22 maxlen: 24
156.236.108.0/22 maxlen: 24
156.236.112.0/22 maxlen: 24
156.236.116.0/22 maxlen: 24
156.236.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106628 (0x1a084)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 11:32:52 2026 GMT
Not After : Mar 4 11:32:52 2026 GMT
Subject: CN=699edde8-deed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:1d:d1:0b:a8:04:2e:9a:9f:45:99:2b:43:
b2:b0:55:3f:09:2d:2e:ce:79:2e:3d:92:c3:da:ea:
e8:75:88:c7:46:3b:4a:6b:3c:e1:80:ec:3b:78:87:
16:cb:38:26:fc:a0:81:e6:38:2e:2e:18:31:0d:9c:
d5:f6:26:e1:f4:18:8d:7c:79:79:f5:2f:96:b6:83:
da:1a:c2:89:18:f2:4a:b3:8c:8e:33:73:d2:6a:f0:
e8:fe:a9:b4:23:2a:0e:8c:a8:0b:0d:2c:86:dd:a1:
17:b5:98:fe:73:59:e0:3e:0e:a8:bb:20:4d:3e:21:
13:b6:5e:b0:ed:bc:cd:52:aa:9a:8d:1f:0b:3a:6f:
12:70:05:5e:3d:02:09:8d:cb:ac:06:81:94:da:56:
d5:05:91:1f:df:bd:f8:a0:34:12:cb:66:54:c5:93:
80:62:60:80:f8:49:90:c1:19:db:fb:5d:d3:ae:01:
d3:31:0a:d5:42:88:23:75:7d:cc:ac:42:7b:13:47:
d1:01:c9:42:fb:53:5e:2a:bf:67:d4:68:c6:3e:82:
fb:8e:3a:08:9f:cf:3b:6f:3d:94:ec:84:23:69:93:
d4:0a:9e:3d:b1:82:dc:ed:63:1d:b5:63:1d:30:b8:
45:16:33:c7:76:e8:40:f9:2c:9f:b9:3d:cc:a7:08:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:75:A7:DE:4E:89:83:23:82:92:3C:41:E0:64:48:BE:E4:2B:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BABBB28A123D11F19AB228AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
79:38:68:f0:2c:de:9c:7d:c4:61:33:f1:e5:76:e0:58:0b:7b:
59:35:10:52:b6:91:e7:f5:86:23:79:59:b6:7c:e7:98:cb:71:
80:cd:4f:7a:ac:68:23:ab:00:af:bb:80:a4:17:82:68:8d:8c:
64:c3:20:7c:e1:a5:4a:56:1a:17:8e:cd:1a:09:f0:1f:3d:62:
3b:2c:31:9b:e4:59:d1:3f:8a:0c:09:4f:14:5a:6f:d3:13:d5:
c4:a3:5c:5d:2f:47:ee:b0:2c:cb:13:56:1d:c5:e8:aa:e1:d3:
b9:a1:97:b7:22:2f:c5:5f:9c:c1:79:e5:7c:3b:e2:d7:94:8e:
08:bb:72:e0:5f:ea:b8:c9:8b:eb:87:5e:07:97:c7:8d:3b:3a:
aa:0f:c4:cf:3e:4e:3b:ec:fc:9c:2a:b8:52:e1:ae:f2:ea:58:
01:0b:86:08:50:14:cc:76:eb:10:15:1e:aa:f8:ae:7d:81:00:
26:75:05:ff:92:29:c9:b5:74:6c:59:c7:ec:d0:5d:3b:e7:58:
e6:df:08:71:3a:d6:d2:b9:e5:36:14:bd:4f:04:1e:c0:c7:cf:
9c:21:d6:56:ee:fe:0e:88:ad:22:27:87:5c:8f:49:33:b6:a9:
f5:c5:ec:89:b0:8b:11:80:d3:5f:2a:62:83:64:2e:82:ea:e7:
1d:ff:ba:f0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAaCEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI1MTEzMjUyWhcNMjYwMzA0MTEzMjUyWjAYMRYw
FAYDVQQDEw02OTllZGRlOC1kZWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzf0d0QuoBC6an0WZK0OysFU/CS0uznkuPZLD2urodYjHRjtKazzhgOw7
eIcWyzgm/KCB5jguLhgxDZzV9ibh9BiNfHl59S+WtoPaGsKJGPJKs4yOM3PSavDo
/qm0IyoOjKgLDSyG3aEXtZj+c1ngPg6ouyBNPiETtl6w7bzNUqqajR8LOm8ScAVe
PQIJjcusBoGU2lbVBZEf3734oDQSy2ZUxZOAYmCA+EmQwRnb+13TrgHTMQrVQogj
dX3MrEJ7E0fRAclC+1NeKr9n1GjGPoL7jjoIn887bz2U7IQjaZPUCp49sYLc7WMd
tWMdMLhFFjPHduhA+SyfuT3MpwiTbwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPxc
dafeTomDI4KSPEHgZEi+5CtfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQUJCQjI4QTEyM0QxMUYxOUFCMjI4QUVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAHk4aPAs3px9xGEz8eV24FgLe1k1EFK2
kef1hiN5WbZ855jLcYDNT3qsaCOrAK+7gKQXgmiNjGTDIHzhpUpWGheOzRoJ8B89
YjssMZvkWdE/igwJTxRab9MT1cSjXF0vR+6wLMsTVh3F6Krh07mhl7ciL8VfnMF5
5Xw74teUjgi7cuBf6rjJi+uHXgeXx407OqoPxM8+Tjvs/JwquFLhrvLqWAELhghQ
FMx26xAVHqr4rn2BACZ1Bf+SKcm1dGxZx+zQXTvnWObfCHE61tK55TYUvU8EHsDH
z5wh1lbu/g6IrSInh1yPSTO2qfXF7ImwixGA018qYoNkLoLq5x3/uvA=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:53 2026 by rpki-client