Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17DA69A00D711F1BBAF90C8DAE4EC9C.roa
File: C17DA69A00D711F1BBAF90C8DAE4EC9C.roa (raw, json)
Hash identifier: gWFjsgjORJF+hjtOEX5nKYqth+nV6ApasTAuDJtNyYE=
Subject key identifier: C8:16:97:59:11:CE:A9:9F:83:98:C4:4F:D8:3B:3B:DE:1E:35:5A:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BA4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17DA69A00D711F1BBAF90C8DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 08:10:09 +0000
ROA not before: Tue 03 Feb 2026 08:10:04 +0000
ROA not after: Mon 09 Mar 2026 08:10:04 +0000
asID: 48678
IP address blocks: 156.229.123.0/24 maxlen: 24
156.229.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105380 (0x19ba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 08:10:04 2026 GMT
Not After : Mar 9 08:10:04 2026 GMT
Subject: CN=6981ad61-a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b0:3c:8a:f8:fd:f1:32:2f:2e:a1:52:69:db:
db:7a:fa:28:b4:34:5c:31:ed:5a:f7:ef:b0:c1:ec:
fd:3a:25:2b:81:b7:51:79:34:c2:ad:62:4b:38:6f:
b3:0e:5a:de:87:9f:13:50:ab:ef:a1:34:c3:e5:10:
85:7e:55:e6:ec:81:da:f5:c8:90:16:ef:20:a8:9e:
fb:b7:47:19:37:3e:93:9e:ef:73:4e:40:5b:d8:90:
9b:57:0d:af:11:b1:cf:8e:c8:7e:10:74:d4:ad:cb:
b2:17:35:1c:20:92:09:7c:2c:71:03:e3:23:ca:5b:
1b:a0:a1:96:6e:e1:06:d5:40:b0:00:39:39:0f:68:
ae:84:ea:d2:7a:13:9d:a1:07:e2:62:0f:98:bc:f4:
b7:d9:cf:8e:5c:48:59:d7:62:aa:56:15:d9:dd:3e:
c7:0f:27:86:9c:ad:19:1e:dd:3c:21:99:21:b8:d1:
fe:35:16:fe:32:52:c2:ca:c6:50:45:72:f6:77:93:
c1:1d:9b:28:12:f4:0b:42:3e:1f:61:0d:d6:48:1c:
4e:e4:2c:78:fb:b8:9b:4c:31:cb:4b:bb:43:c4:54:
bb:e6:62:58:39:f6:17:d1:88:be:11:ea:06:65:50:
9f:08:2f:5d:af:35:71:90:06:9f:8c:29:16:3a:e7:
82:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:16:97:59:11:CE:A9:9F:83:98:C4:4F:D8:3B:3B:DE:1E:35:5A:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17DA69A00D711F1BBAF90C8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.123.0/24
156.229.176.0/24
Signature Algorithm: sha256WithRSAEncryption
40:85:d5:7c:de:18:6f:cd:73:f9:61:19:4e:8b:d8:98:eb:4d:
9a:7f:9c:d0:3e:0d:55:38:c9:e6:67:69:08:c7:c6:78:61:62:
57:7f:fd:90:cb:06:16:38:e6:e8:6f:ee:6c:05:93:ab:ae:fe:
3f:cb:9e:a0:87:7a:77:cf:28:ad:dd:86:c8:27:15:53:92:e9:
f5:70:93:46:4e:b6:f9:9b:52:1a:11:a5:5b:85:a8:8b:b0:56:
4c:54:82:f7:01:3f:9d:b7:db:7f:29:53:7b:cd:c6:f5:6f:b0:
63:e7:fd:70:0e:ee:d2:ee:f9:58:78:d7:e5:ed:68:14:5d:b2:
a0:8b:5b:e8:fe:b7:31:61:db:ec:77:df:a6:a8:98:0b:c4:84:
7d:2a:24:19:ce:19:ae:d9:8d:da:59:83:75:54:f4:e4:ab:8e:
b4:5d:49:2e:4b:a8:21:5f:8b:b8:f9:1f:49:69:55:5d:55:8e:
a3:b4:15:77:72:04:17:63:7e:d0:3d:ce:63:e9:a7:57:5a:a9:
e8:3d:bb:c0:c8:10:d0:b2:91:6f:9d:52:8a:e6:80:e2:2f:63:
74:53:0a:36:48:43:a7:ce:d1:b3:f8:6d:a3:38:29:bb:9f:80:
12:c2:34:4f:05:b9:1d:c1:6d:54:67:67:4f:5d:3a:a6:6c:f2:
04:1e:57:fd
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAZukMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjAzMDgxMDA0WhcNMjYwMzA5MDgxMDA0WjAYMRYw
FAYDVQQDEw02OTgxYWQ2MS1hMGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzrA8ivj98TIvLqFSadvbevootDRcMe1a9++wwez9OiUrgbdReTTCrWJL
OG+zDlreh58TUKvvoTTD5RCFflXm7IHa9ciQFu8gqJ77t0cZNz6Tnu9zTkBb2JCb
Vw2vEbHPjsh+EHTUrcuyFzUcIJIJfCxxA+MjylsboKGWbuEG1UCwADk5D2iuhOrS
ehOdoQfiYg+YvPS32c+OXEhZ12KqVhXZ3T7HDyeGnK0ZHt08IZkhuNH+NRb+MlLC
ysZQRXL2d5PBHZsoEvQLQj4fYQ3WSBxO5Cx4+7ibTDHLS7tDxFS75mJYOfYX0Yi+
EeoGZVCfCC9drzVxkAafjCkWOueCawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgW
l1kRzqmfg5jET9g7O94eNVrUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTdEQTY5QTAwRDcxMUYxQkJBRjkwQzhEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOV7AwQAnOWwMA0GCSqGSIb3
DQEBCwUAA4IBAQBAhdV83hhvzXP5YRlOi9iY602af5zQPg1VOMnmZ2kIx8Z4YWJX
f/2QywYWOObob+5sBZOrrv4/y56gh3p3zyit3YbIJxVTkun1cJNGTrb5m1IaEaVb
haiLsFZMVIL3AT+dt9t/KVN7zcb1b7Bj5/1wDu7S7vlYeNfl7WgUXbKgi1vo/rcx
Ydvsd9+mqJgLxIR9KiQZzhmu2Y3aWYN1VPTkq460XUkuS6ghX4u4+R9JaVVdVY6j
tBV3cgQXY37QPc5j6adXWqnoPbvAyBDQspFvnVKK5oDiL2N0Uwo2SEOnztGz+G2j
OCm7n4ASwjRPBbkdwW1UZ2dPXTqmbPIEHlf9
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:17 2026 by rpki-client