Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4F9B718FC2B11F0849D8E8DDAE4EC9C.roa
File: E4F9B718FC2B11F0849D8E8DDAE4EC9C.roa (raw, json)
Hash identifier: pBWDz/CzzCMs035HoFMGujQeOZc/ZYrrRq4foLOd6ts=
Subject key identifier: 0D:BD:FF:F0:45:CB:30:7C:33:EF:C0:89:5B:C2:D6:19:CE:59:99:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A4E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4F9B718FC2B11F0849D8E8DDAE4EC9C.roa
Signing time: Wed 28 Jan 2026 09:29:51 +0000
ROA not before: Wed 28 Jan 2026 09:29:44 +0000
ROA not after: Mon 02 Mar 2026 09:29:44 +0000
asID: 401783
IP address blocks: 156.227.132.0/24 maxlen: 24
156.227.136.0/24 maxlen: 24
156.227.139.0/24 maxlen: 24
156.227.140.0/24 maxlen: 24
156.227.159.0/24 maxlen: 24
156.231.4.0/24 maxlen: 24
156.231.5.0/24 maxlen: 24
156.233.66.0/24 maxlen: 24
156.253.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 09:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105038 (0x19a4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 09:29:44 2026 GMT
Not After : Mar 2 09:29:44 2026 GMT
Subject: CN=6979d70f-27e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:ef:fc:32:88:28:f7:47:db:91:07:ca:21:
b2:d4:7b:60:9a:23:54:25:3d:f9:9c:ed:11:df:9d:
20:ad:80:63:20:18:b2:97:8e:a2:b4:a3:7f:24:ec:
75:0e:96:17:8a:94:86:3b:d1:1f:51:22:ee:d3:47:
00:4a:c4:53:4a:9a:09:66:eb:b5:64:b7:b8:39:6c:
a7:81:4c:35:e1:57:6b:b2:4d:0d:a1:a8:1e:b9:8f:
c0:34:50:1a:18:69:73:56:65:90:88:fb:af:f8:40:
63:ab:a8:6d:1f:0c:b2:44:36:4a:bb:9c:34:56:c5:
8f:00:60:e1:bd:d9:73:c0:b2:f0:95:4b:5a:51:81:
29:ec:74:5c:4a:87:4f:1f:41:5e:60:a8:36:ab:43:
4f:a2:b4:fd:22:58:29:76:76:f8:0e:d4:30:b7:29:
85:97:3e:00:0f:d3:24:69:5a:14:58:a5:df:93:65:
a5:e6:b2:21:19:f6:08:40:83:53:61:df:84:66:0f:
c2:7a:3b:42:b3:37:5c:8f:1c:63:4e:4d:3d:4e:e7:
1d:98:96:bd:a1:8f:00:9b:5f:22:b6:97:62:f2:29:
c4:b1:24:06:5a:bb:cb:b6:04:78:5e:18:2d:57:ea:
15:c6:61:bd:7e:52:95:07:61:0a:f5:5d:36:ca:ef:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BD:FF:F0:45:CB:30:7C:33:EF:C0:89:5B:C2:D6:19:CE:59:99:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4F9B718FC2B11F0849D8E8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.132.0/24
156.227.136.0/24
156.227.139.0-156.227.140.255
156.227.159.0/24
156.231.4.0/23
156.233.66.0/24
156.253.187.0/24
Signature Algorithm: sha256WithRSAEncryption
14:b0:65:9b:85:4c:83:02:c4:47:e0:08:de:22:a7:c4:e0:3b:
3a:f7:78:56:44:87:1c:73:5a:35:ee:89:e1:47:c9:a5:c5:7a:
4f:3c:57:93:ae:87:65:e1:ca:97:70:9c:1d:36:c7:58:77:2c:
00:b9:db:2d:73:23:c3:82:c1:46:2d:be:23:62:88:48:2d:f6:
a6:97:98:4b:fe:ee:e9:6f:d3:8e:0f:dd:8d:02:ab:a2:0e:b0:
50:1d:87:ca:e8:b6:64:12:a7:16:f3:a8:19:2b:b8:7f:ce:fe:
68:c0:43:ad:9d:24:8d:81:c4:45:32:1c:cf:5a:a6:c5:6d:f6:
6b:29:52:56:c8:1f:d0:a4:07:bf:bc:46:b8:dc:3e:be:2b:1e:
e4:11:73:20:90:17:17:0f:98:4d:c0:d5:34:4b:11:52:b6:29:
a5:58:bb:d3:43:04:8c:fb:40:1b:0d:54:59:c4:38:4f:7e:34:
32:b1:e7:c6:8d:d3:7c:90:e0:ce:2b:85:7e:72:19:ba:69:64:
a4:c6:e8:26:91:57:29:68:45:fb:e8:59:1f:10:e0:a1:29:8d:
bd:df:8c:22:a4:11:d7:0e:1e:7d:a8:c7:13:58:d4:13:03:c8:
2f:ba:47:d1:b4:5e:65:4e:4a:64:e4:de:9d:68:e8:a0:7a:90:
39:78:f7:ba
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAZpOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMTI4MDkyOTQ0WhcNMjYwMzAyMDkyOTQ0WjAYMRYw
FAYDVQQDEw02OTc5ZDcwZi0yN2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwYHv/DKIKPdH25EHyiGy1HtgmiNUJT35nO0R350grYBjIBiyl46itKN/
JOx1DpYXipSGO9EfUSLu00cASsRTSpoJZuu1ZLe4OWyngUw14Vdrsk0NoageuY/A
NFAaGGlzVmWQiPuv+EBjq6htHwyyRDZKu5w0VsWPAGDhvdlzwLLwlUtaUYEp7HRc
SodPH0FeYKg2q0NPorT9Ilgpdnb4DtQwtymFlz4AD9MkaVoUWKXfk2Wl5rIhGfYI
QINTYd+EZg/CejtCszdcjxxjTk09TucdmJa9oY8Am18itpdi8inEsSQGWrvLtgR4
XhgtV+oVxmG9flKVB2EK9V02yu9syQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFA29
//BFyzB8M+/AiVvC1hnOWZmcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNEY5QjcxOEZDMkIxMUYwODQ5RDhFOEREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAnOOEAwQAnOOIMAwDBACc44sD
BACc44wDBACc458DBAGc5wQDBACc6UIDBACc/bswDQYJKoZIhvcNAQELBQADggEB
ABSwZZuFTIMCxEfgCN4ip8TgOzr3eFZEhxxzWjXuieFHyaXFek88V5Ouh2Xhypdw
nB02x1h3LAC52y1zI8OCwUYtviNiiEgt9qaXmEv+7ulv044P3Y0Cq6IOsFAdh8ro
tmQSpxbzqBkruH/O/mjAQ62dJI2BxEUyHM9apsVt9mspUlbIH9CkB7+8RrjcPr4r
HuQRcyCQFxcPmE3A1TRLEVK2KaVYu9NDBIz7QBsNVFnEOE9+NDKx58aN03yQ4M4r
hX5yGbppZKTG6CaRVyloRfvoWR8Q4KEpjb3fjCKkEdcOHn2oxxNY1BMDyC+6R9G0
XmVOSmTk3p1o6KB6kDl497o=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:39 2026 by rpki-client