Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E58926C0097B11F18B529EDDDAE4EC9C.roa
File: E58926C0097B11F18B529EDDDAE4EC9C.roa (raw, json)
Hash identifier: TDbC7ghFt3Fqw6vqnDj+DbXWFtlcgYVMaTBopZqk1jo=
Subject key identifier: 2D:D7:DD:2B:52:05:DE:04:BF:12:40:90:FA:17:54:F3:8F:7C:C4:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E58926C0097B11F18B529EDDDAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:05:17 +0000
ROA not before: Sat 14 Feb 2026 08:05:11 +0000
ROA not after: Sun 22 Mar 2026 08:05:11 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
156.225.16.0/21 maxlen: 24
156.225.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105862 (0x19d86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 08:05:11 2026 GMT
Not After : Mar 22 08:05:11 2026 GMT
Subject: CN=69902cbc-99c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:7f:a2:b4:81:00:cf:6f:d4:8b:4c:4e:56:
b2:44:6b:a7:c5:e9:c4:f3:3e:93:00:12:22:79:d4:
59:84:1e:35:96:f7:3d:23:c5:a7:91:b3:ce:2d:55:
3b:40:10:30:aa:79:1f:60:c2:e8:4a:76:02:07:49:
aa:ea:18:2e:7f:a4:e8:21:e2:48:88:f0:c3:ea:14:
a3:0b:87:09:0c:f5:40:29:38:79:3f:1f:c8:db:8a:
6a:dc:b0:55:60:43:e4:08:12:26:18:1a:70:b7:20:
29:97:7f:70:5a:b0:7d:33:cc:5e:b0:02:1d:c8:12:
41:36:21:bd:01:15:1c:ee:ad:87:11:9a:02:bb:8f:
1c:99:8f:87:3a:90:3b:48:62:24:d7:31:5e:a5:e4:
e2:e2:9d:43:37:13:9d:c0:f5:1b:4f:48:77:93:f9:
80:0c:b6:de:79:ee:15:ef:5c:5e:38:45:ac:7f:2d:
bd:86:67:cb:1c:76:38:46:4b:7d:7d:1c:17:af:7f:
89:93:93:0c:7c:b4:01:9b:7c:64:0c:38:e9:1c:a3:
54:2d:ff:41:f3:c2:1e:a4:68:90:02:4e:0b:45:8d:
1b:1e:66:db:71:8c:b5:f9:0a:0e:18:07:e2:ab:65:
61:f0:44:52:eb:06:1e:40:46:64:c8:f3:bf:97:56:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D7:DD:2B:52:05:DE:04:BF:12:40:90:FA:17:54:F3:8F:7C:C4:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E58926C0097B11F18B529EDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
11:8d:f8:ce:1d:6b:1e:7a:52:1f:35:40:dc:db:2f:b3:93:de:
ed:87:73:da:9f:0b:68:3d:f9:27:1a:c2:af:38:d0:77:1e:58:
24:b5:80:7c:86:d3:14:fe:0e:e7:89:00:2b:6c:40:17:b4:f6:
09:92:5a:97:b3:06:4d:fb:e5:9a:ed:37:78:f7:c6:07:47:66:
15:2b:21:b4:5c:08:9e:22:00:21:c5:ba:36:55:7f:fe:05:6f:
e1:4d:2a:fd:aa:af:36:93:c2:ce:e4:9b:2d:ea:7f:0c:d0:c3:
bb:57:93:24:1b:d1:d8:0b:f2:68:0e:73:50:96:de:43:d4:a7:
7d:26:98:e0:02:30:17:34:6f:7a:7e:76:ba:08:3f:22:ac:15:
1b:f4:cd:fd:78:e5:7b:e4:28:12:5d:83:86:f2:90:14:3c:fc:
fc:11:38:40:c8:79:59:a3:dd:fa:97:f7:61:66:03:28:ab:c8:
d9:c3:11:6f:72:76:17:bd:23:36:b1:65:a3:cb:b1:26:48:0b:
a0:aa:d3:87:ac:a3:ea:e2:e8:a6:5c:51:9d:10:1a:ee:83:11:
ab:95:91:be:19:fa:5a:1e:9c:a4:2f:89:28:a4:1f:39:ab:c3:
92:d6:6e:31:7e:39:ca:b2:9e:97:1f:5a:83:d6:2b:54:4b:26:
c2:f3:bd:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ2GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE0MDgwNTExWhcNMjYwMzIyMDgwNTExWjAYMRYw
FAYDVQQDEw02OTkwMmNiYy05OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlUh/orSBAM9v1ItMTlayRGunxenE8z6TABIiedRZhB41lvc9I8WnkbPO
LVU7QBAwqnkfYMLoSnYCB0mq6hguf6ToIeJIiPDD6hSjC4cJDPVAKTh5Px/I24pq
3LBVYEPkCBImGBpwtyApl39wWrB9M8xesAIdyBJBNiG9ARUc7q2HEZoCu48cmY+H
OpA7SGIk1zFepeTi4p1DNxOdwPUbT0h3k/mADLbeee4V71xeOEWsfy29hmfLHHY4
Rkt9fRwXr3+Jk5MMfLQBm3xkDDjpHKNULf9B88IepGiQAk4LRY0bHmbbcYy1+QoO
GAfiq2Vh8ERS6wYeQEZkyPO/l1ZO2wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFC3X
3StSBd4EvxJAkPoXVPOPfMQ/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNTg5MjZDMDA5N0IxMUYxOEI1MjlFREREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQARjfjOHWseelIfNUDc2y+zk97th3PanwtoPfknGsKvONB3HlgktYB8htMU
/g7niQArbEAXtPYJklqXswZN++Wa7Td498YHR2YVKyG0XAieIgAhxbo2VX/+BW/h
TSr9qq82k8LO5Jst6n8M0MO7V5MkG9HYC/JoDnNQlt5D1Kd9JpjgAjAXNG96fna6
CD8irBUb9M39eOV75CgSXYOG8pAUPPz8EThAyHlZo936l/dhZgMoq8jZwxFvcnYX
vSM2sWWjy7EmSAugqtOHrKPq4uimXFGdEBrugxGrlZG+GfpaHpykL4kopB85q8OS
1m4xfjnKsp6XH1qD1itUSybC872Q
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:35 2026 by rpki-client