Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9CE4CCA108711F1A6D98BB1DAE4EC9C.roa
File: E9CE4CCA108711F1A6D98BB1DAE4EC9C.roa (raw, json)
Hash identifier: Qaxn6/U0Xh22cIHdLvYqGDattVIeUqupXSeReHcLl3w=
Subject key identifier: CA:1E:F3:03:CE:22:4A:0F:6A:F7:57:FB:20:AA:6C:82:49:9C:48:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9CE4CCA108711F1A6D98BB1DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:18:55 +0000
ROA not before: Mon 23 Feb 2026 07:18:51 +0000
ROA not after: Fri 06 Mar 2026 07:18:51 +0000
asID: 401783
IP address blocks: 156.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106443 (0x19fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:18:51 2026 GMT
Not After : Mar 6 07:18:51 2026 GMT
Subject: CN=699bff5f-70ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:b9:80:1f:97:ac:bd:8d:97:55:06:9a:d1:
df:dc:00:a5:19:eb:c6:98:c9:66:71:fc:a6:c4:05:
6a:3d:49:de:a4:e6:a4:9f:b5:a7:de:79:94:70:8b:
1e:db:56:8d:ef:1d:a9:23:67:6b:23:2e:bb:0a:fa:
de:00:09:29:82:e4:fc:68:3d:65:6c:b3:c9:5f:cf:
31:db:cb:23:15:a8:a0:cd:4e:cf:0a:04:b9:13:87:
07:e6:5d:e0:e1:58:cc:a8:12:b8:32:d8:78:e2:a1:
9e:69:5d:dd:f8:4a:f4:ec:81:e7:eb:0c:63:9f:1c:
1d:28:82:8e:70:85:7c:61:ba:c5:cc:e6:39:36:0a:
62:39:0b:41:0a:5b:4c:ed:48:fb:db:9d:a3:12:3d:
f5:9e:83:1a:41:ca:08:01:46:bb:05:de:80:5d:9c:
59:16:62:30:01:66:56:e9:b3:d0:3b:db:1d:e3:91:
d4:01:03:ca:59:1f:6a:bb:74:c5:33:f7:fd:16:33:
2c:50:89:a0:f2:53:e1:a3:bf:e3:27:5f:8f:4f:6c:
43:f1:2e:d0:23:a7:94:b3:db:0c:b6:d0:84:7a:d3:
fd:38:8e:b8:a5:fa:e8:83:5c:3b:34:f0:e4:60:b3:
0a:0e:5d:b6:e3:c2:b0:98:9b:99:48:5f:41:27:b0:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:F3:03:CE:22:4A:0F:6A:F7:57:FB:20:AA:6C:82:49:9C:48:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9CE4CCA108711F1A6D98BB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f7:9a:78:24:b4:c9:dd:1d:c4:a2:7d:7c:18:29:3a:cb:9f:
f2:c1:c1:ca:2a:b6:c9:2d:36:9b:5f:df:b1:e4:c9:d2:a4:f6:
e4:78:b0:a9:90:f3:5a:c6:c3:51:ef:15:82:79:62:67:72:88:
e1:c0:15:b0:fd:44:b1:0b:20:ad:4c:a6:e7:d4:dc:eb:cf:11:
be:83:19:e2:14:50:cf:dd:da:06:66:91:1b:45:f4:6f:76:a4:
39:4a:82:f6:80:57:9c:97:8c:f7:05:d3:4a:23:3c:e9:2f:5c:
07:b0:90:e2:42:3e:19:5d:d1:d0:9b:86:24:fe:d8:43:84:f6:
d4:b4:c7:95:06:b9:e5:e7:5d:b9:db:5d:03:ac:da:3b:a1:bb:
4f:62:c2:c3:6f:67:b3:2f:76:30:0d:91:9c:e8:01:84:0b:ef:
17:90:c5:c7:c5:74:1d:80:ad:a3:75:aa:6f:b9:2b:9c:20:2b:
2c:7c:2d:d5:2e:8a:70:7d:8f:a8:66:bf:d7:28:ec:db:2c:b1:
63:89:a2:5a:6c:a6:5c:dc:80:53:df:ca:91:15:55:ea:80:b8:
b7:0e:19:46:6e:19:a5:76:eb:af:cd:8f:d4:27:44:de:35:96:
18:71:39:9e:ee:3a:81:bf:64:42:26:9d:2d:5c:86:34:38:4b:
47:f1:72:84
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ/LMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIzMDcxODUxWhcNMjYwMzA2MDcxODUxWjAYMRYw
FAYDVQQDEw02OTliZmY1Zi03MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4wu5gB+XrL2Nl1UGmtHf3AClGevGmMlmcfymxAVqPUnepOakn7Wn3nmU
cIse21aN7x2pI2drIy67CvreAAkpguT8aD1lbLPJX88x28sjFaigzU7PCgS5E4cH
5l3g4VjMqBK4Mth44qGeaV3d+Er07IHn6wxjnxwdKIKOcIV8YbrFzOY5NgpiOQtB
CltM7Uj7252jEj31noMaQcoIAUa7Bd6AXZxZFmIwAWZW6bPQO9sd45HUAQPKWR9q
u3TFM/f9FjMsUImg8lPho7/jJ1+PT2xD8S7QI6eUs9sMttCEetP9OI64pfrog1w7
NPDkYLMKDl2248KwmJuZSF9BJ7CmgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMoe
8wPOIkoPavdX+yCqbIJJnEjkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOUNFNENDQTEwODcxMUYxQTZEOThCQjFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOagMA0GCSqGSIb3DQEBCwUA
A4IBAQCO95p4JLTJ3R3Eon18GCk6y5/ywcHKKrbJLTabX9+x5MnSpPbkeLCpkPNa
xsNR7xWCeWJncojhwBWw/USxCyCtTKbn1NzrzxG+gxniFFDP3doGZpEbRfRvdqQ5
SoL2gFecl4z3BdNKIzzpL1wHsJDiQj4ZXdHQm4Yk/thDhPbUtMeVBrnl5125210D
rNo7obtPYsLDb2ezL3YwDZGc6AGEC+8XkMXHxXQdgK2jdapvuSucICssfC3VLopw
fY+oZr/XKOzbLLFjiaJabKZc3IBT38qRFVXqgLi3DhlGbhmlduuvzY/UJ0TeNZYY
cTme7jqBv2RCJp0tXIY0OEtH8XKE
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:45 2026 by rpki-client