Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EADB3DA2149311F1946B1E85DAE4EC9C.roa
File: EADB3DA2149311F1946B1E85DAE4EC9C.roa (raw, json)
Hash identifier: EZBUJuTDhdLCNTOSolQTvqwbzfOiWZ3gAE2gDhv1z8o=
Subject key identifier: B6:82:8D:28:F5:92:31:67:2F:B8:64:AC:8E:1A:08:9F:C7:3E:EE:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A15B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EADB3DA2149311F1946B1E85DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 10:54:56 +0000
ROA not before: Sat 28 Feb 2026 10:54:51 +0000
ROA not after: Sat 04 Apr 2026 10:54:51 +0000
asID: 216047
IP address blocks: 156.234.118.0/24 maxlen: 24
156.234.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106843 (0x1a15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 10:54:51 2026 GMT
Not After : Apr 4 10:54:51 2026 GMT
Subject: CN=69a2c980-fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:41:35:46:7c:fb:f6:c8:68:11:9c:25:37:35:
93:49:7a:f9:e0:16:87:20:35:14:61:88:88:78:a6:
f8:78:c0:d1:7a:8c:a1:9e:6b:e0:d5:2e:4f:24:6b:
09:7f:d8:f7:02:9e:04:2a:07:8b:ef:d4:52:10:8a:
95:33:c5:06:0d:32:81:29:0e:d8:04:92:b1:58:e5:
24:c4:87:bc:34:33:7a:30:b7:8b:c8:21:1e:f5:90:
ca:41:b3:ee:bc:08:9e:7c:23:3f:96:5a:3c:d5:e8:
46:50:7b:02:c0:fb:52:01:de:d5:10:58:38:5c:63:
e9:39:7a:fa:73:7e:e4:1d:8e:23:73:fc:53:39:b6:
7a:c2:56:af:2d:7d:e7:05:37:78:d5:36:14:8d:bf:
50:ee:86:ee:df:3e:ad:fc:53:ad:49:c6:51:60:c0:
8a:99:53:40:1d:e1:eb:20:11:1d:f0:17:01:3f:84:
b0:32:20:ef:51:c6:6a:12:c5:08:51:90:1a:32:45:
9e:18:38:8c:d8:e4:57:84:df:2e:2f:bc:a6:5c:a7:
c7:36:60:cd:47:54:7b:8c:41:b9:41:4e:de:47:70:
65:af:d5:7a:31:59:c7:64:92:01:e2:5f:26:e4:6c:
a0:53:fc:0d:17:32:0e:14:10:82:2a:c8:85:24:af:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:82:8D:28:F5:92:31:67:2F:B8:64:AC:8E:1A:08:9F:C7:3E:EE:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EADB3DA2149311F1946B1E85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.234.118.0/24
156.234.123.0/24
Signature Algorithm: sha256WithRSAEncryption
58:de:2d:73:6e:3f:c9:7a:6e:9b:18:34:30:0a:e1:20:d3:62:
a3:0c:86:36:de:8f:07:04:93:bf:2c:3f:1b:f3:2c:ff:4d:58:
22:22:3c:41:82:f6:54:fd:9a:7d:32:2a:96:fc:7c:99:bb:72:
a6:f5:4e:ad:3e:70:0b:09:cf:f3:05:e0:7a:65:13:64:1b:a2:
36:ff:c1:ca:7e:ec:c2:92:ef:11:60:26:f7:aa:cc:1b:8e:13:
db:de:e6:7f:74:23:f6:ac:08:2c:c7:96:66:b6:d7:d0:9d:66:
2e:be:d5:c3:05:ea:d0:fc:43:35:a8:12:83:da:b6:f7:b9:f6:
a3:4a:5e:d2:25:10:3e:8f:b6:21:3a:49:ac:f7:9b:73:24:48:
89:73:86:f2:22:ac:bb:26:2e:36:09:af:62:43:7b:c6:6e:e7:
76:2f:c1:63:60:34:a4:3b:71:a0:ed:85:64:4d:bb:43:78:57:
d1:d3:19:c2:03:c5:a2:2b:41:b3:76:e3:b2:a2:92:1a:cf:4c:
c6:43:c3:1e:27:03:ad:64:47:e8:6e:1c:d7:c6:88:e4:88:12:
2c:e3:7f:71:41:4d:0b:1a:96:95:11:53:99:85:96:17:ca:d9:
80:ce:8b:16:42:1d:e0:70:56:a7:ee:fa:73:d1:0c:06:26:05:
4b:34:ff:6b
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAaFbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI4MTA1NDUxWhcNMjYwNDA0MTA1NDUxWjAYMRYw
FAYDVQQDEw02OWEyYzk4MC1mZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAz0E1Rnz79shoEZwlNzWTSXr54BaHIDUUYYiIeKb4eMDReoyhnmvg1S5P
JGsJf9j3Ap4EKgeL79RSEIqVM8UGDTKBKQ7YBJKxWOUkxIe8NDN6MLeLyCEe9ZDK
QbPuvAiefCM/llo81ehGUHsCwPtSAd7VEFg4XGPpOXr6c37kHY4jc/xTObZ6wlav
LX3nBTd41TYUjb9Q7obu3z6t/FOtScZRYMCKmVNAHeHrIBEd8BcBP4SwMiDvUcZq
EsUIUZAaMkWeGDiM2ORXhN8uL7ymXKfHNmDNR1R7jEG5QU7eR3Blr9V6MVnHZJIB
4l8m5GygU/wNFzIOFBCCKsiFJK+BHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaC
jSj1kjFnL7hkrI4aCJ/HPu7FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQURCM0RBMjE0OTMxMUYxOTQ2QjFFODVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOp2AwQAnOp7MA0GCSqGSIb3
DQEBCwUAA4IBAQBY3i1zbj/Jem6bGDQwCuEg02KjDIY23o8HBJO/LD8b8yz/TVgi
IjxBgvZU/Zp9MiqW/HyZu3Km9U6tPnALCc/zBeB6ZRNkG6I2/8HKfuzCku8RYCb3
qswbjhPb3uZ/dCP2rAgsx5ZmttfQnWYuvtXDBerQ/EM1qBKD2rb3ufajSl7SJRA+
j7YhOkms95tzJEiJc4byIqy7Ji42Ca9iQ3vGbud2L8FjYDSkO3Gg7YVkTbtDeFfR
0xnCA8WiK0GzduOyopIaz0zGQ8MeJwOtZEfobhzXxojkiBIs439xQU0LGpaVEVOZ
hZYXytmAzosWQh3gcFan7vpz0QwGJgVLNP9r
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:46 2026 by rpki-client