Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7DF15880F0111F19B3709D7DAE4EC9C.roa
File: F7DF15880F0111F19B3709D7DAE4EC9C.roa (raw, json)
Hash identifier: DLeto0kgTAJUG1dPd9vD2C0Lse2SjLyWp66xe3H9rg0=
Subject key identifier: DF:78:F2:8D:E3:9E:9A:39:C7:33:10:12:D1:59:53:E5:72:5D:4D:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7DF15880F0111F19B3709D7DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:47:35 +0000
ROA not before: Sat 21 Feb 2026 08:47:31 +0000
ROA not after: Sat 28 Mar 2026 08:47:31 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
156.246.138.0/24 maxlen: 24
156.246.139.0/24 maxlen: 24
156.246.140.0/24 maxlen: 24
156.246.141.0/24 maxlen: 24
156.246.142.0/24 maxlen: 24
156.246.143.0/24 maxlen: 24
156.246.144.0/24 maxlen: 24
156.246.145.0/24 maxlen: 24
156.246.146.0/24 maxlen: 24
156.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106294 (0x19f36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 08:47:31 2026 GMT
Not After : Mar 28 08:47:31 2026 GMT
Subject: CN=69997127-a58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:7a:bc:bb:a5:28:02:c1:30:18:b9:a7:2b:
7d:c7:01:3d:da:64:ce:77:e2:1b:22:bb:e4:92:e4:
89:89:59:ca:7a:e8:43:c0:5b:e6:59:6b:27:e4:34:
4b:19:f9:59:c6:d8:70:d9:35:a0:e7:38:09:05:78:
c0:98:42:95:ee:d8:76:8d:c5:1f:c6:8a:1b:0b:09:
57:38:a4:75:ae:80:12:83:fc:13:d6:38:3d:31:d9:
89:2f:ab:5f:a6:1e:10:eb:89:2b:71:cd:6b:3b:17:
72:45:c1:e3:20:62:1a:a6:bb:9d:e3:f2:6c:85:c1:
f7:d4:37:3f:98:53:83:d1:a8:f6:4a:a8:78:45:51:
8c:24:cb:cc:93:2a:99:2e:1a:24:87:6b:64:5b:b6:
0f:07:d8:5b:e6:4a:60:24:bd:cc:33:8a:d3:6a:70:
46:92:79:b2:03:26:03:5b:b4:b1:4a:cf:5b:e9:76:
c3:76:86:3b:5b:7a:2a:6f:08:6f:ed:5b:13:92:74:
f0:06:71:28:bb:31:a4:26:fe:6e:7d:71:5a:60:6c:
bb:e2:54:7f:86:39:aa:5c:02:7d:38:69:9c:bb:34:
16:c9:6a:f9:50:ae:af:6a:ee:3e:71:22:44:b9:be:
20:fb:6c:40:15:11:5b:9b:d7:26:60:85:8f:e9:be:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:78:F2:8D:E3:9E:9A:39:C7:33:10:12:D1:59:53:E5:72:5D:4D:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7DF15880F0111F19B3709D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.147.255
Signature Algorithm: sha256WithRSAEncryption
6d:a8:1b:96:24:a2:52:14:db:95:0d:ef:fc:73:0f:39:8c:d0:
da:eb:58:53:0f:d4:01:30:a5:3a:3b:cd:09:46:33:46:01:20:
42:61:ea:80:c0:85:29:1c:58:12:0e:31:53:d5:68:c2:ef:c8:
29:81:ee:45:1c:af:9a:2d:31:b3:23:c8:da:a4:84:c0:fb:1d:
68:94:6e:99:62:e1:17:ff:24:e9:37:55:fa:26:f7:92:35:aa:
8f:9d:dc:ec:b8:44:f9:7c:d4:a0:da:67:36:9a:d2:e9:f3:49:
3f:9e:09:99:a4:b3:a7:99:9c:f6:72:1d:3e:3c:1a:4a:48:05:
45:c7:f9:ed:6f:bb:4e:54:f6:bf:53:78:7a:28:f4:a3:ae:b3:
f2:6c:67:98:5a:17:c8:f9:3a:f0:fa:7a:89:e3:90:d0:15:ce:
ed:42:9b:60:1f:75:a9:fb:74:f3:f5:09:79:4a:ab:97:42:06:
f2:78:bf:a8:2e:ee:67:57:55:74:9f:a5:2d:3f:f4:f5:f5:ac:
af:ae:9e:12:e7:7a:b0:5c:cf:44:0c:e8:26:26:ed:22:7a:ca:
e6:83:80:6d:c0:4e:5b:74:d0:0e:08:c5:f2:fb:24:8b:24:f5:
7f:2b:ef:36:12:cb:cd:cc:02:6f:f0:7e:93:ec:03:44:03:cb:
da:94:ea:01
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZ82MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMDg0NzMxWhcNMjYwMzI4MDg0NzMxWjAYMRYw
FAYDVQQDEw02OTk5NzEyNy1hNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzpZ6vLulKALBMBi5pyt9xwE92mTOd+IbIrvkkuSJiVnKeuhDwFvmWWsn
5DRLGflZxthw2TWg5zgJBXjAmEKV7th2jcUfxoobCwlXOKR1roASg/wT1jg9MdmJ
L6tfph4Q64krcc1rOxdyRcHjIGIaprud4/JshcH31Dc/mFOD0aj2Sqh4RVGMJMvM
kyqZLhokh2tkW7YPB9hb5kpgJL3MM4rTanBGknmyAyYDW7SxSs9b6XbDdoY7W3oq
bwhv7VsTknTwBnEouzGkJv5ufXFaYGy74lR/hjmqXAJ9OGmcuzQWyWr5UK6vau4+
cSJEub4g+2xAFRFbm9cmYIWP6b4IAwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN94
8o3jnpo5xzMQEtFZU+VyXU0RMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GN0RGMTU4ODBGMDExMUYxOUIzNzA5RDdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAec9oADBAKc9pAwDQYJKoZI
hvcNAQELBQADggEBAG2oG5YkolIU25UN7/xzDzmM0NrrWFMP1AEwpTo7zQlGM0YB
IEJh6oDAhSkcWBIOMVPVaMLvyCmB7kUcr5otMbMjyNqkhMD7HWiUbpli4Rf/JOk3
Vfom95I1qo+d3Oy4RPl81KDaZzaa0unzST+eCZmks6eZnPZyHT48GkpIBUXH+e1v
u05U9r9TeHoo9KOus/JsZ5haF8j5OvD6eonjkNAVzu1Cm2Afdan7dPP1CXlKq5dC
BvJ4v6gu7mdXVXSfpS0/9PX1rK+unhLnerBcz0QM6CYm7SJ6yuaDgG3ATlt00A4I
xfL7JIsk9X8r7zYSy83MAm/wfpPsA0QDy9qU6gE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:47 2026 by rpki-client