Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7BE52C118F11F1B6525F7EDAE4EC9C.roa
File: FC7BE52C118F11F1B6525F7EDAE4EC9C.roa (raw, json)
Hash identifier: nD2HJKzhUQHuzj27mubpJx4jKlILJ88GPkm+EpNMLoI=
Subject key identifier: 4B:14:19:5B:1C:1E:52:EF:75:87:F2:86:0F:B1:A7:3B:90:5E:62:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A039
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7BE52C118F11F1B6525F7EDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:49:14 +0000
ROA not before: Tue 24 Feb 2026 14:49:10 +0000
ROA not after: Tue 31 Mar 2026 14:49:10 +0000
asID: 214238
IP address blocks: 156.239.21.0/24 maxlen: 24
156.239.22.0/24 maxlen: 24
156.241.40.0/24 maxlen: 24
156.241.42.0/24 maxlen: 24
156.241.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106553 (0x1a039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:49:10 2026 GMT
Not After : Mar 31 14:49:10 2026 GMT
Subject: CN=699dba6a-a9f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:25:84:8d:c9:c3:61:4f:eb:16:6e:81:b2:ce:
1c:b1:33:2f:76:1b:12:e2:b6:86:f8:65:05:c9:43:
d6:c7:ae:28:f4:4e:fa:f3:a2:21:b7:ee:fa:7a:3c:
a9:c7:c9:43:04:c2:0b:c1:58:ca:f8:81:6c:b7:ae:
cf:ed:48:65:4c:20:a2:7f:29:d5:ca:9f:63:40:67:
58:4e:2f:d9:2f:cc:00:b5:cd:64:94:df:09:35:5b:
13:64:be:04:bc:d3:7e:3e:56:6d:4c:f9:fc:48:86:
0a:eb:8b:b2:54:6f:69:71:95:ca:75:44:c8:b5:8b:
75:80:ae:92:ea:7a:8f:41:63:68:f8:3d:70:46:a4:
8a:63:b8:bb:5e:2e:03:bf:92:15:4b:f9:57:fe:90:
5d:2e:02:9e:43:b8:eb:62:03:f0:f5:fa:87:9b:22:
7b:60:d0:1b:23:da:15:c3:90:65:3c:67:bb:be:9d:
15:52:43:cc:64:5c:ac:aa:bf:b5:48:a7:54:6b:2f:
e8:a6:61:d3:dd:91:e3:22:be:f4:8d:92:54:2a:7e:
d0:a5:1d:92:cc:70:b1:e4:1c:35:a6:f1:49:58:cd:
83:1a:52:54:21:f1:35:97:d9:c8:ce:70:3b:16:ac:
bd:ea:92:e0:2e:a0:ad:a0:50:76:92:41:e7:78:60:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:19:5B:1C:1E:52:EF:75:87:F2:86:0F:B1:A7:3B:90:5E:62:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC7BE52C118F11F1B6525F7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.21.0-156.239.22.255
156.241.40.0/24
156.241.42.0/23
Signature Algorithm: sha256WithRSAEncryption
88:6f:06:9e:e1:db:d5:5a:0d:61:7a:72:18:17:8c:02:8a:87:
04:61:fd:f0:de:be:43:7d:c0:a4:d0:b5:8f:3f:0f:d8:46:1b:
e6:ab:04:55:be:0f:e4:82:a4:6c:37:4b:e9:f0:15:bf:7e:1b:
c7:2b:f1:4c:02:a6:ae:65:5f:f3:a5:b5:af:11:1d:a9:5e:96:
aa:ea:3d:5b:67:65:76:92:a0:56:40:48:c2:d5:c3:02:12:6f:
b3:00:be:15:fb:2f:26:a5:3f:db:4e:cb:7d:16:cd:e6:66:c9:
6f:14:be:d5:e9:88:4d:e6:45:7f:b4:f0:54:52:94:c8:6f:16:
3c:bd:6c:46:fe:d8:fc:e9:76:e0:31:45:6c:8d:27:83:0e:e8:
d7:77:95:f7:dd:eb:4b:5a:88:41:e3:14:97:19:0c:af:4b:01:
29:8a:e5:af:a7:3f:54:d8:df:0b:fb:12:5e:e2:2b:69:0c:40:
d6:b5:d6:ab:e3:dd:49:54:b8:d6:e1:be:1d:ad:0c:45:45:4e:
a7:a7:6d:df:f2:d3:37:d2:a2:56:40:30:4f:33:3b:b4:75:34:
ab:42:a0:3d:72:80:ea:c2:65:2c:34:28:f3:4e:fe:52:2b:5b:
0a:9b:23:87:9e:f4:32:1b:f6:b3:ce:1c:ff:28:cf:72:27:32:
99:b0:b9:2f
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAaA5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjI0MTQ0OTEwWhcNMjYwMzMxMTQ0OTEwWjAYMRYw
FAYDVQQDEw02OTlkYmE2YS1hOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA6SWEjcnDYU/rFm6Bss4csTMvdhsS4raG+GUFyUPWx64o9E7686Iht+76
ejypx8lDBMILwVjK+IFst67P7UhlTCCifynVyp9jQGdYTi/ZL8wAtc1klN8JNVsT
ZL4EvNN+PlZtTPn8SIYK64uyVG9pcZXKdUTItYt1gK6S6nqPQWNo+D1wRqSKY7i7
Xi4Dv5IVS/lX/pBdLgKeQ7jrYgPw9fqHmyJ7YNAbI9oVw5BlPGe7vp0VUkPMZFys
qr+1SKdUay/opmHT3ZHjIr70jZJUKn7QpR2SzHCx5Bw1pvFJWM2DGlJUIfE1l9nI
znA7Fqy96pLgLqCtoFB2kkHneGCHIQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEsU
GVscHlLvdYfyhg+xpzuQXmKnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQzdCRTUyQzExOEYxMUYxQjY1MjVGN0VEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACc7xUDBACc7xYDBACc8SgD
BAGc8SowDQYJKoZIhvcNAQELBQADggEBAIhvBp7h29VaDWF6chgXjAKKhwRh/fDe
vkN9wKTQtY8/D9hGG+arBFW+D+SCpGw3S+nwFb9+G8cr8UwCpq5lX/Olta8RHale
lqrqPVtnZXaSoFZASMLVwwISb7MAvhX7LyalP9tOy30WzeZmyW8UvtXpiE3mRX+0
8FRSlMhvFjy9bEb+2PzpduAxRWyNJ4MO6Nd3lffd60taiEHjFJcZDK9LASmK5a+n
P1TY3wv7El7iK2kMQNa11qvj3UlUuNbhvh2tDEVFTqenbd/y0zfSolZAME8zO7R1
NKtCoD1ygOrCZSw0KPNO/lIrWwqbI4ee9DIb9rPOHP8oz3InMpmwuS8=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:09 2026 by rpki-client