Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFC3FE32108011F1B21C1889DAE4EC9C.roa
File: FFC3FE32108011F1B21C1889DAE4EC9C.roa (raw, json)
Hash identifier: CcooYpBT8TBgsHbYZW7tG25otv6xpCxvHcwzqpMfX7E=
Subject key identifier: 79:32:53:24:E1:26:99:A6:41:6B:6D:62:1A:7E:A6:70:E4:CD:48:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFC3FE32108011F1B21C1889DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 06:29:26 +0000
ROA not before: Mon 23 Feb 2026 06:29:22 +0000
ROA not after: Mon 23 Mar 2026 06:29:22 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106431 (0x19fbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 06:29:22 2026 GMT
Not After : Mar 23 06:29:22 2026 GMT
Subject: CN=699bf3c6-7bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c6:6a:4c:cc:f4:2e:e3:36:2b:3f:de:b1:ec:
1e:87:63:99:60:8e:fb:5e:92:ef:44:8f:57:8e:59:
70:27:da:9c:f8:07:e7:40:36:73:fa:90:fc:03:b6:
f8:17:de:e6:df:d2:4c:ae:46:d6:7f:b4:03:c0:80:
b3:73:35:36:82:4e:ee:98:79:d7:bc:3f:10:35:18:
29:92:4e:1e:63:fa:c7:1c:2c:25:5f:a5:13:4c:7e:
18:74:18:8c:f7:3b:b4:38:32:1e:4a:31:51:42:1a:
83:6f:bf:47:6b:cf:6a:ad:e2:26:c3:20:26:53:da:
b0:3e:10:c9:31:67:0e:7a:72:7a:40:30:f6:7a:66:
2a:b7:9a:6e:f5:0f:93:ac:e3:fb:d3:94:f1:52:00:
67:74:6d:77:1f:2b:a4:64:78:f7:0b:4b:bc:54:fb:
25:12:f4:4f:cf:52:df:e7:96:73:3a:f6:b1:2c:1a:
de:79:c3:28:bd:09:54:89:1a:1b:b8:df:06:31:57:
6f:02:66:78:c4:a2:ed:8c:fb:0e:eb:e6:1e:68:43:
04:23:3b:7f:26:b6:2a:f9:84:90:4c:7b:bb:2c:2b:
5d:fe:50:dc:53:72:86:52:7b:da:e9:23:e8:5c:25:
dd:e2:8d:e6:11:27:d5:ee:fe:95:79:b4:32:d8:a5:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:32:53:24:E1:26:99:A6:41:6B:6D:62:1A:7E:A6:70:E4:CD:48:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFC3FE32108011F1B21C1889DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b0:b0:d7:9c:51:19:19:95:95:dc:92:84:03:46:ac:ca:96:
06:83:e9:8c:da:5d:65:0f:6b:de:b5:31:72:97:b9:e3:da:6f:
ce:4a:2d:d3:2e:3f:07:26:e9:31:2b:11:85:a3:77:09:53:6f:
f1:68:b7:11:1f:5c:2b:d6:73:21:ba:26:97:e9:6b:40:1d:3a:
0c:e6:1a:89:2d:41:8f:4d:bc:29:39:db:82:49:63:7c:87:a8:
a0:fa:ab:97:cc:33:dc:ae:4b:a1:45:75:d0:c9:d0:c3:80:c4:
59:39:5d:8b:22:ad:4c:93:dc:35:68:19:86:10:41:17:6c:e8:
c3:5b:fa:9b:9b:4d:1b:15:6a:20:b3:b4:fa:8b:ab:a9:d3:27:
a0:ca:bd:21:40:71:1c:d1:07:b1:b9:7a:c0:a0:10:49:8e:8b:
22:08:50:b7:ad:19:43:6c:58:0b:2d:9f:21:14:50:7d:49:af:
3f:8b:ab:33:e9:98:c9:f6:be:17:fe:44:3c:5a:b1:2c:49:cc:
22:9a:a6:1d:1a:66:25:fb:3b:9a:33:5d:a2:9d:c0:7d:25:99:
8e:c7:09:7d:ae:0b:92:cf:54:39:11:8f:f4:c8:d8:82:ae:1b:
90:7b:bb:3a:df:c0:97:5b:e8:54:f5:dd:91:1f:20:bc:eb:c2:
d4:82:18:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ+/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIzMDYyOTIyWhcNMjYwMzIzMDYyOTIyWjAYMRYw
FAYDVQQDEw02OTliZjNjNi03YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusZqTMz0LuM2Kz/eseweh2OZYI77XpLvRI9XjllwJ9qc+AfnQDZz+pD8
A7b4F97m39JMrkbWf7QDwICzczU2gk7umHnXvD8QNRgpkk4eY/rHHCwlX6UTTH4Y
dBiM9zu0ODIeSjFRQhqDb79Ha89qreImwyAmU9qwPhDJMWcOenJ6QDD2emYqt5pu
9Q+TrOP705TxUgBndG13HyukZHj3C0u8VPslEvRPz1Lf55ZzOvaxLBreecMovQlU
iRobuN8GMVdvAmZ4xKLtjPsO6+YeaEMEIzt/JrYq+YSQTHu7LCtd/lDcU3KGUnva
6SPoXCXd4o3mESfV7v6VebQy2KWt5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHky
UyThJpmmQWttYhp+pnDkzUgFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRkMzRkUzMjEwODAxMUYxQjIxQzE4ODlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPc+MA0GCSqGSIb3DQEBCwUA
A4IBAQA/sLDXnFEZGZWV3JKEA0asypYGg+mM2l1lD2vetTFyl7nj2m/OSi3TLj8H
JukxKxGFo3cJU2/xaLcRH1wr1nMhuiaX6WtAHToM5hqJLUGPTbwpOduCSWN8h6ig
+quXzDPcrkuhRXXQydDDgMRZOV2LIq1Mk9w1aBmGEEEXbOjDW/qbm00bFWogs7T6
i6up0yegyr0hQHEc0QexuXrAoBBJjosiCFC3rRlDbFgLLZ8hFFB9Sa8/i6sz6ZjJ
9r4X/kQ8WrEsScwimqYdGmYl+zuaM12incB9JZmOxwl9rguSz1Q5EY/0yNiCrhuQ
e7s638CXW+hU9d2RHyC868LUghiT
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:39 2026 by rpki-client