Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5A09626B911F198B0448FDAE4EC9C.roa
File: 09B5A09626B911F198B0448FDAE4EC9C.roa (raw, json)
Hash identifier: f+1YA2YJHi+4ZNPj2IM/JOcTq1XIiGkzlPDyOsecRPQ=
Subject key identifier: C7:F0:47:56:00:EE:89:6F:E9:57:C2:80:C3:71:F6:62:8E:E6:DF:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5A09626B911F198B0448FDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 13:06:00 +0000
ROA not before: Mon 23 Mar 2026 13:05:54 +0000
ROA not after: Fri 23 Oct 2026 13:05:54 +0000
asID: 328608
IP address blocks: 156.229.174.0/24 maxlen: 24
156.243.134.0/23 maxlen: 24
156.243.136.0/23 maxlen: 24
156.243.138.0/24 maxlen: 24
156.243.145.0/24 maxlen: 24
156.243.146.0/23 maxlen: 24
156.243.148.0/23 maxlen: 24
156.244.204.0/22 maxlen: 24
156.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108272 (0x1a6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 13:05:54 2026 GMT
Not After : Oct 23 13:05:54 2026 GMT
Subject: CN=69c13ab8-9db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b2:e5:b7:e1:a3:7e:aa:ca:b1:99:79:5e:88:
b8:64:b7:bf:81:c1:84:ce:18:4f:bf:a0:53:b2:e4:
d4:b9:70:85:d8:a5:5d:07:f6:2a:41:de:e2:0d:80:
1b:50:7b:31:6f:b5:42:30:d9:3e:e4:c8:99:3c:40:
ec:eb:5e:69:73:2a:c3:38:f1:64:c8:a3:3a:bb:a5:
34:a7:a8:92:c0:50:fe:56:ad:92:20:6b:24:ee:b9:
b6:84:a9:63:a6:71:17:e4:a3:cb:7c:39:24:81:81:
08:88:13:61:91:d4:10:3d:35:cc:f9:00:39:9b:3d:
a2:c6:8b:97:3d:18:3b:54:04:23:69:86:ba:7b:e0:
31:3a:a2:ff:cf:d8:b1:8e:0a:85:55:9b:e8:5b:8c:
ab:94:a9:64:94:9a:83:51:85:53:3d:4c:24:7a:47:
41:81:b6:fd:68:fe:2f:58:83:a8:67:65:e6:98:8b:
06:93:1b:eb:40:e1:a7:5a:cc:df:71:53:78:4f:fc:
df:c2:a2:60:f0:1e:d7:25:86:0e:40:0f:2b:54:3a:
20:1d:c1:f8:29:46:cd:a1:11:b6:a9:d6:d9:2b:36:
76:8c:b8:ad:94:ad:25:d3:b0:fb:78:21:4e:14:27:
fe:9e:d9:22:c6:8d:d5:eb:c5:65:bc:43:e8:35:55:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F0:47:56:00:EE:89:6F:E9:57:C2:80:C3:71:F6:62:8E:E6:DF:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09B5A09626B911F198B0448FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.174.0/24
156.243.134.0-156.243.138.255
156.243.145.0-156.243.149.255
156.244.204.0-156.244.208.255
Signature Algorithm: sha256WithRSAEncryption
17:89:d5:15:10:f6:35:08:b3:48:5b:f9:5f:fb:d2:2e:5a:ca:
ae:d6:e1:20:16:33:09:7e:55:b0:3c:e3:66:0c:d7:a3:ea:24:
44:09:b2:6a:c5:c5:b8:6d:31:1c:be:3e:69:4b:17:d6:fa:7f:
48:ab:ee:a6:30:d0:b0:00:e7:17:72:86:b9:11:90:33:32:f8:
0f:16:87:37:c4:f3:5b:7a:18:5c:25:07:87:8f:d0:60:b6:d6:
65:31:55:d5:05:a7:d8:f2:c2:8c:73:63:21:84:b6:92:6a:5b:
f6:4c:c7:0e:7c:47:9a:9a:a6:d0:d4:9c:0e:39:08:53:9d:e3:
9c:cd:49:23:f9:26:80:71:6b:8c:cd:7f:e9:94:a0:0f:13:9e:
55:d2:3d:23:a2:f6:82:1f:1c:56:a3:d3:bc:a4:db:c6:2f:db:
92:3c:d9:9a:89:c5:5a:3d:f5:1c:f6:c4:c8:67:c3:29:b4:ed:
10:ed:83:37:af:d4:66:9a:20:76:e6:9d:9c:34:47:69:a0:58:
bd:49:85:65:1d:65:b7:05:6b:49:5f:cb:c9:7d:a6:9e:e2:a4:
95:dd:e7:6a:6c:1c:97:d4:4e:70:8b:8a:29:d5:a0:41:7e:8a:
a2:e8:26:fe:af:2f:d5:f9:5e:d3:b2:28:3c:9b:41:f8:96:a1:
2c:16:9a:a3
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAabwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIzMTMwNTU0WhcNMjYxMDIzMTMwNTU0WjAYMRYw
FAYDVQQDEw02OWMxM2FiOC05ZGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9rLlt+GjfqrKsZl5Xoi4ZLe/gcGEzhhPv6BTsuTUuXCF2KVdB/YqQd7i
DYAbUHsxb7VCMNk+5MiZPEDs615pcyrDOPFkyKM6u6U0p6iSwFD+Vq2SIGsk7rm2
hKljpnEX5KPLfDkkgYEIiBNhkdQQPTXM+QA5mz2ixouXPRg7VAQjaYa6e+AxOqL/
z9ixjgqFVZvoW4yrlKlklJqDUYVTPUwkekdBgbb9aP4vWIOoZ2XmmIsGkxvrQOGn
WszfcVN4T/zfwqJg8B7XJYYOQA8rVDogHcH4KUbNoRG2qdbZKzZ2jLitlK0l07D7
eCFOFCf+ntkixo3V68VlvEPoNVU04wIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFMfw
R1YA7olv6VfCgMNx9mKO5t/AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wOUI1QTA5NjI2QjkxMUYxOThCMDQ0OEZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAnOWuMAwDBAGc84YDBACc84ow
DAMEAJzzkQMEAZzzlDAMAwQCnPTMAwQAnPTQMA0GCSqGSIb3DQEBCwUAA4IBAQAX
idUVEPY1CLNIW/lf+9IuWsqu1uEgFjMJflWwPONmDNej6iRECbJqxcW4bTEcvj5p
SxfW+n9Iq+6mMNCwAOcXcoa5EZAzMvgPFoc3xPNbehhcJQeHj9BgttZlMVXVBafY
8sKMc2MhhLaSalv2TMcOfEeamqbQ1JwOOQhTneOczUkj+SaAcWuMzX/plKAPE55V
0j0jovaCHxxWo9O8pNvGL9uSPNmaicVaPfUc9sTIZ8MptO0Q7YM3r9RmmiB25p2c
NEdpoFi9SYVlHWW3BWtJX8vJfaae4qSV3edqbByX1E5wi4op1aBBfoqi6Cb+ry/V
+V7Tsig8m0H4lqEsFpqj
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:42 2026 by rpki-client