Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3A2B28269911F1A2AC7BD7DAE4EC9C.roa
File: 0B3A2B28269911F1A2AC7BD7DAE4EC9C.roa (raw, json)
Hash identifier: ds/1kOb+QIfowPSRe6riA57ZdzJZSB5NApi4x5QkXKs=
Subject key identifier: 82:E1:2E:25:32:DC:27:82:DF:97:34:F2:57:86:31:F0:F5:93:48:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3A2B28269911F1A2AC7BD7DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 09:16:59 +0000
ROA not before: Mon 23 Mar 2026 09:16:54 +0000
ROA not after: Thu 30 Apr 2026 09:16:54 +0000
asID: 134365
IP address blocks: 156.245.200.0/22 maxlen: 24
156.245.200.0/24 maxlen: 24
156.245.201.0/24 maxlen: 24
156.245.202.0/24 maxlen: 24
156.245.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108249 (0x1a6d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 09:16:54 2026 GMT
Not After : Apr 30 09:16:54 2026 GMT
Subject: CN=69c1050b-b725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ca:42:5d:a7:69:50:0d:96:5a:8b:27:45:1e:
92:76:07:a8:56:3a:0b:b2:b2:0e:1a:32:6b:3d:00:
7e:51:74:2f:b5:6b:25:d5:9e:f2:ae:c8:61:0f:35:
f8:49:4a:d4:e2:2f:0d:f3:b9:8a:7e:dc:fe:e2:c5:
42:16:60:ca:a4:0f:89:45:14:e8:f8:fc:05:98:17:
d0:fc:7d:72:3f:d7:e4:8c:99:13:89:7d:cb:3b:ee:
9e:f8:6c:d4:5b:5c:90:2c:a4:0f:40:8b:83:9b:a9:
a8:6f:98:0f:ff:8d:2a:85:b1:79:81:ef:fd:d1:e0:
07:e6:1a:19:4a:3b:62:28:3e:6a:32:0a:60:b0:6f:
bc:8d:95:98:57:1f:68:5d:f7:7a:d7:ad:d8:37:bb:
0f:86:5e:99:b8:b1:49:0f:ab:bf:68:a1:8d:0f:6e:
92:cd:ab:97:df:3b:06:70:88:4e:06:b9:9d:dd:82:
e5:35:05:04:50:db:c8:67:2b:af:7e:32:d2:f7:10:
b8:6e:55:39:88:fe:0b:81:f7:20:e7:9b:98:d7:53:
d8:86:be:b8:44:e9:82:19:4f:0e:8e:3a:b6:c6:db:
e0:3b:46:cd:e9:e6:f9:af:10:87:39:24:19:6d:e7:
7e:95:7f:2b:12:b0:04:8e:d4:8f:9e:76:45:d5:5f:
ed:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E1:2E:25:32:DC:27:82:DF:97:34:F2:57:86:31:F0:F5:93:48:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B3A2B28269911F1A2AC7BD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.200.0/22
Signature Algorithm: sha256WithRSAEncryption
89:2b:71:8f:0c:32:5d:17:a1:d2:cf:41:bc:6c:0b:38:78:c6:
1f:be:0b:cc:28:8f:a6:bb:2b:7c:00:b1:a5:11:b3:98:53:44:
74:e9:71:8b:44:16:30:26:36:f6:5c:19:d6:09:51:41:1f:e7:
a2:7d:4e:09:02:30:8e:b0:b6:0e:40:df:f6:3d:bb:6c:c1:df:
55:c1:70:9d:05:ec:f6:dc:ad:4b:92:94:87:d1:e5:cc:6a:58:
49:d3:89:a9:23:2e:66:bb:4b:fd:19:15:a9:9f:01:ce:6c:b6:
74:b9:43:db:31:8b:57:ea:c1:e9:6e:c2:98:7a:b5:8d:fd:c7:
0e:45:1c:30:02:45:c8:db:fd:7b:e0:a5:ca:8e:9d:e7:8b:0a:
3e:ed:81:3b:45:42:01:94:40:3f:be:55:62:9b:1a:38:d8:09:
29:84:0c:c3:e0:3c:10:4d:87:73:9a:18:89:00:08:ea:e0:f3:
4d:f8:fe:88:64:52:7e:38:3e:d5:c5:0f:31:1b:40:60:06:23:
d5:ac:4a:e2:df:4f:eb:4c:ca:6c:a4:98:b4:7d:80:1c:07:3b:
c9:6d:45:49:cd:01:28:23:16:b8:26:b9:06:3b:e4:de:0e:5a:
4e:d9:ee:c4:60:af:88:92:5a:dc:d8:88:98:af:c9:27:04:fc:
04:27:15:c0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAabZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIzMDkxNjU0WhcNMjYwNDMwMDkxNjU0WjAYMRYw
FAYDVQQDEw02OWMxMDUwYi1iNzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8cpCXadpUA2WWosnRR6SdgeoVjoLsrIOGjJrPQB+UXQvtWsl1Z7yrshh
DzX4SUrU4i8N87mKftz+4sVCFmDKpA+JRRTo+PwFmBfQ/H1yP9fkjJkTiX3LO+6e
+GzUW1yQLKQPQIuDm6mob5gP/40qhbF5ge/90eAH5hoZSjtiKD5qMgpgsG+8jZWY
Vx9oXfd6163YN7sPhl6ZuLFJD6u/aKGND26SzauX3zsGcIhOBrmd3YLlNQUEUNvI
ZyuvfjLS9xC4blU5iP4Lgfcg55uY11PYhr64ROmCGU8Ojjq2xtvgO0bN6eb5rxCH
OSQZbed+lX8rErAEjtSPnnZF1V/tHQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFILh
LiUy3CeC35c08leGMfD1k0iNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQjNBMkIyODI2OTkxMUYxQTJBQzdCRDdEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPXIMA0GCSqGSIb3DQEBCwUA
A4IBAQCJK3GPDDJdF6HSz0G8bAs4eMYfvgvMKI+muyt8ALGlEbOYU0R06XGLRBYw
Jjb2XBnWCVFBH+eifU4JAjCOsLYOQN/2Pbtswd9VwXCdBez23K1LkpSH0eXMalhJ
04mpIy5mu0v9GRWpnwHObLZ0uUPbMYtX6sHpbsKYerWN/ccORRwwAkXI2/174KXK
jp3niwo+7YE7RUIBlEA/vlVimxo42AkphAzD4DwQTYdzmhiJAAjq4PNN+P6IZFJ+
OD7VxQ8xG0BgBiPVrEri30/rTMpspJi0fYAcBzvJbUVJzQEoIxa4JrkGO+TeDlpO
2e7EYK+Iklrc2IiYr8knBPwEJxXA
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:18 2026 by rpki-client