Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108245AA1DEF11F18211BFD3DAE4EC9C.roa
File: 108245AA1DEF11F18211BFD3DAE4EC9C.roa (raw, json)
Hash identifier: Cyfu8xP7Hktsilc0hHlkq75gdftLbQ5WXl0krSs0McU=
Subject key identifier: 70:2C:9F:A9:22:B8:E5:9A:BC:EA:7E:89:2B:02:1E:03:83:22:5F:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108245AA1DEF11F18211BFD3DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 08:40:04 +0000
ROA not before: Thu 12 Mar 2026 08:39:59 +0000
ROA not after: Thu 16 Apr 2026 08:39:59 +0000
asID: 22773
IP address blocks: 156.233.213.0/24 maxlen: 24
156.233.214.0/24 maxlen: 24
156.233.215.0/24 maxlen: 24
156.233.220.0/24 maxlen: 24
156.233.221.0/24 maxlen: 24
156.233.222.0/24 maxlen: 24
156.233.223.0/24 maxlen: 24
156.233.240.0/24 maxlen: 24
156.233.241.0/24 maxlen: 24
156.233.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107618 (0x1a462)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 08:39:59 2026 GMT
Not After : Apr 16 08:39:59 2026 GMT
Subject: CN=69b27be4-4f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:4c:fd:87:bd:1e:8b:8d:46:29:ba:de:87:
19:0c:91:79:72:92:72:b0:18:0b:8e:8a:37:33:0d:
07:59:8e:e1:31:b7:88:0c:d7:a5:6e:6d:54:5f:cc:
6c:d2:85:a4:0e:ef:e1:43:f9:7e:cb:3f:0b:87:86:
9d:32:c6:67:65:7c:fa:7e:9a:56:99:99:00:51:07:
f4:a9:3d:e2:b6:29:87:9e:49:08:ca:48:f1:4d:26:
06:ee:38:62:bf:d4:95:01:37:8a:09:f8:be:9b:ef:
51:b7:61:e0:9a:7b:ec:1c:b6:31:cb:1d:e7:27:a2:
b0:0d:9c:27:47:d5:45:6b:0d:f6:a4:29:78:6c:15:
4c:7d:f3:e6:30:32:f8:1e:d2:6b:1e:a8:97:92:5c:
13:e5:5e:96:43:47:f5:28:d2:61:b7:b8:cd:c3:ce:
aa:b7:56:a6:87:3e:37:ad:6c:01:64:80:87:1e:15:
a7:71:d9:22:7b:be:fa:f3:81:67:c6:34:e5:d2:5b:
cf:b4:0f:63:ff:b2:72:09:e9:c0:d9:68:49:05:12:
5b:68:9e:62:6b:4d:3c:16:bb:c6:1e:82:27:3b:34:
60:9b:d7:35:de:b1:07:71:c9:3a:21:b4:bd:59:99:
eb:34:d2:38:ea:41:14:68:ec:d8:8a:d0:1d:e9:65:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:9F:A9:22:B8:E5:9A:BC:EA:7E:89:2B:02:1E:03:83:22:5F:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108245AA1DEF11F18211BFD3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.213.0-156.233.215.255
156.233.220.0/22
156.233.240.0-156.233.242.255
Signature Algorithm: sha256WithRSAEncryption
11:20:c6:18:ff:8e:9d:f2:27:d3:1d:41:e6:cb:37:77:af:b6:
8f:3d:4c:82:eb:4d:8a:24:f3:c0:0d:50:f8:4a:36:a4:58:53:
16:2e:6e:4b:f9:b5:7f:b4:94:0b:f3:64:be:bf:fe:22:2d:27:
64:e6:8d:4f:8b:2a:f8:7c:05:97:a0:00:38:4e:a9:06:e0:10:
32:c6:84:9c:70:b5:03:b2:2a:ff:52:95:da:dc:01:6b:ee:3e:
8d:88:bb:cf:cc:f1:90:2e:0f:93:83:7a:c6:8f:94:92:2a:36:
77:24:00:05:89:b4:21:ff:40:f7:36:b1:4c:6b:7d:0c:ea:25:
6c:33:79:65:dc:40:ce:c2:39:56:ff:fe:5f:f3:d1:b1:e8:9b:
9a:79:92:36:7e:b7:93:54:c7:8a:57:ef:89:7d:6a:bf:3a:cb:
5e:ef:66:8d:d2:f0:56:05:b0:91:04:d1:d6:f3:46:c2:a2:5d:
06:2d:f4:f0:97:9d:24:43:71:e6:b2:70:7c:23:84:90:91:40:
41:95:d5:1b:7f:b3:3b:b1:84:b4:ea:e2:cb:2f:9f:cf:d8:1f:
b8:dd:d8:04:77:b0:cf:d4:c3:88:35:9a:57:ff:e6:f1:62:3d:
1f:e0:2d:72:ed:da:e4:c0:c7:df:23:33:a3:3c:e1:fc:8c:3b:
f4:59:2b:8c
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAaRiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzEyMDgzOTU5WhcNMjYwNDE2MDgzOTU5WjAYMRYw
FAYDVQQDEw02OWIyN2JlNC00ZjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzdRM/Ye9HouNRim63ocZDJF5cpJysBgLjoo3Mw0HWY7hMbeIDNelbm1U
X8xs0oWkDu/hQ/l+yz8Lh4adMsZnZXz6fppWmZkAUQf0qT3itimHnkkIykjxTSYG
7jhiv9SVATeKCfi+m+9Rt2HgmnvsHLYxyx3nJ6KwDZwnR9VFaw32pCl4bBVMffPm
MDL4HtJrHqiXklwT5V6WQ0f1KNJht7jNw86qt1amhz43rWwBZICHHhWncdkie776
84FnxjTl0lvPtA9j/7JyCenA2WhJBRJbaJ5ia008FrvGHoInOzRgm9c13rEHcck6
IbS9WZnrNNI46kEUaOzYitAd6WUfLwIDAQABo4ICvjCCArowHQYDVR0OBBYEFHAs
n6kiuOWavOp+iSsCHgODIl+mMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xMDgyNDVBQTFERUYxMUYxODIxMUJGRDNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACc6dUDBAOc6dADBAKc6dww
DAMEBJzp8AMEAJzp8jANBgkqhkiG9w0BAQsFAAOCAQEAESDGGP+OnfIn0x1B5ss3
d6+2jz1MgutNiiTzwA1Q+Eo2pFhTFi5uS/m1f7SUC/Nkvr/+Ii0nZOaNT4sq+HwF
l6AAOE6pBuAQMsaEnHC1A7Iq/1KV2twBa+4+jYi7z8zxkC4Pk4N6xo+Ukio2dyQA
BYm0If9A9zaxTGt9DOolbDN5ZdxAzsI5Vv/+X/PRseibmnmSNn63k1THilfviX1q
vzrLXu9mjdLwVgWwkQTR1vNGwqJdBi308JedJENx5rJwfCOEkJFAQZXVG3+zO7GE
tOriyy+fz9gfuN3YBHewz9TDiDWaV//m8WI9H+Atcu3a5MDH3yMzozzh/Iw79Fkr
jA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:56 2026 by rpki-client