Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/864C6B2417F711F1B6D6C4CFDAE4EC9C.roa
File: 864C6B2417F711F1B6D6C4CFDAE4EC9C.roa (raw, json)
Hash identifier: UWQvV22sioTtG6+qlFVR/mNUTN4hw8LFhdJIPwy51i0=
Subject key identifier: F8:80:16:9B:AE:59:90:B1:00:DD:C1:72:E9:9B:80:E9:78:B8:4E:A2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A27A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/864C6B2417F711F1B6D6C4CFDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 18:25:30 +0000
ROA not before: Wed 04 Mar 2026 18:25:26 +0000
ROA not after: Sat 03 Mar 2029 18:25:26 +0000
asID: 17561
IP address blocks: 156.228.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107130 (0x1a27a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 18:25:26 2026 GMT
Not After : Mar 3 18:25:26 2029 GMT
Subject: CN=69a8791a-7f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:e1:6e:45:5d:30:8b:de:82:77:bc:29:be:
e7:02:3e:ef:ad:f0:74:41:db:93:be:9e:cd:76:e2:
26:f9:69:f7:43:f1:b0:dc:db:79:f4:20:1b:2c:da:
39:3e:ab:f9:27:91:a6:fe:bf:53:08:75:fc:e0:b9:
c1:52:d3:52:f3:be:89:68:4b:a9:39:6a:bf:9c:39:
ad:7a:7d:f7:37:5a:e3:c3:05:e1:6d:aa:55:de:b5:
67:50:24:75:ac:f4:43:c9:4c:94:67:07:32:f2:db:
42:b9:e9:26:60:41:1b:e4:f6:91:92:1e:6f:19:97:
ce:e7:05:a4:aa:86:54:4e:79:9c:3f:f9:a3:c6:4a:
cd:1c:e0:fc:aa:e5:e4:c1:b1:1b:d9:e6:7e:11:92:
b5:e1:01:20:73:8d:3a:b9:e8:e2:9b:34:89:30:12:
c1:33:09:59:41:ce:3a:50:da:a4:e8:b5:a9:86:2e:
ce:84:35:77:be:64:9a:6e:e0:46:50:d8:8f:0d:4c:
a5:b5:40:ad:c5:09:f5:b2:12:c4:ae:00:97:19:d5:
65:54:37:24:97:47:55:77:73:94:6c:10:93:ed:2e:
81:21:23:45:f0:50:9d:bf:91:b0:9e:53:d1:6a:ab:
8d:df:81:46:34:a8:11:55:9b:7a:e6:3e:9a:fe:51:
42:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:80:16:9B:AE:59:90:B1:00:DD:C1:72:E9:9B:80:E9:78:B8:4E:A2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/864C6B2417F711F1B6D6C4CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.228.169.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fd:11:4b:28:b3:8e:b4:bc:83:ce:ad:4b:80:fa:bf:9a:c7:
01:d3:23:e3:32:c0:16:57:c1:d7:62:91:3e:ba:d9:44:3f:0c:
79:ac:df:34:52:76:b4:d9:e6:8a:62:da:90:cd:bf:32:78:f3:
41:ee:ff:ee:cf:16:03:bc:1c:b2:24:35:8d:a0:54:c7:b5:97:
c0:37:ce:b1:6c:f8:ab:e8:af:e6:a3:a4:fa:c5:06:f9:37:dd:
a8:c7:df:0f:12:2a:ec:91:f3:f2:ce:d9:3e:b8:c1:23:f4:11:
13:93:c8:85:2a:3b:96:eb:8b:1a:84:19:c2:fb:c3:c9:7b:72:
55:62:e9:ce:34:d4:ae:89:c9:1e:5e:e4:7c:d9:4a:d7:74:9b:
0d:ce:36:0b:75:8d:e1:40:1b:0d:0c:92:3c:2d:01:be:17:3c:
e6:0d:3b:2b:6b:87:dc:fd:d4:f2:0d:5b:af:dc:9f:dd:89:bb:
f8:8d:53:59:38:36:c3:67:08:bb:fb:bb:c1:da:23:5a:73:4f:
fb:86:e3:a1:f2:bc:ef:b1:b6:f7:a8:aa:1f:6d:f7:7d:39:d9:
9b:af:b4:80:66:95:16:a2:64:9c:cd:1a:36:09:5f:93:01:b4:
a9:f6:0e:4a:ee:1b:3c:20:e1:31:ca:0c:50:7c:35:bf:85:f9:
9d:59:13:77
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaJ6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTgyNTI2WhcNMjkwMzAzMTgyNTI2WjAYMRYw
FAYDVQQDEw02OWE4NzkxYS03Zjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApg7hbkVdMIvegne8Kb7nAj7vrfB0QduTvp7NduIm+Wn3Q/Gw3Nt59CAb
LNo5Pqv5J5Gm/r9TCHX84LnBUtNS876JaEupOWq/nDmten33N1rjwwXhbapV3rVn
UCR1rPRDyUyUZwcy8ttCuekmYEEb5PaRkh5vGZfO5wWkqoZUTnmcP/mjxkrNHOD8
quXkwbEb2eZ+EZK14QEgc406uejimzSJMBLBMwlZQc46UNqk6LWphi7OhDV3vmSa
buBGUNiPDUyltUCtxQn1shLErgCXGdVlVDckl0dVd3OUbBCT7S6BISNF8FCdv5Gw
nlPRaquN34FGNKgRVZt65j6a/lFCKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPiA
FpuuWZCxAN3BcumbgOl4uE6iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NjRDNkIyNDE3RjcxMUYxQjZENkM0Q0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOSpMA0GCSqGSIb3DQEBCwUA
A4IBAQBL/RFLKLOOtLyDzq1LgPq/mscB0yPjMsAWV8HXYpE+utlEPwx5rN80Una0
2eaKYtqQzb8yePNB7v/uzxYDvByyJDWNoFTHtZfAN86xbPir6K/mo6T6xQb5N92o
x98PEirskfPyztk+uMEj9BETk8iFKjuW64sahBnC+8PJe3JVYunONNSuickeXuR8
2UrXdJsNzjYLdY3hQBsNDJI8LQG+FzzmDTsra4fc/dTyDVuv3J/dibv4jVNZODbD
Zwi7+7vB2iNac0/7huOh8rzvsbb3qKofbfd9Odmbr7SAZpUWomSczRo2CV+TAbSp
9g5K7hs8IOExygxQfDW/hfmdWRN3
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:38 2026 by rpki-client