Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A705DE21DF11F1BE2D86D1DAE4EC9C.roa
File: C1A705DE21DF11F1BE2D86D1DAE4EC9C.roa (raw, json)
Hash identifier: 3VjInTIOW4ktQeIc6q6jqUCE/JSp1K/Qg6/XfdsZBZw=
Subject key identifier: 18:0C:D9:5C:C0:E0:73:71:41:BB:82:1F:BC:CB:E0:EC:99:AA:C5:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A705DE21DF11F1BE2D86D1DAE4EC9C.roa
Signing time: Tue 17 Mar 2026 09:00:34 +0000
ROA not before: Tue 17 Mar 2026 09:00:29 +0000
ROA not after: Wed 24 Mar 2027 09:00:29 +0000
asID: 9304
IP address blocks: 156.225.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107946 (0x1a5aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 09:00:29 2026 GMT
Not After : Mar 24 09:00:29 2027 GMT
Subject: CN=69b91832-19cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:fc:06:c3:bd:cb:fe:8d:fc:8c:b3:1d:7e:
29:62:e7:6c:52:87:c4:a6:cb:ab:7e:c9:45:ae:fd:
88:af:e0:ff:6f:0d:7b:f1:26:f2:26:a0:01:8c:c4:
a7:5f:f8:6f:0a:e0:c7:b1:37:38:ac:9d:b0:e5:2b:
f5:d4:f0:41:ab:7f:cb:5b:e7:e8:59:7a:8e:10:58:
0e:8f:95:a4:d4:27:1e:47:01:49:ff:35:54:b7:c4:
a7:fb:75:70:48:01:e5:cb:66:e6:3a:a9:3c:73:01:
aa:9a:fe:66:a5:88:0d:dd:e9:64:5d:fb:98:a9:45:
f4:6e:35:c6:fe:ba:05:50:ac:bd:03:6e:35:82:98:
4c:2c:82:c0:6a:ea:aa:bd:3a:79:92:36:51:3d:68:
bb:57:3c:52:89:00:89:d3:1d:ec:9b:68:c0:91:61:
d5:ea:38:35:46:db:c0:86:4d:b8:64:ae:21:33:55:
d2:b5:9a:4d:de:7a:84:b7:4c:e0:1b:91:0a:f8:15:
b6:e1:aa:1f:d1:41:a9:e7:04:17:1c:af:a6:0c:3c:
a3:05:10:20:c3:af:1f:4c:e0:a4:75:a6:ec:e7:df:
45:8c:78:37:04:bb:02:42:5c:66:2e:52:c0:d2:e3:
17:3c:ae:b7:dc:38:cc:94:3a:15:41:b6:49:f4:2f:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0C:D9:5C:C0:E0:73:71:41:BB:82:1F:BC:CB:E0:EC:99:AA:C5:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A705DE21DF11F1BE2D86D1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:be:c9:24:2c:16:95:d7:db:f5:aa:41:e1:8d:b9:44:f2:0c:
3e:c2:b9:16:32:a4:bd:86:98:0f:ee:71:4a:57:d0:f3:95:b9:
5e:8d:8f:db:6b:51:78:3c:68:ac:d0:26:73:6a:78:53:43:c1:
0a:24:80:f0:6c:fa:b5:c3:7e:7f:7b:d6:73:28:a1:ab:34:7b:
08:98:3a:11:86:2d:40:f9:47:d2:24:de:8f:0c:e9:b2:a8:8a:
da:ad:5e:6d:d7:d4:90:7f:fa:27:dd:06:8e:8d:75:0f:11:93:
7c:44:ce:ed:36:85:f6:0b:7a:a1:31:e2:f2:44:ff:6a:54:e2:
23:1c:e2:54:ca:95:a8:e4:e5:02:d1:fd:6a:19:77:0b:a8:e4:
3e:99:32:da:56:b8:d2:2b:86:d1:92:c8:6f:21:0b:b2:77:a1:
b4:0a:f7:1a:7c:8d:c2:e7:ad:40:06:91:b3:fb:45:eb:60:90:
34:20:c0:6e:f1:9d:e5:4d:c4:4f:c4:a8:ec:29:a4:2d:2e:75:
91:71:a8:b1:5e:6b:14:fb:47:3b:18:ee:dd:ff:a3:c3:9f:65:
01:14:aa:85:be:78:bf:b5:a7:b9:9b:2e:a1:c6:40:77:57:ef:
f9:47:80:8c:b1:b3:ec:a0:19:75:d5:c8:34:3d:73:68:51:57:
b9:dc:15:5f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaWqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzE3MDkwMDI5WhcNMjcwMzI0MDkwMDI5WjAYMRYw
FAYDVQQDEw02OWI5MTgzMi0xOWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAor38BsO9y/6N/IyzHX4pYudsUofEpsurfslFrv2Ir+D/bw178SbyJqAB
jMSnX/hvCuDHsTc4rJ2w5Sv11PBBq3/LW+foWXqOEFgOj5Wk1CceRwFJ/zVUt8Sn
+3VwSAHly2bmOqk8cwGqmv5mpYgN3elkXfuYqUX0bjXG/roFUKy9A241gphMLILA
auqqvTp5kjZRPWi7VzxSiQCJ0x3sm2jAkWHV6jg1RtvAhk24ZK4hM1XStZpN3nqE
t0zgG5EK+BW24aof0UGp5wQXHK+mDDyjBRAgw68fTOCkdabs599FjHg3BLsCQlxm
LlLA0uMXPK633DjMlDoVQbZJ9C+HgQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBgM
2VzA4HNxQbuCH7zL4OyZqsX3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMUE3MDVERTIxREYxMUYxQkUyRDg2RDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOG3MA0GCSqGSIb3DQEBCwUA
A4IBAQCavskkLBaV19v1qkHhjblE8gw+wrkWMqS9hpgP7nFKV9DzlblejY/ba1F4
PGis0CZzanhTQ8EKJIDwbPq1w35/e9ZzKKGrNHsImDoRhi1A+UfSJN6PDOmyqIra
rV5t19SQf/on3QaOjXUPEZN8RM7tNoX2C3qhMeLyRP9qVOIjHOJUypWo5OUC0f1q
GXcLqOQ+mTLaVrjSK4bRkshvIQuyd6G0CvcafI3C561ABpGz+0XrYJA0IMBu8Z3l
TcRPxKjsKaQtLnWRcaixXmsU+0c7GO7d/6PDn2UBFKqFvni/tae5my6hxkB3V+/5
R4CMsbPsoBl11cg0PXNoUVe53BVf
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:27 2026 by rpki-client