Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B820B4186A11F188E9DBA0DAE4EC9C.roa
File: F2B820B4186A11F188E9DBA0DAE4EC9C.roa (raw, json)
Hash identifier: XX5wJPNDcwVitWCkBgV6scAZrJNwdsKt0cDIUTyE1XI=
Subject key identifier: 88:2B:0D:96:F7:39:C2:F4:EF:B8:0C:A7:99:BC:1E:98:1A:4F:45:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A28B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B820B4186A11F188E9DBA0DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:11:44 +0000
ROA not before: Thu 05 Mar 2026 08:11:38 +0000
ROA not after: Thu 09 Apr 2026 08:11:38 +0000
asID: 54801
IP address blocks: 156.225.76.0/22 maxlen: 24
156.238.120.0/21 maxlen: 24
156.245.144.0/22 maxlen: 24
156.245.204.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107147 (0x1a28b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 08:11:38 2026 GMT
Not After : Apr 9 08:11:38 2026 GMT
Subject: CN=69a93ac0-c741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:dd:b7:6c:75:8e:f3:1a:ff:0a:ae:52:c2:
df:c9:8e:49:c6:f4:04:10:17:2b:70:e9:0c:21:91:
cc:1a:30:92:e0:82:9b:83:37:7a:29:97:ec:7b:c7:
71:c0:31:f0:64:2f:fc:52:bd:c6:58:56:50:e8:a6:
af:84:a8:60:18:37:55:ad:e6:d0:2a:b1:df:58:3f:
ca:2f:f5:c5:ee:85:d8:70:9d:56:9a:77:09:9c:f5:
cd:9d:80:23:2f:1f:33:f1:88:d1:88:87:0b:47:ae:
56:10:2b:0a:ba:9a:3d:51:fb:a3:0f:d2:91:48:21:
c0:70:78:9d:1b:89:fc:3d:7e:5a:3e:de:ad:ae:a1:
7d:8a:be:43:ce:6c:ba:c8:7d:84:ad:9a:95:e1:c2:
1a:8b:98:15:e6:6a:4c:c4:5c:6b:b2:e0:03:68:1f:
02:3f:a8:f9:a0:ff:ae:29:3f:c8:d4:6c:5d:e7:09:
b2:a9:99:ac:9a:56:ef:ce:95:64:0f:1a:1d:e7:43:
3d:0b:4c:e9:72:4d:83:eb:4b:7f:aa:56:4f:94:46:
2a:ce:a2:1c:ec:9c:5a:3c:c2:56:30:64:2c:fc:53:
b6:81:47:c0:f7:29:c0:5b:f2:bc:eb:c2:4a:2c:b6:
ff:39:fc:64:6c:a1:2f:96:7e:75:d8:f4:88:a5:24:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2B:0D:96:F7:39:C2:F4:EF:B8:0C:A7:99:BC:1E:98:1A:4F:45:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2B820B4186A11F188E9DBA0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.76.0/22
156.238.120.0/21
156.245.144.0/22
156.245.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:fe:0e:bb:dd:d0:1f:38:be:53:26:f6:82:e6:88:dd:9e:05:
ee:b7:78:7d:24:9e:0f:5c:12:d3:6f:a2:4a:e4:3e:ce:cd:c3:
77:03:8a:27:22:c3:20:fa:71:84:1e:b8:96:79:d2:d8:d2:30:
02:80:22:88:8e:bf:c9:ba:89:ab:2e:11:1a:74:6b:94:e1:9c:
bb:45:f0:a7:29:61:f1:7d:6e:1d:3e:de:0d:64:b2:5f:84:55:
e5:b3:b2:ce:fb:78:d7:d1:25:0f:d2:69:63:de:21:14:f4:22:
d8:05:e7:8f:23:8e:3e:b8:1b:09:44:82:59:20:af:53:60:7e:
b4:05:e8:ce:38:a7:41:97:04:da:8a:b2:83:a3:f0:88:90:00:
63:99:40:92:7d:7e:9e:73:7a:77:b5:41:00:04:2d:c8:e3:1a:
c7:4c:7c:a2:f6:21:c5:89:dd:a3:09:da:ad:04:ed:52:3c:8e:
90:07:f2:82:25:e5:48:1b:05:a8:20:d0:45:de:8e:51:f8:4e:
67:be:e2:49:19:f1:47:61:43:3b:62:e8:49:11:90:7f:6b:0e:
10:c9:25:9d:99:ca:60:ff:eb:30:32:00:1f:4b:ba:ed:b4:1e:
58:6d:64:f9:cd:93:4e:7c:2c:7d:58:7e:a0:c3:49:89:93:02:
99:d9:1a:63
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAaKLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA1MDgxMTM4WhcNMjYwNDA5MDgxMTM4WjAYMRYw
FAYDVQQDEw02OWE5M2FjMC1jNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp7Hdt2x1jvMa/wquUsLfyY5JxvQEEBcrcOkMIZHMGjCS4IKbgzd6KZfs
e8dxwDHwZC/8Ur3GWFZQ6KavhKhgGDdVrebQKrHfWD/KL/XF7oXYcJ1WmncJnPXN
nYAjLx8z8YjRiIcLR65WECsKupo9UfujD9KRSCHAcHidG4n8PX5aPt6trqF9ir5D
zmy6yH2ErZqV4cIai5gV5mpMxFxrsuADaB8CP6j5oP+uKT/I1Gxd5wmyqZmsmlbv
zpVkDxod50M9C0zpck2D60t/qlZPlEYqzqIc7JxaPMJWMGQs/FO2gUfA9ynAW/K8
68JKLLb/OfxkbKEvln512PSIpSRZ2wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIgr
DZb3OcL077gMp5m8HpgaT0WrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMkI4MjBCNDE4NkExMUYxODhFOURCQTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCnOFMAwQDnO54AwQCnPWQAwQC
nPXMMA0GCSqGSIb3DQEBCwUAA4IBAQBL/g673dAfOL5TJvaC5ojdngXut3h9JJ4P
XBLTb6JK5D7OzcN3A4onIsMg+nGEHriWedLY0jACgCKIjr/JuomrLhEadGuU4Zy7
RfCnKWHxfW4dPt4NZLJfhFXls7LO+3jX0SUP0mlj3iEU9CLYBeePI44+uBsJRIJZ
IK9TYH60BejOOKdBlwTairKDo/CIkABjmUCSfX6ec3p3tUEABC3I4xrHTHyi9iHF
id2jCdqtBO1SPI6QB/KCJeVIGwWoINBF3o5R+E5nvuJJGfFHYUM7YuhJEZB/aw4Q
ySWdmcpg/+swMgAfS7rttB5YbWT5zZNOfCx9WH6gw0mJkwKZ2Rpj
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:38 2026 by rpki-client