Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C90E586FB4F11F0A575D0C0DAE4EC9C.roa
File: 0C90E586FB4F11F0A575D0C0DAE4EC9C.roa (raw, json)
Hash identifier: CxrK0pg/EAqgHxt09cAqd90Ai/ZREPnioRsjOm/j1rk=
Subject key identifier: 74:12:0E:D8:61:B1:4D:8A:ED:0A:BB:F3:0E:0B:4A:4B:AB:BD:C9:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A0F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C90E586FB4F11F0A575D0C0DAE4EC9C.roa
Signing time: Tue 27 Jan 2026 07:08:58 +0000
ROA not before: Tue 27 Jan 2026 07:08:53 +0000
ROA not after: Sat 28 Feb 2026 07:08:53 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 12:22:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104975 (0x19a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 27 07:08:53 2026 GMT
Not After : Feb 28 07:08:53 2026 GMT
Subject: CN=6978648a-2880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e9:9a:3d:61:6f:9c:05:c6:26:b8:f1:a6:8c:
d9:0a:66:d5:ab:19:73:73:90:cd:70:cc:e2:bc:89:
4e:27:f9:11:7b:86:40:f8:7c:a4:de:b7:5c:c3:14:
34:66:d9:a6:a6:66:e1:61:7d:73:19:07:84:be:13:
3e:58:69:f5:af:a7:ef:83:51:07:fa:88:9f:cf:73:
13:fc:df:d8:85:1d:da:90:76:02:23:3c:b3:bc:08:
b9:5b:40:ab:67:92:db:0e:50:d4:54:52:25:20:96:
7f:d7:3d:6a:4d:c9:f9:ab:b9:de:6b:72:68:46:e9:
2f:e9:e2:74:6c:59:f2:f9:d0:ea:3e:31:7e:41:08:
ea:14:c4:11:d1:d2:40:d4:f1:d3:f0:de:7d:83:6a:
0f:9d:9f:72:5d:0c:b1:bb:ee:f6:b6:c1:0d:b6:b7:
49:0b:e2:74:95:22:44:26:9d:7c:fa:43:a3:db:1b:
62:05:48:46:75:e9:f3:d0:c0:c9:7a:c2:09:71:53:
3f:07:51:64:b6:d4:fe:2f:00:ef:7f:3b:59:8e:8d:
74:8d:5a:5e:bc:b6:74:ca:e3:9b:f4:d9:1f:23:75:
19:8d:9e:43:fb:54:22:3a:c6:15:79:98:b4:36:f7:
b0:ea:ed:be:96:a5:4c:49:ad:8f:93:26:f8:52:5f:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:12:0E:D8:61:B1:4D:8A:ED:0A:BB:F3:0E:0B:4A:4B:AB:BD:C9:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C90E586FB4F11F0A575D0C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
1c:5f:96:00:30:0d:f1:00:9e:07:3c:05:89:a5:1d:ab:72:d4:
dc:ab:9c:61:c8:01:81:b8:c4:05:15:c9:d7:04:e1:f7:bb:d8:
83:bd:27:c5:68:d3:ef:61:22:b0:b3:bb:61:dc:66:f5:9d:11:
81:25:d2:ee:e7:86:47:44:8b:74:5f:59:f2:80:fd:18:21:bb:
a7:0b:f3:60:7a:c8:15:a4:79:08:7e:47:f2:1f:c2:b4:a2:23:
79:fe:e4:47:44:46:83:ef:65:0d:4a:df:25:50:36:38:54:1d:
0b:a3:39:c2:a0:7c:4b:43:ba:d4:dc:7c:88:1c:11:c5:eb:e8:
31:34:ab:45:d4:b8:87:fb:de:80:ba:41:ff:5e:18:5b:75:35:
67:cd:e6:66:74:e0:14:c9:4e:46:e9:a7:96:c2:f4:59:7e:1b:
01:d9:d4:eb:7f:2f:5d:4d:d4:95:c8:20:2c:99:75:eb:42:73:
a1:e9:9f:21:df:c4:7b:d4:f4:10:db:30:58:75:5d:85:82:47:
a4:dc:6d:68:6b:db:0a:79:00:c4:c7:58:67:38:4f:2f:86:be:
ce:0f:61:ca:03:d3:76:b4:9a:00:0a:17:e9:22:ec:25:6f:05:
d1:8e:ca:ff:ee:2b:b8:45:d8:2e:4c:5e:b4:c4:50:86:c8:e0:
44:46:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:17 2026 by rpki-client