Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/494A8F82FCED11F0A00176B1DAE4EC9C.roa
File: 494A8F82FCED11F0A00176B1DAE4EC9C.roa (raw, json)
Hash identifier: O/e6kBAsghenfQw76iDjwuGLZ5lY7Xdl7pRC/Eh3IZc=
Subject key identifier: 3E:F3:71:81:5B:53:32:3D:5A:15:B7:C7:5B:D0:D6:81:B7:12:71:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/494A8F82FCED11F0A00176B1DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 08:34:12 +0000
ROA not before: Thu 29 Jan 2026 08:34:07 +0000
ROA not after: Sun 08 Mar 2026 08:34:07 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105106 (0x19a92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 08:34:07 2026 GMT
Not After : Mar 8 08:34:07 2026 GMT
Subject: CN=697b1b84-981f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:1d:f6:f2:59:05:76:02:20:a6:f2:a7:de:
e0:0f:fd:39:19:af:20:b7:db:07:e6:c0:50:2c:51:
5b:f8:8c:4c:9e:d8:02:71:db:f5:78:70:e8:d4:0b:
a5:ab:52:f5:d8:7e:7f:b3:0c:6a:67:26:95:42:31:
e9:5f:d4:c2:75:29:27:4e:8b:2c:a4:03:1c:4f:68:
26:62:79:86:9c:b5:ee:f6:68:44:18:47:c2:2b:d0:
fb:5b:0b:53:de:29:c4:90:c0:f2:b2:65:b2:8f:b7:
7e:0f:5c:99:c9:06:1b:1e:18:75:f1:d7:27:26:81:
74:9e:08:04:90:f8:33:0c:d5:73:0b:28:0a:58:8e:
8d:77:56:d5:e3:9e:b3:d1:b0:58:a7:ec:44:1a:e0:
7f:c9:69:96:9c:0c:90:f7:fa:5a:d1:a6:6c:d4:db:
73:03:00:13:13:32:c0:c3:cf:3a:b1:cd:b8:b2:64:
5f:fa:db:0b:9f:a8:02:4a:2e:1d:35:5b:f4:fb:69:
a0:dd:e3:dc:90:e3:0b:c8:ad:77:56:11:c7:df:a5:
aa:c5:45:60:e4:10:f3:9f:49:86:b3:72:bf:df:22:
23:2b:3c:36:3d:aa:87:0e:46:5e:ef:ad:81:fb:5d:
e8:0f:2b:e5:26:3d:9a:ac:b5:9a:64:66:04:9c:cc:
12:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F3:71:81:5B:53:32:3D:5A:15:B7:C7:5B:D0:D6:81:B7:12:71:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/494A8F82FCED11F0A00176B1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:7c:e6:18:8a:b5:6b:42:01:9b:4b:d2:e1:1c:ab:ee:e8:72:
d6:de:77:ec:fa:c1:92:f7:05:a1:4b:1c:35:e5:8c:83:64:f0:
f0:ca:50:dd:6c:31:62:e9:68:c7:9b:b6:4b:60:b5:3f:a3:10:
cb:35:02:2e:f6:0a:39:92:fe:d1:37:ae:d6:2e:f6:e5:8f:a0:
9f:38:51:d4:cd:0c:18:16:0d:49:52:eb:2f:d7:39:bf:39:d8:
bc:cd:3b:2a:d3:6e:29:11:47:48:20:1c:44:0e:9a:4e:c8:9c:
34:b5:77:8b:d5:cd:25:c0:36:19:51:60:16:0e:cf:30:60:26:
bc:57:ba:dd:7f:a7:a6:eb:4e:65:74:fa:e7:5f:b2:e7:25:be:
7a:04:43:d3:a1:c5:2c:cb:db:d8:f7:78:70:9b:45:54:38:43:
8f:21:42:fa:59:a4:b4:3e:80:fd:22:0c:a6:ef:41:05:9a:07:
32:ac:7f:23:47:65:4f:bd:8b:13:af:66:65:7d:62:57:75:eb:
ac:c0:9d:e3:85:d2:9e:9d:be:62:cb:48:ad:5a:ff:d7:61:5a:
ab:cf:4f:a0:84:87:68:b9:48:fa:b0:8d:52:ba:bf:0a:c3:94:
cd:3d:5b:78:c3:eb:60:a2:8e:f2:2c:b7:16:f6:8a:e9:02:32:
6a:cc:d4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 23:00:16 2026 by rpki-client