Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1670470217BC11F1B6EB81E9DAE4EC9C.roa
File: 1670470217BC11F1B6EB81E9DAE4EC9C.roa (raw, json)
Hash identifier: hxQZfzHCnNfFmysOl3dQqd8TPsU/sT0/yMaBnHOEw/8=
Subject key identifier: 7D:94:62:F4:26:6F:C0:F4:83:A6:97:CF:83:CE:7F:E7:B3:51:71:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A23C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1670470217BC11F1B6EB81E9DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 11:20:02 +0000
ROA not before: Wed 04 Mar 2026 11:19:58 +0000
ROA not after: Thu 02 Apr 2026 11:19:58 +0000
asID: 140869
IP address blocks: 156.225.80.0/24 maxlen: 24
156.225.81.0/24 maxlen: 24
156.225.82.0/24 maxlen: 24
156.225.83.0/24 maxlen: 24
156.225.84.0/24 maxlen: 24
156.225.85.0/24 maxlen: 24
156.225.86.0/24 maxlen: 24
156.225.87.0/24 maxlen: 24
156.225.88.0/24 maxlen: 24
156.225.89.0/24 maxlen: 24
156.225.90.0/24 maxlen: 24
156.225.91.0/24 maxlen: 24
156.225.92.0/24 maxlen: 24
156.225.93.0/24 maxlen: 24
156.225.94.0/24 maxlen: 24
156.225.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107068 (0x1a23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 11:19:58 2026 GMT
Not After : Apr 2 11:19:58 2026 GMT
Subject: CN=69a81562-3353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bd:e6:b2:33:00:e4:2a:47:99:a0:d0:66:58:
4b:fa:12:10:25:5d:dc:4a:4b:1d:21:37:f9:d3:a7:
c7:78:df:f4:40:e2:2c:16:47:b0:42:6d:fe:d8:ca:
8d:65:8b:e4:89:57:92:d2:cd:37:26:54:73:5e:b9:
d8:9d:38:63:ed:3f:16:8d:60:7a:0d:44:0b:a7:cd:
ea:17:aa:c0:d0:5d:81:94:1b:56:68:08:8e:f1:f1:
e6:94:fd:af:89:61:60:ea:18:f9:64:66:b6:cc:ab:
12:a8:7b:9a:f2:db:ac:17:62:cd:45:88:c6:7b:69:
1c:7e:ab:4e:6f:5a:09:b3:cb:48:b9:89:d6:c7:7f:
48:74:65:bd:64:a3:2a:0e:01:8f:2a:90:a8:12:22:
36:2e:1a:9e:c6:af:0d:a2:61:a2:92:c9:b5:e4:0b:
56:4a:b4:f8:fd:66:23:e1:bb:80:86:56:36:3d:dd:
4d:70:da:f3:17:d3:54:30:ff:8c:d9:0f:7f:85:7e:
16:dd:73:c1:6a:86:c9:e3:5b:c8:4c:ce:55:b6:8a:
52:43:ab:44:ba:14:86:92:51:ab:37:31:20:e9:41:
d7:87:a3:9d:f8:6c:ab:b1:7a:67:94:45:d9:66:69:
d6:1a:43:8c:be:0b:ff:17:31:e5:86:ff:1e:8a:f3:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:94:62:F4:26:6F:C0:F4:83:A6:97:CF:83:CE:7F:E7:B3:51:71:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1670470217BC11F1B6EB81E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:74:ab:2d:b8:49:cb:1b:97:33:67:b3:dc:61:9f:98:f6:ea:
0a:c9:59:10:4f:de:ed:b6:c3:5f:23:d9:c7:8b:8d:b7:df:6b:
a6:b4:c9:be:ec:09:1c:9b:37:29:ac:20:71:de:49:d0:d0:1b:
08:46:9d:ce:e0:5b:16:8b:c1:69:0b:ee:74:f8:d7:5d:29:92:
30:f8:ab:5e:99:92:a1:36:ad:c0:dd:ea:b9:0b:d3:c9:d2:b5:
84:84:5f:75:d3:b8:42:75:e3:ec:eb:92:b6:b5:cf:79:5d:1f:
4f:84:10:a5:c6:6d:de:bf:16:07:96:72:ab:d6:05:02:7f:32:
d7:42:05:24:a5:77:14:be:10:ce:a7:22:85:21:ad:7e:54:b2:
41:01:4b:a4:e0:64:fc:20:e5:d6:fb:c4:e2:6c:9c:a6:54:10:
97:ba:d4:bb:ff:83:84:31:80:64:6c:17:1a:07:a7:28:e5:39:
a7:7e:a2:ec:bc:10:03:f5:00:d3:4f:02:ca:39:00:93:3e:4d:
47:52:b7:88:d8:92:9d:b5:66:77:fd:87:56:30:50:3d:75:a2:
5f:74:3c:55:5f:be:24:58:36:23:e5:9f:ac:b9:e3:08:c8:0f:
bf:16:0f:a6:49:33:1e:68:6e:1d:69:d7:11:6a:bb:44:85:68:
c0:46:f5:37
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaI8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTExOTU4WhcNMjYwNDAyMTExOTU4WjAYMRYw
FAYDVQQDEw02OWE4MTU2Mi0zMzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyb3msjMA5CpHmaDQZlhL+hIQJV3cSksdITf506fHeN/0QOIsFkewQm3+
2MqNZYvkiVeS0s03JlRzXrnYnThj7T8WjWB6DUQLp83qF6rA0F2BlBtWaAiO8fHm
lP2viWFg6hj5ZGa2zKsSqHua8tusF2LNRYjGe2kcfqtOb1oJs8tIuYnWx39IdGW9
ZKMqDgGPKpCoEiI2Lhqexq8NomGiksm15AtWSrT4/WYj4buAhlY2Pd1NcNrzF9NU
MP+M2Q9/hX4W3XPBaobJ41vITM5VtopSQ6tEuhSGklGrNzEg6UHXh6Od+GyrsXpn
lEXZZmnWGkOMvgv/FzHlhv8eivOH1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH2U
YvQmb8D0g6aXz4POf+ezUXH4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNjcwNDcwMjE3QkMxMUYxQjZFQjgxRTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOFQMA0GCSqGSIb3DQEBCwUA
A4IBAQCmdKstuEnLG5czZ7PcYZ+Y9uoKyVkQT97ttsNfI9nHi42332umtMm+7Akc
mzcprCBx3knQ0BsIRp3O4FsWi8FpC+50+NddKZIw+KtemZKhNq3A3eq5C9PJ0rWE
hF9107hCdePs65K2tc95XR9PhBClxm3evxYHlnKr1gUCfzLXQgUkpXcUvhDOpyKF
Ia1+VLJBAUuk4GT8IOXW+8TibJymVBCXutS7/4OEMYBkbBcaB6co5TmnfqLsvBAD
9QDTTwLKOQCTPk1HUreI2JKdtWZ3/YdWMFA9daJfdDxVX74kWDYj5Z+sueMIyA+/
Fg+mSTMeaG4dadcRartEhWjARvU3
-----END CERTIFICATE-----
Generated at Tue Mar 24 18:53:08 2026 by rpki-client