Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D35B7A6107A11F1A8897DE0DAE4EC9C.roa
File: 5D35B7A6107A11F1A8897DE0DAE4EC9C.roa (raw, json)
Hash identifier: /RfQs9TL0lLko53xKinHRHB2efEmxqcCjz6AD7FSaBM=
Subject key identifier: 10:68:0E:62:52:3E:67:21:20:01:A5:92:50:85:82:AE:B9:10:46:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D35B7A6107A11F1A8897DE0DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 05:41:56 +0000
ROA not before: Mon 23 Feb 2026 05:41:51 +0000
ROA not after: Wed 04 Mar 2026 05:41:51 +0000
asID: 200819
IP address blocks: 156.225.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Feb 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106423 (0x19fb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 05:41:51 2026 GMT
Not After : Mar 4 05:41:51 2026 GMT
Subject: CN=699be8a4-6d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:3d:c3:ed:2d:11:5a:46:37:b6:d2:89:05:
f8:92:ab:48:11:b1:bd:fc:38:b0:e6:cd:29:57:3a:
61:dd:d1:a2:26:a1:3f:5d:46:9a:28:56:5d:97:32:
8a:04:c4:94:93:7d:fb:a0:35:72:56:27:fb:97:82:
8d:f0:9a:03:dc:13:12:dc:92:fb:90:8a:9a:e8:2a:
6a:bb:15:bd:2a:53:2f:cc:16:f0:bb:78:e9:bf:d7:
46:9f:f7:be:bf:c4:53:67:dc:ac:31:f3:e6:41:ff:
92:f8:63:2a:04:c7:10:82:3c:67:b8:7e:52:f9:96:
62:05:d7:d3:9e:20:39:46:43:f3:7f:a7:0d:82:11:
3d:5b:6d:f2:bd:35:66:24:08:f4:04:08:57:56:f1:
4e:b7:1f:81:fb:99:97:cb:bd:6f:36:d2:9a:d8:cf:
8a:ab:71:52:57:98:fb:cb:d2:fb:91:a5:f5:16:06:
07:58:62:9b:cd:54:8f:b8:e2:4f:1e:65:16:2b:d1:
af:8c:a4:22:70:a4:33:8e:ba:b3:91:ea:69:4a:c7:
25:86:b2:e2:e3:f5:42:9d:47:e5:e2:8e:78:be:cd:
6d:59:1b:54:49:3a:43:86:71:4d:5f:c6:67:c6:99:
05:38:71:c0:72:18:94:99:0c:a4:95:d1:20:50:71:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:0E:62:52:3E:67:21:20:01:A5:92:50:85:82:AE:B9:10:46:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D35B7A6107A11F1A8897DE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.41.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d3:a1:1e:24:1d:98:f7:7a:33:99:2d:ce:77:a1:77:6d:e8:
18:f7:37:93:e3:d1:ff:59:6b:ac:1a:af:03:0b:4e:99:84:aa:
f4:e6:81:a7:42:92:68:cb:f8:f9:5a:82:1e:40:96:98:76:88:
cc:be:f0:37:39:2a:9c:4a:70:44:c2:44:5a:97:60:fc:7e:ed:
5f:df:6f:26:ee:e9:74:cb:ef:53:ae:e4:95:e8:24:aa:e9:63:
1e:10:b1:10:c8:f2:48:23:9f:7d:1d:98:4c:f3:24:ea:71:14:
f1:0c:da:84:d1:dd:df:e6:de:1b:fd:b0:49:8c:0b:c4:c1:e3:
6d:65:25:a6:26:b2:55:d2:e2:31:78:19:1a:f6:de:b5:24:4a:
a5:4b:4a:e0:61:4a:65:c2:d7:95:31:39:92:44:1c:24:3d:08:
f4:6d:93:17:ba:55:71:ce:80:78:d2:27:f1:e1:56:80:0b:ca:
2b:7e:76:27:8e:91:7f:bb:ae:bf:7e:fe:e6:1f:30:dc:a7:ef:
c4:5d:ec:ec:50:6d:2d:e2:22:20:c0:2a:76:4b:46:51:ce:b5:
9c:31:03:2c:07:af:df:46:3d:e8:99:f3:08:a4:1d:f4:cb:5d:
04:aa:79:42:d5:8a:db:00:fc:0b:26:c0:05:ac:37:71:5d:ca:
4d:8a:c5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:16:23 2026 by rpki-client