Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F02D1C026211F1B203B9C1DAE4EC9C.roa
File: 64F02D1C026211F1B203B9C1DAE4EC9C.roa (raw, json)
Hash identifier: 346R9oBvxarQCoYL8s94Wt2N/HxdZvpOWwi4hlFTA9A=
Subject key identifier: E2:E4:2E:8A:A9:43:90:AA:25:65:14:52:5E:26:6D:5B:10:D2:5E:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F02D1C026211F1B203B9C1DAE4EC9C.roa
Signing time: Thu 05 Feb 2026 07:15:05 +0000
ROA not before: Thu 05 Feb 2026 07:14:59 +0000
ROA not after: Tue 24 Mar 2026 07:14:59 +0000
asID: 21859
IP address blocks: 156.233.48.0/24 maxlen: 24
156.238.162.0/24 maxlen: 24
156.239.134.0/24 maxlen: 24
156.252.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105438 (0x19bde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 5 07:14:59 2026 GMT
Not After : Mar 24 07:14:59 2026 GMT
Subject: CN=69844379-b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:d4:d6:7d:86:6c:d0:7d:4b:ef:95:6f:27:
65:fe:cf:c1:8b:c6:34:68:0b:be:d2:ae:99:43:ad:
9a:aa:23:85:7e:1a:d8:e6:f8:3e:bf:c7:9d:0b:52:
9d:d1:ea:b1:19:90:d0:ff:32:80:31:c7:43:03:1b:
8b:52:15:79:9f:bd:c0:cd:74:fc:b2:a7:65:13:80:
66:56:df:ed:78:a4:a9:3d:f5:63:b9:78:bc:8b:ec:
4c:f2:2d:7c:de:75:54:a6:9f:3d:f6:30:0a:01:b9:
8a:13:c3:1f:c5:40:41:82:f5:35:a6:51:cd:45:99:
2f:95:fc:7a:2d:e6:90:d1:fb:14:8f:1c:95:f8:fd:
8d:87:85:0e:8b:6b:18:b8:99:a5:56:9f:a2:ba:c8:
d1:b9:6f:09:35:d1:c1:26:07:8c:f0:df:8f:a9:9b:
df:78:be:65:22:ba:a0:2e:0a:29:56:bb:ca:d6:9b:
79:63:41:45:e5:fd:1f:5c:dc:1e:3f:4a:9d:ad:e9:
2d:de:4a:6e:e7:bf:4d:26:bb:f5:b1:2e:e5:07:c3:
59:9a:95:3d:07:da:65:89:a8:3a:de:1a:97:87:53:
f0:5e:9f:1f:81:3c:6f:7e:86:3a:45:79:3d:c6:4f:
61:99:dd:4f:c8:77:8e:0c:e1:87:f4:e5:bc:6c:08:
e7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E4:2E:8A:A9:43:90:AA:25:65:14:52:5E:26:6D:5B:10:D2:5E:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64F02D1C026211F1B203B9C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.48.0/24
156.238.162.0/24
156.239.134.0/24
156.252.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:43:4e:9f:57:51:f5:94:7d:40:61:d7:12:fb:e0:2a:77:6f:
e0:97:70:01:c4:fd:df:09:b3:7e:b5:c6:29:e7:27:62:76:fe:
ae:df:5a:3f:58:ed:71:9b:c5:77:18:a2:42:73:b0:0d:6d:61:
20:04:63:8a:80:75:98:4b:45:25:d5:0b:59:52:f1:98:78:ad:
25:33:45:d0:d0:b6:c7:1b:ce:9f:12:22:a6:c4:7c:54:19:b6:
3b:ea:84:a8:f7:76:bd:3b:ca:c7:df:1f:07:eb:07:e6:23:c2:
8f:8d:37:0f:34:aa:67:e8:90:78:86:03:58:22:b9:b0:17:f3:
1c:77:6b:e5:86:2a:32:ed:2e:6b:55:58:24:8a:63:ca:d7:49:
40:9e:37:d1:8c:aa:85:4d:be:61:ee:56:3e:4e:ab:15:90:34:
85:ab:8f:11:ab:ca:76:93:00:33:31:cb:5b:8a:fd:56:7c:a6:
97:85:a9:91:c9:57:f0:7c:32:6d:4c:f4:c6:17:3c:9f:48:0b:
7b:9a:9e:67:0a:33:d0:ef:77:15:b9:26:a0:f1:13:b7:7d:f7:
33:0f:1e:3f:e3:4a:51:bd:bd:2c:cc:45:9c:b2:0d:38:86:0b:
e2:ac:e9:33:d4:80:88:71:4a:58:48:5c:85:1f:96:da:db:5b:
97:df:19:99
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAZveMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA1MDcxNDU5WhcNMjYwMzI0MDcxNDU5WjAYMRYw
FAYDVQQDEw02OTg0NDM3OS1iNzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzAjU1n2GbNB9S++Vbydl/s/Bi8Y0aAu+0q6ZQ62aqiOFfhrY5vg+v8ed
C1Kd0eqxGZDQ/zKAMcdDAxuLUhV5n73AzXT8sqdlE4BmVt/teKSpPfVjuXi8i+xM
8i183nVUpp899jAKAbmKE8MfxUBBgvU1plHNRZkvlfx6LeaQ0fsUjxyV+P2Nh4UO
i2sYuJmlVp+iusjRuW8JNdHBJgeM8N+PqZvfeL5lIrqgLgopVrvK1pt5Y0FF5f0f
XNweP0qdrekt3kpu579NJrv1sS7lB8NZmpU9B9pliag63hqXh1PwXp8fgTxvfoY6
RXk9xk9hmd1PyHeODOGH9OW8bAjnSwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFOLk
LoqpQ5CqJWUUUl4mbVsQ0l5IMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NEYwMkQxQzAyNjIxMUYxQjIwM0I5QzFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAnOkwAwQAnO6iAwQAnO+GAwQA
nPwEMA0GCSqGSIb3DQEBCwUAA4IBAQBOQ06fV1H1lH1AYdcS++Aqd2/gl3ABxP3f
CbN+tcYp5ydidv6u31o/WO1xm8V3GKJCc7ANbWEgBGOKgHWYS0Ul1QtZUvGYeK0l
M0XQ0LbHG86fEiKmxHxUGbY76oSo93a9O8rH3x8H6wfmI8KPjTcPNKpn6JB4hgNY
IrmwF/Mcd2vlhioy7S5rVVgkimPK10lAnjfRjKqFTb5h7lY+TqsVkDSFq48Rq8p2
kwAzMctbiv1WfKaXhamRyVfwfDJtTPTGFzyfSAt7mp5nCjPQ73cVuSag8RO3ffcz
Dx4/40pRvb0szEWcsg04hgvirOkz1ICIcUpYSFyFH5ba21uX3xmZ
-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:01 2026 by rpki-client