Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999733A00B1B11F1992A3CD7DAE4EC9C.roa
File: 999733A00B1B11F1992A3CD7DAE4EC9C.roa (raw, json)
Hash identifier: uTiAoVJXjdlejbCP0eM6Xb52YNQiAyCRV3qEfxjCE3s=
Subject key identifier: 88:DB:0F:01:7A:E5:86:02:0A:18:2A:31:F2:D1:E2:A1:8B:58:5D:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999733A00B1B11F1992A3CD7DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 09:41:01 +0000
ROA not before: Mon 16 Feb 2026 09:40:52 +0000
ROA not after: Mon 16 Mar 2026 09:40:52 +0000
asID: 22773
IP address blocks: 156.233.243.0/24 maxlen: 24
156.233.244.0/24 maxlen: 24
156.233.245.0/24 maxlen: 24
156.233.246.0/24 maxlen: 24
156.233.247.0/24 maxlen: 24
156.233.248.0/24 maxlen: 24
156.233.249.0/24 maxlen: 24
156.233.250.0/24 maxlen: 24
156.233.251.0/24 maxlen: 24
156.238.161.0/24 maxlen: 24
156.242.19.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
156.242.239.0/24 maxlen: 24
156.242.240.0/24 maxlen: 24
156.243.115.0/24 maxlen: 24
156.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106056 (0x19e48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 09:40:52 2026 GMT
Not After : Mar 16 09:40:52 2026 GMT
Subject: CN=6992e62d-1f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:e8:36:e7:e1:b6:73:e7:77:c5:9f:31:2c:
78:7a:8a:fb:72:8f:cc:41:06:bb:cc:fe:e5:35:d2:
32:f4:6a:9e:1e:ba:51:32:d7:04:f8:4d:ac:75:d6:
08:7b:c9:2b:14:89:50:ff:65:de:15:9d:e4:e0:b6:
10:3d:d4:7b:e7:d3:9f:cc:58:68:ad:31:66:35:46:
59:94:6b:43:a7:5c:8d:8f:62:7a:11:f6:cf:55:d0:
b8:5b:50:f1:8c:16:03:35:d0:fc:0d:20:b7:ea:20:
03:cb:7e:7b:b8:43:4b:2e:89:ca:2f:2a:0a:d9:76:
37:5a:b6:e3:82:ec:c8:5f:43:dc:d5:3e:49:ee:db:
02:3c:14:5b:07:ab:ef:5b:8c:c5:ac:7c:4d:74:27:
8f:4b:6c:4a:31:db:d7:5e:29:24:18:6e:c5:28:f0:
1d:5e:34:af:06:1a:a7:7d:68:3e:51:b7:42:78:0a:
55:8d:b9:02:96:e4:6a:86:ac:87:a7:22:e5:97:c1:
1d:56:7a:4f:50:4b:c1:c6:c9:e3:12:d2:75:fe:87:
82:fc:d6:fc:3b:c8:0d:b7:fc:7d:0e:c5:21:fa:1c:
b5:cc:55:68:a9:d3:33:55:13:bb:8d:bb:06:d7:27:
f0:78:f0:28:ed:34:91:de:b8:29:91:f3:19:83:db:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:0F:01:7A:E5:86:02:0A:18:2A:31:F2:D1:E2:A1:8B:58:5D:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/999733A00B1B11F1992A3CD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.243.0-156.233.251.255
156.238.161.0/24
156.242.19.0/24
156.242.234.0-156.242.240.255
156.243.115.0/24
156.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c1:bc:01:e9:50:1b:1d:32:c6:60:60:1a:23:c6:da:f1:e9:
de:04:12:2c:44:76:e8:b0:44:07:84:4f:67:c7:8d:b3:47:69:
a5:79:ab:ee:44:1b:37:a8:52:5a:eb:62:31:aa:2d:99:a0:4c:
d0:de:74:de:25:0f:f1:21:b4:1a:4e:02:68:eb:21:e2:4d:21:
9b:6c:d2:05:e4:b0:a3:d4:07:eb:1a:3b:a5:31:52:6e:85:e5:
5b:5f:53:9a:d0:dc:34:48:87:f0:95:ea:50:df:b1:6e:05:4d:
bb:12:66:e4:c3:9a:cc:b2:bf:15:96:37:55:9c:ec:83:95:b0:
0e:c1:f6:c4:53:1f:9c:25:f1:91:18:e6:8a:a4:04:7e:66:54:
3e:80:ae:d6:b9:41:75:a9:86:30:fa:40:a2:b6:c5:2b:68:91:
54:fe:fc:4b:47:9c:ff:30:4e:60:7c:11:3f:34:75:ae:a8:1a:
33:5d:e3:cd:96:4f:77:83:a0:2a:57:59:1a:22:d7:69:95:ac:
03:bc:d7:80:a4:2b:ef:aa:18:29:7b:b9:0a:5a:ff:49:66:16:
36:68:b8:c8:6c:bb:03:85:4d:c5:fb:54:ba:fd:6b:60:ed:15:
d4:45:4d:d1:ee:fa:c9:93:1d:d6:e7:79:48:7e:aa:35:e6:b7:
80:af:5d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:55:41 2026 by rpki-client