Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6367D3E0CA411F19888CDC7DAE4EC9C.roa
File: A6367D3E0CA411F19888CDC7DAE4EC9C.roa (raw, json)
Hash identifier: 7IatceIKatjCbdKUl7CGlzrFx/XTt9n8Aar3Jr/e1PA=
Subject key identifier: 29:21:A4:C2:43:D6:88:FC:8F:CD:85:8C:A9:38:F3:1C:90:8D:1B:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E9B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6367D3E0CA411F19888CDC7DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 08:34:34 +0000
ROA not before: Wed 18 Feb 2026 08:34:28 +0000
ROA not after: Sat 05 Sep 2026 08:34:28 +0000
asID: 21859
IP address blocks: 156.229.120.0/24 maxlen: 24
156.229.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 24 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106139 (0x19e9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 18 08:34:28 2026 GMT
Not After : Sep 5 08:34:28 2026 GMT
Subject: CN=6995799a-646d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:57:1e:89:e5:6e:98:18:7b:6b:cb:2b:e6:
1d:4b:94:20:40:c4:87:ab:df:9c:07:32:e2:09:fd:
f6:6d:c4:5c:9b:c9:9e:34:31:55:8d:68:38:0c:e7:
c9:3c:66:20:f4:84:ca:ed:a7:42:6b:f2:d8:3c:7e:
bf:57:43:6e:58:68:c3:84:31:b8:33:6a:03:0f:5b:
81:a0:76:4d:73:18:b5:93:ef:bd:06:3a:b8:48:05:
08:7d:9f:13:19:d8:2b:47:f6:c3:76:76:78:3a:04:
c5:0f:68:ec:ec:51:51:f2:5b:24:66:e0:f5:5e:b8:
05:13:09:a4:16:78:c6:9b:13:cb:a7:91:9d:a5:27:
78:ac:dd:db:e4:4c:6f:ba:38:c0:d8:4b:94:23:73:
ef:f2:53:11:26:0e:77:11:da:d8:e2:1e:b3:ac:5c:
b1:1d:68:c5:3d:4b:19:93:91:e2:5c:d3:36:31:83:
83:d2:0e:db:ed:44:69:04:80:fb:59:1e:39:ba:97:
b4:e4:00:22:85:81:75:ad:4f:8a:73:e5:a4:29:bd:
7e:ce:f9:31:58:98:20:ec:71:4b:b0:3c:0b:5f:7b:
aa:2d:a6:4e:31:9e:f5:70:fa:0f:42:75:be:1a:23:
77:47:97:60:79:77:d4:39:e4:43:08:d7:46:9d:63:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:A4:C2:43:D6:88:FC:8F:CD:85:8C:A9:38:F3:1C:90:8D:1B:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A6367D3E0CA411F19888CDC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.120.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:94:c8:21:21:4b:03:d7:12:1f:f2:77:f2:ec:a3:6c:b8:5c:
20:da:54:9e:37:9f:a2:a6:e7:4b:82:c6:c4:66:52:de:68:d3:
06:4f:bf:34:78:54:f2:91:9a:42:65:29:d9:63:0a:bb:32:a6:
15:81:76:3a:d6:f7:81:d5:5f:68:50:be:f7:e2:49:52:4c:ee:
78:43:0b:67:a9:73:41:f9:a0:a6:58:8c:1c:bd:67:96:71:f5:
46:02:00:fc:fe:73:16:b0:31:7d:63:c3:25:7b:0f:42:f5:87:
12:e4:e6:33:50:6d:69:bc:62:a5:b5:84:b4:e6:22:df:ef:f1:
12:df:0b:ff:b6:3e:02:ef:a7:dc:c6:e1:d5:2b:9d:b5:dd:5a:
46:8e:6c:e8:5c:e8:8d:a1:04:12:c9:e5:1b:74:d7:56:ab:c3:
e7:35:8e:24:6f:32:ca:62:56:b3:61:44:94:84:d6:0a:c2:b8:
ad:90:0e:69:47:84:70:29:71:d1:15:2d:90:06:b7:fa:41:14:
2f:8e:14:68:15:4a:e9:cd:c3:d4:51:2b:e2:7f:2a:97:a5:97:
c4:8a:7e:b7:81:2d:ef:a6:bb:f5:67:61:2c:0e:b1:d6:d2:4b:
d6:72:2f:6d:cc:00:a9:a5:9c:ef:7a:67:80:5a:8f:02:5a:96:
7b:17:b6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:00 2026 by rpki-client