Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA704F9816DA11F1AB89CB83DAE4EC9C.roa
File: AA704F9816DA11F1AB89CB83DAE4EC9C.roa (raw, json)
Hash identifier: gcBauZ5xCm2aOSLkK/nMbwF3rt6ELr7AqVuH9rBQ9iY=
Subject key identifier: 97:33:DD:4C:9D:FA:4D:85:37:C8:51:82:71:38:F6:3A:E8:8A:33:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA704F9816DA11F1AB89CB83DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:26:24 +0000
ROA not before: Tue 03 Mar 2026 08:26:20 +0000
ROA not after: Wed 11 Mar 2026 08:26:20 +0000
asID: 139880
IP address blocks: 156.227.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106981 (0x1a1e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 08:26:20 2026 GMT
Not After : Mar 11 08:26:20 2026 GMT
Subject: CN=69a69b30-3077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:f1:b5:4d:91:d5:71:30:45:d3:a0:7c:98:
e2:ae:1c:87:76:57:3c:52:33:e4:a8:21:1d:fe:7f:
7a:df:ca:6d:19:c5:80:cb:b6:7d:42:09:b9:1c:e3:
c7:86:86:17:62:93:b2:e1:ad:83:7d:ce:4d:17:7d:
d4:e4:21:c0:78:e1:44:42:2e:4e:21:c7:ea:77:36:
b7:71:fa:ec:1b:5d:7d:9c:b0:d9:f6:74:5b:70:04:
5e:ae:3b:20:e3:17:90:46:82:29:98:fa:6d:bc:b7:
1c:46:17:ee:5c:73:12:d5:10:61:b8:02:1a:e8:bc:
fb:63:f2:ba:5c:ce:9b:46:c2:63:c7:49:ea:cb:d1:
08:d8:02:62:e5:7a:77:b5:c0:9c:b3:39:79:c8:a9:
da:72:4a:cb:26:8a:b5:56:97:71:e2:fe:2d:5a:1c:
d5:3f:99:d9:de:37:91:e0:9e:6d:17:dd:8c:ef:a6:
13:d6:9b:57:cb:b8:c3:11:1d:4d:df:e1:27:af:93:
e2:e1:88:18:33:17:32:37:37:3a:6c:3a:84:15:ec:
2b:11:1d:c0:24:c4:17:6a:49:45:0d:ad:e4:d8:3b:
47:82:4c:46:83:64:20:38:ce:0e:fc:6a:7e:bd:d7:
16:65:6a:d7:e8:81:a7:78:42:21:0e:35:ec:8f:9e:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:DD:4C:9D:FA:4D:85:37:C8:51:82:71:38:F6:3A:E8:8A:33:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA704F9816DA11F1AB89CB83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.227.64.0/18
Signature Algorithm: sha256WithRSAEncryption
42:b9:1d:9b:9f:fe:5b:63:b5:f2:9c:8e:d4:30:a4:f0:b9:5b:
b1:b3:c9:48:6d:ad:86:0e:d6:ee:d9:32:46:2d:72:15:81:fb:
c4:43:4f:26:0c:1c:1a:92:b2:e9:6f:69:66:a1:a6:1c:8b:d5:
dc:6c:26:61:82:dc:43:51:2b:a5:ea:5c:8c:2c:d1:75:95:6f:
3d:e3:81:22:09:75:6e:61:c0:4e:51:21:cd:7f:3a:bc:08:30:
91:d0:ba:cb:ed:f2:2a:ba:6a:91:38:c8:e2:c9:0d:42:37:fe:
a1:e6:15:be:76:4d:f8:fc:22:10:19:ae:82:21:e6:c9:0c:e4:
ac:84:ef:ab:db:9c:cc:2a:8f:ad:7d:80:3c:9b:81:cb:aa:9f:
c4:51:51:bc:53:42:66:e4:36:13:f4:1a:30:3b:c7:e0:6a:94:
9e:69:59:c8:b8:f0:42:57:71:2c:15:4f:c8:28:d2:a8:da:92:
b3:ad:bd:0a:27:67:76:04:71:ae:ee:6e:85:7a:8f:df:44:fe:
8d:52:63:8b:75:69:ba:20:ca:44:1d:81:27:af:da:a7:42:1e:
d2:46:94:84:67:11:a4:7e:c1:40:69:1b:85:45:38:37:85:1c:
ad:34:17:5a:c4:53:5c:9c:e1:c8:cd:e7:9c:80:76:90:50:4c:
a9:9f:1b:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaHlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzAzMDgyNjIwWhcNMjYwMzExMDgyNjIwWjAYMRYw
FAYDVQQDEw02OWE2OWIzMC0zMDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYzxtU2R1XEwRdOgfJjirhyHdlc8UjPkqCEd/n9638ptGcWAy7Z9Qgm5
HOPHhoYXYpOy4a2Dfc5NF33U5CHAeOFEQi5OIcfqdza3cfrsG119nLDZ9nRbcARe
rjsg4xeQRoIpmPptvLccRhfuXHMS1RBhuAIa6Lz7Y/K6XM6bRsJjx0nqy9EI2AJi
5Xp3tcCcszl5yKnackrLJoq1Vpdx4v4tWhzVP5nZ3jeR4J5tF92M76YT1ptXy7jD
ER1N3+Enr5Pi4YgYMxcyNzc6bDqEFewrER3AJMQXaklFDa3k2DtHgkxGg2QgOM4O
/Gp+vdcWZWrX6IGneEIhDjXsj574JwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJcz
3Uyd+k2FN8hRgnE49jroijPfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTcwNEY5ODE2REExMUYxQUI4OUNCODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnONAMA0GCSqGSIb3DQEBCwUA
A4IBAQBCuR2bn/5bY7XynI7UMKTwuVuxs8lIba2GDtbu2TJGLXIVgfvEQ08mDBwa
krLpb2lmoaYci9XcbCZhgtxDUSul6lyMLNF1lW8944EiCXVuYcBOUSHNfzq8CDCR
0LrL7fIqumqROMjiyQ1CN/6h5hW+dk34/CIQGa6CIebJDOSshO+r25zMKo+tfYA8
m4HLqp/EUVG8U0Jm5DYT9BowO8fgapSeaVnIuPBCV3EsFU/IKNKo2pKzrb0KJ2d2
BHGu7m6Feo/fRP6NUmOLdWm6IMpEHYEnr9qnQh7SRpSEZxGkfsFAaRuFRTg3hRyt
NBdaxFNcnOHIzeecgHaQUEypnxu3
-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:32 2026 by rpki-client