Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6512672034F11F19672D6ECDAE4EC9C.roa
File: C6512672034F11F19672D6ECDAE4EC9C.roa (raw, json)
Hash identifier: BCV5FVeGbC3W3lITmk+C6uppEqJ87FYvrzByjs9svDs=
Subject key identifier: 91:F9:1E:AA:AF:30:42:2D:6E:64:AA:2C:D3:CA:82:46:7A:2F:8A:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6512672034F11F19672D6ECDAE4EC9C.roa
Signing time: Fri 06 Feb 2026 11:34:19 +0000
ROA not before: Fri 06 Feb 2026 11:34:15 +0000
ROA not after: Fri 13 Mar 2026 11:34:15 +0000
asID: 397423
IP address blocks: 156.225.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105486 (0x19c0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 11:34:15 2026 GMT
Not After : Mar 13 11:34:15 2026 GMT
Subject: CN=6985d1bb-447e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:d7:c7:6f:a8:f8:d8:02:e9:97:1b:ac:52:
0b:72:65:56:49:5c:e1:94:47:67:bc:36:99:52:8b:
4b:08:91:87:ea:ea:f6:ce:9a:da:4d:6b:37:54:ce:
65:e6:0d:18:14:01:0d:51:2a:02:dc:63:56:81:34:
8e:96:c2:dc:e2:9e:d9:de:9c:e6:e7:0d:00:3b:0a:
70:32:3f:1d:49:a8:77:92:9a:00:cb:00:d6:53:53:
10:64:a6:2d:5e:a8:f8:e4:08:39:31:51:14:b9:3f:
ca:01:62:c5:23:36:62:0a:4b:4a:0c:81:5f:56:1a:
26:aa:0a:dd:1c:53:87:44:4b:7d:84:0f:c9:56:42:
f5:2d:c9:b5:cd:97:a0:1b:dd:74:c1:6c:c8:7b:0a:
22:a2:e7:d2:74:63:56:30:fb:9e:3f:d2:5e:b2:ef:
d1:dd:e5:96:3b:7c:0a:61:81:8e:38:c6:99:cd:6a:
75:72:78:19:77:38:b4:16:ad:1d:f0:d8:fb:ea:d2:
d0:53:7a:7e:e7:aa:ba:4d:16:3e:0c:ac:3c:8e:2c:
bb:95:f6:c7:b9:c2:95:87:13:07:2a:6c:91:28:82:
f9:72:b2:ad:c0:6c:b3:96:74:cd:6a:46:f7:9d:a5:
7e:71:e1:71:d0:3c:e0:a2:7d:05:67:af:46:b9:62:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F9:1E:AA:AF:30:42:2D:6E:64:AA:2C:D3:CA:82:46:7A:2F:8A:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6512672034F11F19672D6ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.65.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4f:73:e8:41:98:9e:7a:0d:ce:29:14:84:23:c2:3d:80:55:
a2:51:81:ac:2a:90:7c:45:90:6f:6f:7a:cc:34:f0:2a:4a:55:
72:a3:36:e2:f8:fb:d1:f5:27:f2:2c:79:1c:a3:99:ff:e5:65:
40:aa:14:c0:b9:96:e3:e8:5a:69:85:a2:71:de:c8:eb:7e:bb:
5b:48:92:62:e3:08:f8:c9:5f:fb:c1:d5:8c:d3:00:65:39:3c:
4a:0c:7f:5e:20:7a:9d:e8:1a:04:56:41:16:dd:1d:f1:72:b0:
99:00:61:79:09:24:c6:bb:4d:a6:8d:b9:4a:97:17:3b:ff:64:
24:5e:6b:1b:b4:cd:c8:af:5f:f1:24:5c:cf:25:a7:e7:d6:3f:
d3:24:1b:4b:a8:c3:af:db:de:a2:63:e5:27:bd:94:c0:bb:37:
03:cd:51:77:5f:90:0a:c9:6a:dc:de:c0:af:d4:5d:05:e9:50:
de:77:c4:d8:ac:c5:02:1c:c1:a7:5c:92:ff:89:30:cf:c6:d0:
00:fa:76:bf:76:7a:52:3d:45:63:2d:3d:33:70:56:bc:7b:c2:
89:da:96:c1:9e:0f:64:5a:53:8e:d5:ce:53:a2:dd:ff:37:8f:
8a:35:40:88:d3:d0:e4:8a:0e:d5:58:04:46:f8:ba:cf:75:b1:
66:f2:c8:43
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZwOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjA2MTEzNDE1WhcNMjYwMzEzMTEzNDE1WjAYMRYw
FAYDVQQDEw02OTg1ZDFiYi00NDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1/3Xx2+o+NgC6ZcbrFILcmVWSVzhlEdnvDaZUotLCJGH6ur2zpraTWs3
VM5l5g0YFAENUSoC3GNWgTSOlsLc4p7Z3pzm5w0AOwpwMj8dSah3kpoAywDWU1MQ
ZKYtXqj45Ag5MVEUuT/KAWLFIzZiCktKDIFfVhomqgrdHFOHREt9hA/JVkL1Lcm1
zZegG910wWzIewoioufSdGNWMPueP9Jesu/R3eWWO3wKYYGOOMaZzWp1cngZdzi0
Fq0d8Nj76tLQU3p+56q6TRY+DKw8jiy7lfbHucKVhxMHKmyRKIL5crKtwGyzlnTN
akb3naV+ceFx0Dzgon0FZ69GuWLwswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJH5
HqqvMEItbmSqLNPKgkZ6L4ptMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjUxMjY3MjAzNEYxMUYxOTY3MkQ2RUNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFBMA0GCSqGSIb3DQEBCwUA
A4IBAQBLT3PoQZieeg3OKRSEI8I9gFWiUYGsKpB8RZBvb3rMNPAqSlVyozbi+PvR
9SfyLHkco5n/5WVAqhTAuZbj6FpphaJx3sjrfrtbSJJi4wj4yV/7wdWM0wBlOTxK
DH9eIHqd6BoEVkEW3R3xcrCZAGF5CSTGu02mjblKlxc7/2QkXmsbtM3Ir1/xJFzP
Jafn1j/TJBtLqMOv296iY+UnvZTAuzcDzVF3X5AKyWrc3sCv1F0F6VDed8TYrMUC
HMGnXJL/iTDPxtAA+na/dnpSPUVjLT0zcFa8e8KJ2pbBng9kWlOO1c5Tot3/N4+K
NUCI09Dkig7VWARG+LrPdbFm8shD
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:57:57 2026 by rpki-client