Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC5D37C0D6211F1ADDE63DADAE4EC9C.roa
File: DCC5D37C0D6211F1ADDE63DADAE4EC9C.roa (raw, json)
Hash identifier: rAEuXfIEf37UX3onyBCyNeWso0YcW9ZOIYQPo3g+yrE=
Subject key identifier: 47:FC:EF:8C:72:0E:3E:7D:10:6A:18:8B:0A:78:84:95:22:E7:AD:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC5D37C0D6211F1ADDE63DADAE4EC9C.roa
Signing time: Thu 19 Feb 2026 07:16:09 +0000
ROA not before: Thu 19 Feb 2026 07:16:00 +0000
ROA not after: Wed 25 Mar 2026 07:16:00 +0000
asID: 271355
IP address blocks: 156.236.194.0/24 maxlen: 24
156.236.195.0/24 maxlen: 24
156.236.196.0/24 maxlen: 24
156.236.197.0/24 maxlen: 24
156.236.198.0/24 maxlen: 24
156.236.199.0/24 maxlen: 24
156.236.200.0/24 maxlen: 24
156.236.201.0/24 maxlen: 24
156.236.202.0/24 maxlen: 24
156.236.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106154 (0x19eaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 19 07:16:00 2026 GMT
Not After : Mar 25 07:16:00 2026 GMT
Subject: CN=6996b8b9-6c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:2a:a1:a0:e0:d9:39:d5:58:18:ee:44:1e:
d4:c5:4b:bf:7a:bb:55:5a:3f:33:f3:cd:13:38:75:
5a:02:3c:27:80:f7:2b:29:a0:97:fb:72:ab:ec:7d:
59:f3:b9:4b:64:93:f4:e4:00:7c:1e:93:95:eb:ee:
a1:0b:06:31:30:80:0b:ca:a0:a7:99:a2:73:8a:5d:
dc:43:d6:9b:3b:f8:a1:d2:ab:d7:98:fa:fb:83:d9:
7d:02:08:79:36:f2:40:23:5e:3f:ef:5d:7b:f7:ca:
d8:b5:2d:8a:6b:f0:db:76:2d:7a:cc:de:6d:91:d4:
d0:2e:54:2f:50:ae:96:a0:86:60:1a:e1:a8:7d:01:
48:6e:d4:73:f5:d5:e2:37:a7:68:55:ac:2d:88:5a:
54:2a:3a:4e:da:ab:3b:4f:fb:09:bd:ff:4f:b1:50:
ba:62:40:cb:52:24:41:04:3d:83:64:a4:ed:57:ff:
b4:54:92:8a:fe:f4:70:d5:92:2d:31:2a:47:93:15:
ea:79:2b:f1:b4:16:53:d7:4b:96:5d:18:d6:4d:2b:
c3:a6:85:de:f8:10:a4:fd:c1:77:ed:25:cf:b4:f0:
08:c4:ed:ab:23:b9:4c:ba:46:b7:ce:6d:67:19:ec:
95:30:f1:8d:3e:ad:40:e8:ee:75:57:d3:dc:8d:51:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:EF:8C:72:0E:3E:7D:10:6A:18:8B:0A:78:84:95:22:E7:AD:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCC5D37C0D6211F1ADDE63DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.194.0-156.236.203.255
Signature Algorithm: sha256WithRSAEncryption
1b:e4:e1:d3:10:df:37:2f:1f:d3:98:30:6a:a8:0c:48:52:1c:
69:fe:91:18:69:58:78:7f:a7:74:fe:c5:4b:87:ab:7b:a8:a0:
b4:1e:cf:a7:e4:99:62:c9:ec:7f:98:c7:84:dc:61:f4:64:dd:
45:a1:77:e0:00:75:bc:82:ed:62:00:23:04:ca:a0:7b:bf:3d:
25:08:f7:9c:ac:b6:c3:ac:ef:ff:c7:52:7b:1d:6a:7c:33:d4:
b1:d7:40:82:29:76:9f:be:5b:07:77:89:e1:10:c3:c3:2d:e5:
fe:fd:3f:14:1b:63:52:a3:29:9a:e4:17:11:54:ba:6b:fa:80:
be:74:77:f9:6b:66:eb:47:84:da:07:5b:aa:27:c5:97:c1:45:
ea:14:de:e0:d5:71:84:93:78:08:4f:ba:15:95:78:1b:59:04:
92:1a:e3:8a:06:ba:a7:20:81:20:50:40:c0:81:9a:fa:aa:25:
eb:af:c5:60:b7:27:b6:f5:7b:5a:63:0d:1f:d5:df:8d:37:82:
99:61:ce:c5:1f:22:60:93:16:d9:6c:f8:12:06:2d:a2:a8:5a:
6f:3f:73:9c:7d:b6:4c:d9:24:8d:70:9d:fd:b8:50:c5:3f:47:
7d:8a:0f:71:8f:fe:e5:4e:ac:6a:72:69:89:ff:2c:8a:76:98:
07:7e:b5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 06:57:50 2026 by rpki-client