Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D12AF017B111F190884FABDAE4EC9C.roa
File: E3D12AF017B111F190884FABDAE4EC9C.roa (raw, json)
Hash identifier: +IdDkjTcXoBt1waFRQGmMW5yaU08lyxp24mtWXOl6Co=
Subject key identifier: FC:EB:2C:C8:30:9C:B0:30:28:92:FF:41:83:4C:89:FD:E9:D9:25:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A228
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D12AF017B111F190884FABDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 10:07:02 +0000
ROA not before: Wed 04 Mar 2026 10:06:58 +0000
ROA not after: Tue 31 Mar 2026 10:06:58 +0000
asID: 141167
IP address blocks: 156.225.0.0/23 maxlen: 24
156.225.12.0/23 maxlen: 24
156.228.3.0/24 maxlen: 24
156.238.2.0/23 maxlen: 24
156.254.120.0/22 maxlen: 24
156.254.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107048 (0x1a228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 10:06:58 2026 GMT
Not After : Mar 31 10:06:58 2026 GMT
Subject: CN=69a80446-0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:b9:2c:88:3c:5c:0b:c5:e3:7e:4f:9e:b6:
76:9f:2e:d4:89:f5:5f:60:57:8e:53:9e:95:60:4d:
c7:f9:da:06:b0:6a:a6:80:02:e9:84:22:fd:b0:f0:
7e:b2:a3:6c:c5:e7:bd:54:ed:1f:fc:7c:9f:eb:6d:
5f:ef:53:ab:1b:83:08:ce:e6:5d:3b:aa:76:07:90:
31:da:ee:fb:0a:70:ef:dc:29:d9:a7:88:7d:31:c7:
93:fb:bf:1e:9e:38:b1:44:c6:fc:2e:51:a0:14:cf:
14:d2:39:5f:dd:e4:ee:c2:d8:da:88:5e:bd:09:60:
82:d8:d1:f7:f2:d4:12:ec:b2:f3:d3:50:8f:65:ca:
8b:f2:96:b7:0f:5d:1d:37:da:1f:d9:0b:92:16:8e:
86:cd:53:92:87:e7:43:fa:ee:c6:38:ca:ca:b1:07:
63:c1:2f:50:8e:16:f3:f6:43:e8:93:25:8d:97:27:
1a:b0:cf:4e:33:ae:9e:ad:cd:36:90:32:7c:3b:5e:
88:d1:99:0c:14:0a:3b:d0:da:36:54:e3:f2:a3:9e:
ae:aa:af:19:81:4d:37:bc:4a:25:0e:78:63:fb:a5:
ff:ec:28:ac:ba:90:be:37:b0:cf:25:2f:f1:6a:c2:
a3:e3:eb:a8:e5:fd:11:7a:83:eb:75:ac:5d:a4:3b:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:2C:C8:30:9C:B0:30:28:92:FF:41:83:4C:89:FD:E9:D9:25:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3D12AF017B111F190884FABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.0.0/23
156.225.12.0/23
156.228.3.0/24
156.238.2.0/23
156.254.120.0-156.254.125.255
Signature Algorithm: sha256WithRSAEncryption
5d:16:8f:4a:2d:7b:79:e9:ff:77:63:e0:8e:df:86:f7:72:92:
b2:41:97:f3:69:f4:2b:cf:ed:63:a7:0f:3e:e7:3c:e2:ea:db:
46:16:3b:ba:59:2f:d9:c7:c7:a6:2d:a8:58:e1:a2:45:4b:61:
06:67:47:b8:35:c7:1c:fe:8e:2a:d5:7f:7c:51:3e:68:24:0a:
81:52:ef:0a:99:1b:e8:d7:b1:6c:ea:16:a1:70:d0:06:ab:6a:
8b:b9:83:89:02:18:3f:a6:b0:19:03:d4:75:70:75:c7:33:2f:
0f:69:5f:ab:01:23:fa:67:12:a1:18:b9:65:95:15:d5:ac:72:
60:fa:92:e4:dd:02:d0:9f:e8:f9:c3:5d:85:d8:0e:75:d1:b5:
6c:a9:a5:79:6d:64:fd:24:ef:2a:ad:52:e7:8f:30:bc:6c:bb:
14:9a:05:9e:8e:70:68:40:c5:6f:90:ca:ed:aa:56:11:0e:6d:
39:aa:37:51:dc:30:28:c5:6e:dd:d7:f3:ed:97:8f:b0:ba:99:
09:70:a2:51:50:24:e9:41:33:fd:94:a6:63:f3:9c:ed:dc:56:
35:f4:4f:05:ce:f9:ad:70:8e:0c:73:08:90:1f:3c:43:5e:5e:
bf:3c:10:38:e4:c0:87:fb:43:da:fe:05:29:97:ab:71:14:32:
f4:6c:2e:c8
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAaIoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA0MTAwNjU4WhcNMjYwMzMxMTAwNjU4WjAYMRYw
FAYDVQQDEw02OWE4MDQ0Ni0wNTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsd+5LIg8XAvF435PnrZ2ny7UifVfYFeOU56VYE3H+doGsGqmgALphCL9
sPB+sqNsxee9VO0f/Hyf621f71OrG4MIzuZdO6p2B5Ax2u77CnDv3CnZp4h9MceT
+78enjixRMb8LlGgFM8U0jlf3eTuwtjaiF69CWCC2NH38tQS7LLz01CPZcqL8pa3
D10dN9of2QuSFo6GzVOSh+dD+u7GOMrKsQdjwS9Qjhbz9kPokyWNlycasM9OM66e
rc02kDJ8O16I0ZkMFAo70No2VOPyo56uqq8ZgU03vEolDnhj+6X/7CisupC+N7DP
JS/xasKj4+uo5f0ReoPrdaxdpDvBNQIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFPzr
LMgwnLAwKJL/QYNMif3p2SWDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FM0QxMkFGMDE3QjExMUYxOTA4ODRGQUJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBnOEAAwQBnOEMAwQAnOQDAwQB
nO4CMAwDBAOc/ngDBAGc/nwwDQYJKoZIhvcNAQELBQADggEBAF0Wj0ote3np/3dj
4I7fhvdykrJBl/Np9CvP7WOnDz7nPOLq20YWO7pZL9nHx6YtqFjhokVLYQZnR7g1
xxz+jirVf3xRPmgkCoFS7wqZG+jXsWzqFqFw0Aaraou5g4kCGD+msBkD1HVwdccz
Lw9pX6sBI/pnEqEYuWWVFdWscmD6kuTdAtCf6PnDXYXYDnXRtWyppXltZP0k7yqt
UuePMLxsuxSaBZ6OcGhAxW+Qyu2qVhEObTmqN1HcMCjFbt3X8+2Xj7C6mQlwolFQ
JOlBM/2UpmPznO3cVjX0TwXO+a1wjgxzCJAfPENeXr88EDjkwIf7Q9r+BSmXq3EU
MvRsLsg=
-----END CERTIFICATE-----
Generated at Wed Mar 25 05:33:39 2026 by rpki-client