Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF88DABE2AA711F198CD8581DAE4EC9C.roa
File: FF88DABE2AA711F198CD8581DAE4EC9C.roa (raw, json)
Hash identifier: Eqj1NP3mhGcngwuMbBocKYb4ALJCngFzupOheG8Wqpo=
Subject key identifier: 46:A0:3A:09:BF:92:2C:4C:CE:B6:50:69:C7:E8:FA:1E:22:CE:50:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF88DABE2AA711F198CD8581DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 13:14:06 +0000
ROA not before: Sat 28 Mar 2026 13:14:01 +0000
ROA not after: Fri 22 May 2026 13:14:01 +0000
asID: 142032
IP address blocks: 156.225.16.0/20 maxlen: 24
156.225.16.0/21 maxlen: 24
156.225.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108543 (0x1a7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 13:14:01 2026 GMT
Not After : May 22 13:14:01 2026 GMT
Subject: CN=69c7d41e-b2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:12:31:c9:86:34:38:b2:66:f7:27:65:5c:
17:ba:55:c4:2f:c7:3a:fc:7d:a7:c7:32:93:7d:34:
d9:a6:8e:06:23:47:ff:4f:bb:82:27:78:99:52:0c:
75:90:8f:2c:86:40:d4:fe:d3:d1:4a:fa:0d:39:33:
db:88:e4:31:93:8d:bd:cf:5c:23:fb:a3:69:30:89:
88:05:fc:f2:f6:11:b1:51:60:26:f9:36:fe:ea:54:
9b:a5:8f:7c:da:f6:b0:a5:67:5f:d9:2c:ff:f9:f7:
75:28:b9:9d:d0:92:55:d4:21:b6:e9:de:6f:00:c0:
c6:6f:60:96:f6:21:c6:7f:79:53:74:4a:6c:9a:19:
37:8a:70:b0:99:0e:eb:f2:a0:b3:f5:91:97:c9:d7:
86:ca:2f:72:56:aa:0d:52:fd:cf:92:ab:17:0e:e0:
83:13:4a:5b:26:21:77:57:3e:3a:18:50:f1:d5:4a:
2f:3d:90:b7:89:0f:ac:9a:a5:d2:e6:b2:c6:ab:71:
d0:01:d6:94:0e:67:9f:1a:7f:bc:ef:8f:3e:35:48:
05:db:fb:cd:3a:a9:73:84:43:9d:fe:ac:94:1e:13:
01:2d:8d:8f:63:95:8c:99:71:11:f6:7c:02:d2:15:
38:87:19:16:92:88:c7:1e:f0:16:95:b2:00:c6:49:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:3A:09:BF:92:2C:4C:CE:B6:50:69:C7:E8:FA:1E:22:CE:50:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF88DABE2AA711F198CD8581DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:9d:6f:27:95:7a:46:81:b1:3d:45:50:db:da:c2:1a:38:1f:
e1:43:1d:8f:76:86:0a:9f:88:d6:1c:42:41:d9:4a:46:06:05:
41:c9:76:65:9b:d3:c1:b4:46:24:b9:10:78:b6:4b:11:2c:35:
a9:7d:8e:a7:df:0a:39:14:ac:35:e2:f4:5a:07:be:d3:0b:1f:
72:86:17:8f:af:fe:df:2f:05:74:33:2b:c2:8a:ba:ae:16:46:
93:90:f6:76:15:f2:3b:b1:2f:13:01:16:05:c6:00:86:cc:6a:
b4:33:3b:c9:ff:91:7f:03:fe:25:35:74:2b:0a:46:3e:44:b0:
7d:53:e8:f4:f6:5c:63:a2:90:3c:3b:30:3e:41:8b:0c:c4:b5:
6e:96:28:20:67:28:5b:5f:f6:93:b2:c0:2e:25:8b:de:a4:6a:
1f:df:f2:f0:c1:23:16:61:bf:e4:0b:34:05:44:46:f9:3b:7d:
18:cd:fe:fb:83:61:49:5d:a2:51:ab:f2:ed:4f:d4:f2:91:08:
39:62:f9:f1:d2:a0:ab:0d:84:57:5c:fb:5b:ea:35:c5:dc:f7:
fc:65:9f:2c:9e:5a:28:0d:a9:6d:cf:66:46:1a:1f:45:01:14:
b1:97:92:47:d1:ff:1c:71:eb:4d:ad:e6:ea:97:33:44:0e:5c:
b9:c3:71:cd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaf/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI4MTMxNDAxWhcNMjYwNTIyMTMxNDAxWjAYMRYw
FAYDVQQDEw02OWM3ZDQxZS1iMmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxqYSMcmGNDiyZvcnZVwXulXEL8c6/H2nxzKTfTTZpo4GI0f/T7uCJ3iZ
Ugx1kI8shkDU/tPRSvoNOTPbiOQxk429z1wj+6NpMImIBfzy9hGxUWAm+Tb+6lSb
pY982vawpWdf2Sz/+fd1KLmd0JJV1CG26d5vAMDGb2CW9iHGf3lTdEpsmhk3inCw
mQ7r8qCz9ZGXydeGyi9yVqoNUv3PkqsXDuCDE0pbJiF3Vz46GFDx1UovPZC3iQ+s
mqXS5rLGq3HQAdaUDmefGn+8748+NUgF2/vNOqlzhEOd/qyUHhMBLY2PY5WMmXER
9nwC0hU4hxkWkojHHvAWlbIAxknkbQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEag
Ogm/kixMzrZQacfo+h4izlCwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GRjg4REFCRTJBQTcxMUYxOThDRDg1ODFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOEQMA0GCSqGSIb3DQEBCwUA
A4IBAQC1nW8nlXpGgbE9RVDb2sIaOB/hQx2PdoYKn4jWHEJB2UpGBgVByXZlm9PB
tEYkuRB4tksRLDWpfY6n3wo5FKw14vRaB77TCx9yhhePr/7fLwV0MyvCirquFkaT
kPZ2FfI7sS8TARYFxgCGzGq0MzvJ/5F/A/4lNXQrCkY+RLB9U+j09lxjopA8OzA+
QYsMxLVuliggZyhbX/aTssAuJYvepGof3/LwwSMWYb/kCzQFREb5O30Yzf77g2FJ
XaJRq/LtT9TykQg5Yvnx0qCrDYRXXPtb6jXF3Pf8ZZ8snlooDaltz2ZGGh9FARSx
l5JH0f8ccetNrebqlzNEDly5w3HN
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:35 2026 by rpki-client