Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16171AB6108611F1A22600A8DAE4EC9C.roa
File: 16171AB6108611F1A22600A8DAE4EC9C.roa (raw, json)
Hash identifier: jkcC5OcPrjStJar0apagkhKFCMm6d03DWsKS7eO70AE=
Subject key identifier: A1:0C:5A:F6:A1:18:E0:C1:65:F4:07:C3:04:83:35:F4:E9:AE:67:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16171AB6108611F1A22600A8DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:05:51 +0000
ROA not before: Mon 23 Feb 2026 07:05:47 +0000
ROA not after: Mon 30 Mar 2026 07:05:47 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106435 (0x19fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:05:47 2026 GMT
Not After : Mar 30 07:05:47 2026 GMT
Subject: CN=699bfc4f-07b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:64:52:8f:e6:9d:63:9f:06:8c:d6:14:84:
d8:d6:ef:7c:3f:4f:f4:62:be:81:73:01:52:3f:85:
06:86:53:17:c3:73:d4:4c:07:de:fa:ec:a8:de:07:
05:54:6e:fa:18:58:00:01:84:10:24:67:b9:87:84:
fc:fb:ff:06:e9:d1:8f:0f:4e:35:70:51:09:67:a3:
b4:95:38:be:a7:5f:17:2a:46:1d:5f:0b:c2:6d:76:
97:e4:ab:6f:64:b8:99:56:25:3f:bc:50:9d:cc:c7:
e7:de:d2:12:a4:79:3e:62:aa:62:9c:5a:7f:9c:a8:
0d:4b:1f:36:5e:c6:ec:89:8a:62:88:6e:12:bc:b2:
2d:ef:a8:1b:aa:49:ad:cb:3c:10:38:6f:21:9f:b6:
44:41:b9:ca:9c:a2:97:7c:27:e3:48:84:e2:e2:97:
3b:78:11:1f:a2:35:95:84:bb:18:98:49:66:76:12:
26:24:86:18:f5:55:d0:07:e7:ee:98:f1:85:f9:d6:
cb:68:df:8b:d6:5d:c8:80:3d:07:37:88:d9:60:5b:
07:48:15:00:b6:6d:13:c1:3d:0d:65:b3:ca:19:56:
a2:eb:c4:11:4e:d3:53:c4:43:df:7b:2e:4a:5a:08:
08:76:4c:29:50:de:ee:d0:08:db:d2:21:df:6d:7e:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0C:5A:F6:A1:18:E0:C1:65:F4:07:C3:04:83:35:F4:E9:AE:67:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16171AB6108611F1A22600A8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
29:26:38:47:4f:39:59:83:68:e5:60:88:bf:8d:1e:56:7c:b8:
4c:9a:13:20:82:a1:3f:52:37:e2:ca:0f:83:cf:c3:a9:33:86:
e0:44:7c:16:e1:bf:ab:24:f0:c7:88:35:81:68:cc:0e:22:a5:
1f:03:10:05:99:eb:75:18:11:db:77:03:4d:fb:38:09:e5:28:
93:49:af:c9:22:8a:c0:dc:0a:eb:50:f1:cb:ca:27:4a:a9:0c:
bd:28:74:15:09:4d:03:77:11:5a:ce:50:ca:91:68:21:59:c2:
c4:fe:30:62:b7:21:3a:4c:16:45:ad:17:e5:5c:f9:8a:a6:43:
b7:2f:2c:cf:d8:ee:1d:e6:50:8d:3d:7f:ab:2d:ad:dd:69:bc:
b0:1a:c1:c8:68:92:f6:a8:88:ea:f6:c1:b9:d8:5a:f6:53:aa:
c2:f7:3a:e4:5a:65:7b:59:11:98:1c:c7:6c:71:d3:0b:e7:3f:
d3:51:af:80:96:d6:7b:c2:99:ff:e4:b4:d3:ed:cc:94:b8:16:
d4:b2:65:ff:7c:ba:fb:0e:6d:bb:82:c2:c2:9e:40:de:03:2d:
2e:63:eb:46:4e:e8:49:97:a7:8d:76:2f:21:cc:19:88:26:57:
43:5a:1b:da:8f:73:1c:80:5e:43:d9:b9:68:75:cc:14:5f:28:
a3:ab:45:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:59 2026 by rpki-client