Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2556B9C60E4E11F1B8DAC485DAE4EC9C.roa
File: 2556B9C60E4E11F1B8DAC485DAE4EC9C.roa (raw, json)
Hash identifier: 75YkWWCJutn5cFkZbjF1Z1l5SC9cPdIfWjyGa2KfQ7c=
Subject key identifier: C5:61:3A:73:F0:4D:05:B7:4C:16:A7:63:BA:CA:B2:2C:EE:2B:74:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EDE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2556B9C60E4E11F1B8DAC485DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 11:20:22 +0000
ROA not before: Fri 20 Feb 2026 11:20:17 +0000
ROA not after: Fri 27 Mar 2026 11:20:17 +0000
asID: 63139
IP address blocks: 156.229.29.0/24 maxlen: 24
156.229.30.0/23 maxlen: 24
156.229.40.0/23 maxlen: 24
156.229.42.0/24 maxlen: 24
156.229.43.0/24 maxlen: 24
156.229.44.0/23 maxlen: 24
156.229.46.0/24 maxlen: 24
156.229.49.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106206 (0x19ede)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 11:20:17 2026 GMT
Not After : Mar 27 11:20:17 2026 GMT
Subject: CN=69984376-7cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:3c:d2:ef:5e:21:74:32:e1:53:99:bf:9f:
7e:d0:e1:f1:05:75:3a:49:20:02:25:7a:96:85:80:
b9:d1:4b:c6:80:27:58:1a:ac:61:e0:7c:e0:f0:22:
69:31:c8:78:a6:fa:cd:55:52:3b:ad:6d:8f:d2:19:
3b:b5:9a:49:77:7a:d4:8f:c9:59:2f:33:a2:58:7e:
88:d3:30:c3:c0:3a:d8:ed:ff:f0:4c:bf:dc:cb:ce:
8f:9f:10:47:3c:4c:7d:d9:87:a5:08:27:1b:f9:f0:
b7:61:80:30:82:f4:e7:1c:ce:82:73:df:e5:b0:d4:
5a:a3:59:f4:f8:b7:5c:bf:2d:dc:37:31:e5:aa:64:
93:fb:c4:2f:fc:75:cf:c7:bd:41:64:7b:09:0b:41:
d9:1a:5b:49:2f:dd:8b:36:60:4c:c0:93:77:7b:4d:
af:1c:5f:dc:28:e2:d0:7d:4b:3d:74:9c:34:b2:d4:
14:f9:30:f1:ca:1c:87:cf:e7:cf:34:14:0a:27:f7:
73:20:91:98:84:dd:77:b3:93:5a:a3:d2:70:39:5a:
8e:e8:40:97:78:83:f1:7c:45:1c:cc:3d:c9:4d:73:
4a:4b:fe:14:7f:d6:18:36:66:db:e0:8c:1e:58:58:
34:6b:8f:28:cb:04:f1:ad:da:c5:e5:f2:7a:09:4d:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:3A:73:F0:4D:05:B7:4C:16:A7:63:BA:CA:B2:2C:EE:2B:74:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2556B9C60E4E11F1B8DAC485DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.29.0-156.229.31.255
156.229.40.0-156.229.46.255
156.229.49.0/24
156.229.51.0/24
156.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0e:bb:9e:63:d8:eb:0a:59:39:52:2b:83:56:b7:e4:d8:69:
f0:ca:3b:48:9f:23:5a:e4:d7:4c:d6:cc:ac:c4:9c:79:25:b9:
00:6d:13:31:f4:f5:ab:eb:f3:5b:62:3a:7c:b8:b3:89:aa:96:
46:53:94:55:d6:ab:70:11:41:cb:58:e7:f6:fc:b2:60:58:08:
2d:5e:1d:ec:67:78:ba:c9:36:9b:f9:10:ed:ff:22:9e:e6:34:
e8:33:4b:30:d2:78:d9:7f:12:fb:85:77:c7:53:c2:d2:28:6b:
3d:5f:53:48:7a:28:4b:16:3e:77:b0:b4:cc:0f:c5:e3:8a:db:
c5:f8:2a:33:d7:79:28:8c:93:3a:f4:d1:b3:ac:6c:69:2a:e6:
e3:73:57:ea:58:cf:04:08:96:36:9b:9c:99:ba:80:c9:9d:37:
09:56:cf:53:67:dc:13:77:26:80:0c:00:5f:2f:1d:52:af:5d:
17:26:77:63:7d:61:5d:e4:a0:aa:73:ae:44:e2:aa:21:12:85:
f1:c8:cd:21:57:54:dd:25:e7:b6:0e:e1:e8:27:96:9b:20:e8:
12:48:7d:96:64:14:e1:f8:2e:67:6f:7e:bb:16:b8:7e:37:be:
2f:87:36:34:a5:79:56:cf:4b:3e:9c:25:9a:f8:fc:26:0c:96:
28:55:a7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:06 2026 by rpki-client