Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/256578580F2011F1B565CB8CDAE4EC9C.roa
File: 256578580F2011F1B565CB8CDAE4EC9C.roa (raw, json)
Hash identifier: /yTRVZnjyqb+CP5Vz8nSw3bqBtualkma0h1GQw9rNAA=
Subject key identifier: A3:07:B8:64:BF:BD:F1:8B:8C:C1:76:A4:75:9E:DA:F4:DB:90:3F:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/256578580F2011F1B565CB8CDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:23:37 +0000
ROA not before: Sat 21 Feb 2026 12:23:33 +0000
ROA not after: Sat 28 Mar 2026 12:23:33 +0000
asID: 44559
IP address blocks: 156.246.184.0/24 maxlen: 24
156.246.185.0/24 maxlen: 24
156.246.186.0/24 maxlen: 24
156.246.198.0/24 maxlen: 24
156.246.199.0/24 maxlen: 24
156.246.200.0/24 maxlen: 24
156.246.201.0/24 maxlen: 24
156.246.202.0/24 maxlen: 24
156.246.203.0/24 maxlen: 24
156.246.204.0/24 maxlen: 24
156.246.205.0/24 maxlen: 24
156.246.206.0/24 maxlen: 24
156.246.207.0/24 maxlen: 24
156.246.208.0/24 maxlen: 24
156.246.209.0/24 maxlen: 24
156.246.210.0/24 maxlen: 24
156.246.211.0/24 maxlen: 24
156.246.212.0/24 maxlen: 24
156.246.213.0/24 maxlen: 24
156.246.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106359 (0x19f77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:23:33 2026 GMT
Not After : Mar 28 12:23:33 2026 GMT
Subject: CN=6999a3c9-b613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:87:2a:8b:09:f7:f0:db:e0:6e:94:8b:c7:4d:
4c:c3:81:87:44:1b:20:9c:b5:c4:f5:8b:ab:54:d5:
18:c7:99:e4:47:58:3d:6c:25:c5:50:cf:e0:da:3f:
48:c1:04:fb:5e:4c:ca:ea:d6:e9:97:4c:f0:4f:a9:
c5:38:8f:ec:b8:f6:b9:7d:b0:ca:9a:42:01:33:a9:
4e:7c:21:52:8f:97:1b:65:11:b0:37:1b:da:58:bd:
51:7b:f8:1c:d2:98:2e:e6:4a:67:46:82:37:0b:8e:
ea:b2:8c:b1:2b:1c:7a:5b:a1:9e:78:a6:c5:90:0d:
61:7a:a8:bd:9c:cf:60:ea:90:6c:90:64:8e:87:f8:
64:eb:65:8c:fc:a7:55:59:42:7f:3a:a1:b5:f4:9a:
80:61:7d:e4:21:fa:3a:9a:95:e2:6f:e8:6d:96:e6:
7e:61:25:59:9f:be:cc:04:9e:57:94:a9:8a:ed:67:
65:ce:f6:95:a5:58:e0:97:33:cb:7e:21:e5:25:fb:
9b:5b:51:68:8d:51:2f:1d:9f:76:c7:d0:1c:79:28:
c3:67:e9:a4:3c:46:96:69:72:d1:93:ab:61:70:be:
cc:a6:ba:97:a0:2e:cd:72:8b:e0:ad:ca:b4:a6:c6:
01:2c:4e:bf:0f:c0:fb:23:85:98:db:fc:02:66:78:
48:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:B8:64:BF:BD:F1:8B:8C:C1:76:A4:75:9E:DA:F4:DB:90:3F:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/256578580F2011F1B565CB8CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.184.0-156.246.186.255
156.246.198.0-156.246.214.255
Signature Algorithm: sha256WithRSAEncryption
b5:05:71:5a:89:87:4b:ed:de:b0:5d:63:42:f9:e3:a3:90:52:
5c:6c:a8:9c:45:46:b8:22:3e:48:f9:22:f5:85:0f:eb:7e:6d:
56:7a:03:0f:f7:d6:4c:38:ce:50:57:cf:2a:0a:d1:96:fe:27:
35:3f:81:f8:c4:c0:f7:42:f3:40:83:13:f5:38:9f:be:a3:81:
6e:3d:dd:51:1c:f1:ee:00:10:a1:f9:6d:e5:d5:56:48:0b:df:
17:77:1a:1e:f9:ac:bc:d3:ab:a9:ab:22:35:a5:3f:47:1a:80:
84:ab:60:9b:4b:15:49:2b:f8:76:9d:57:95:f5:48:d3:91:2d:
3f:4e:00:3d:58:b9:e6:d1:68:7c:b4:04:99:ac:7c:d2:c1:87:
a9:a5:08:ee:77:4d:04:6b:f6:70:e8:64:f7:73:c4:18:d4:2b:
f9:17:88:03:b7:6c:21:9c:63:2d:43:8a:aa:f7:23:71:e8:a6:
56:e0:75:d3:b3:b0:13:87:d6:6e:6d:3a:35:14:ad:02:eb:c1:
e4:0e:fa:c0:03:6e:45:5c:fb:2d:90:d6:7f:de:1a:50:4b:a0:
d0:4f:30:fd:01:97:02:a2:bf:7e:46:cd:78:31:93:10:7a:56:
59:9a:8f:78:25:ea:10:1a:21:23:77:9f:4d:e7:d6:76:ce:a7:
bb:d6:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:58:17 2026 by rpki-client