Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E97E8840F0F11F1839A21A7DAE4EC9C.roa
File: 4E97E8840F0F11F1839A21A7DAE4EC9C.roa (raw, json)
Hash identifier: ig+rs4auUtdani9HWeAw9UR1K4D6iY5Sy7qbaXCFG9U=
Subject key identifier: 9D:96:1A:6A:B7:48:73:49:30:51:8B:01:F4:50:3B:AB:B8:C9:35:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E97E8840F0F11F1839A21A7DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 10:23:04 +0000
ROA not before: Sat 21 Feb 2026 10:23:00 +0000
ROA not after: Sat 28 Mar 2026 10:23:00 +0000
asID: 44559
IP address blocks: 156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106343 (0x19f67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 10:23:00 2026 GMT
Not After : Mar 28 10:23:00 2026 GMT
Subject: CN=69998788-96ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:79:72:3b:cd:71:1f:04:6a:fe:c5:3d:a9:
91:b7:57:d8:c2:1f:ca:dc:e2:45:c8:f6:6a:6e:f8:
a3:84:0b:79:da:69:90:85:06:3b:f7:49:30:2d:c8:
4c:15:23:81:bb:eb:4b:c0:27:08:b4:86:0c:1b:28:
df:47:14:7d:65:f2:2c:e8:0f:29:89:07:c3:cc:e8:
3a:7f:94:2d:60:6e:9f:f4:89:bc:dd:ad:0e:07:50:
3f:b8:02:fb:3a:72:39:79:15:18:70:45:39:06:98:
9b:74:3f:0a:30:fb:bf:62:f0:c9:73:7c:85:95:b5:
22:f8:6b:19:77:4c:14:45:d5:e6:5b:97:e1:00:a1:
0a:fa:25:5f:a4:fa:6d:8f:6a:3c:73:a6:23:21:b0:
7b:86:8b:29:a6:2b:97:69:70:d2:5c:73:49:0d:14:
33:13:96:07:1c:a5:be:69:67:90:3f:31:e0:cb:c7:
1e:c0:a2:d9:6e:d7:b4:02:cd:8a:40:31:59:59:fb:
34:fc:b9:3a:20:09:54:27:ac:9d:ad:8d:44:89:0c:
42:4d:ce:bf:d7:bc:61:ee:a6:36:6b:d7:d2:e9:50:
d9:f7:9a:69:d3:48:44:fa:ab:a6:f8:7b:68:77:f7:
5a:cf:ee:a0:91:82:2e:1a:49:a6:ea:f6:70:93:ac:
c2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:96:1A:6A:B7:48:73:49:30:51:8B:01:F4:50:3B:AB:B8:C9:35:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E97E8840F0F11F1839A21A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.245.0-156.246.254.255
Signature Algorithm: sha256WithRSAEncryption
82:e8:b1:10:20:40:d1:15:31:4b:23:44:d4:2e:11:ca:c8:11:
c2:de:1a:2f:30:54:d5:c2:c1:c7:7a:29:44:d2:dc:56:f5:27:
3c:89:53:b2:c9:af:aa:0a:4a:9a:4b:2d:28:3b:9c:cb:be:dc:
1d:88:5f:27:19:2d:33:71:11:08:d3:a4:79:19:d1:6f:e1:e7:
a9:5b:3d:d2:c8:dd:be:00:00:cc:1d:87:01:c0:15:95:61:e6:
29:0b:91:16:1a:c0:a0:a1:fb:ef:8c:67:5b:02:b2:ff:29:9d:
f2:29:4e:c2:34:2b:17:dd:1e:d0:be:a8:ff:cf:28:cf:76:04:
80:62:39:d8:6e:20:37:0d:fa:ee:16:a6:05:5b:3c:6f:da:3e:
7a:05:67:bd:0a:b5:0b:f4:20:55:c1:ba:a3:c8:27:51:23:68:
20:19:5d:1f:2f:de:1e:55:bc:4a:e0:f8:2a:88:7f:da:8d:7e:
ca:80:bb:d2:86:1b:d0:4f:7e:3e:f2:00:cc:8e:fb:a3:38:f7:
19:79:40:b1:03:0e:eb:3c:1c:fb:8f:7d:f5:46:1d:fa:2f:1a:
df:de:55:d2:19:cc:19:c2:b1:1e:86:1c:c4:07:bc:bf:b6:41:
bb:77:62:8c:97:d4:f7:48:0d:30:08:a3:f6:00:62:37:d0:68:
3e:e7:da:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:46 2026 by rpki-client