Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516059D60D7D11F1A2C40B7CDAE4EC9C.roa
File: 516059D60D7D11F1A2C40B7CDAE4EC9C.roa (raw, json)
Hash identifier: TBTyl29gk8EZ/00ZFk27Era2V+WvqAwRJR/U7rmeT/A=
Subject key identifier: 08:13:48:15:16:7E:85:A9:0C:CB:6A:7E:1D:E0:1C:A7:13:70:C0:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516059D60D7D11F1A2C40B7CDAE4EC9C.roa
Signing time: Thu 19 Feb 2026 10:25:36 +0000
ROA not before: Thu 19 Feb 2026 10:25:25 +0000
ROA not after: Thu 09 Apr 2026 10:25:25 +0000
asID: 48678
IP address blocks: 156.229.123.0/24 maxlen: 24
156.229.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106183 (0x19ec7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 19 10:25:25 2026 GMT
Not After : Apr 9 10:25:25 2026 GMT
Subject: CN=6996e520-3a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:c8:5d:85:84:53:59:7c:f8:93:49:75:0f:
18:c8:68:3a:48:b8:76:a2:a4:4c:e7:5f:a8:e6:b8:
97:cb:f7:ca:e9:e8:4c:70:84:7c:44:27:a8:ec:b4:
44:35:9a:9f:89:e1:28:82:b0:e2:be:d1:52:d7:cf:
ac:d5:87:ec:54:46:b7:ec:73:09:72:49:5f:45:11:
0e:e3:0e:07:8c:89:e0:02:53:04:ff:6b:ac:1f:44:
5d:4f:ad:57:13:39:95:85:a7:0a:f9:4d:d9:7d:30:
67:42:a9:17:e1:4c:81:46:47:fc:75:5d:37:64:9e:
66:50:a6:9c:2a:b6:6c:45:b9:8d:37:46:8a:76:2c:
3d:15:14:72:a9:a4:25:c4:8a:28:10:93:62:4a:63:
13:71:8c:07:9e:92:55:bd:c3:14:9d:e5:45:cb:28:
3c:4c:8d:c9:86:6f:e6:27:38:a6:e0:4c:03:ad:d9:
a2:52:7d:da:62:f1:77:0a:a7:4a:4e:38:58:50:6b:
9e:fa:21:b0:9c:ae:9c:0c:bc:69:90:1a:30:30:c5:
6e:78:a4:10:74:c4:6f:bf:36:e6:cb:3e:2d:88:18:
c0:b2:d0:3b:6f:30:26:8b:91:d5:92:e1:99:ab:2b:
dc:61:1d:ac:5c:35:47:d6:6f:29:46:ef:63:d8:05:
a6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:13:48:15:16:7E:85:A9:0C:CB:6A:7E:1D:E0:1C:A7:13:70:C0:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/516059D60D7D11F1A2C40B7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.123.0/24
156.229.176.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0c:b9:ef:90:f7:63:27:f8:24:d8:d7:91:d7:22:28:34:1a:
a8:80:3d:8e:1f:89:0e:36:c0:8c:92:e8:47:fb:30:55:0f:87:
9b:18:0b:69:c8:e7:34:06:66:7d:f9:8c:b2:40:fc:17:a8:74:
6b:f4:38:8a:77:af:71:6f:7f:99:23:69:0f:4d:dd:77:28:2e:
c5:9b:21:f8:ca:09:20:43:24:83:1a:3d:e7:9d:e1:a8:32:75:
34:59:31:df:ec:d5:1c:c3:ab:f6:69:14:f9:32:39:1a:35:d6:
86:d3:9b:53:bb:bd:36:06:f6:54:88:c4:66:9b:6b:34:23:bf:
f5:29:2b:6c:39:ed:4d:5c:50:24:12:7f:7d:a2:fc:6f:6e:ce:
d1:04:ed:c8:da:f7:f5:09:ac:fb:9d:a1:65:68:b5:92:9e:2b:
f8:b4:07:c1:c8:1c:be:b5:e8:40:ac:3c:f0:c6:fd:19:d1:e7:
0e:a6:ec:4c:d6:0b:99:d0:77:b3:17:93:d3:ad:65:b0:02:18:
37:9e:cb:a2:98:69:77:b4:e1:c4:13:06:02:93:c2:c3:68:df:
db:38:46:45:07:ef:9b:0c:21:e0:f2:5a:8f:01:44:1c:df:98:
cf:5a:a4:4d:f4:f1:74:3d:63:37:30:00:c3:90:f8:7f:24:7c:
a5:a4:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:59 2026 by rpki-client