Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9395D80F2511F1BBEC69ADDAE4EC9C.roa
File: 5E9395D80F2511F1BBEC69ADDAE4EC9C.roa (raw, json)
Hash identifier: Tvc6Nobe543DFnP4MWnbo07MRGxysfPv64u5R8bX0So=
Subject key identifier: DC:8C:CE:C3:83:FB:D6:25:3A:68:3E:9C:F2:12:B0:9F:1D:29:A7:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9395D80F2511F1BBEC69ADDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 13:01:00 +0000
ROA not before: Sat 21 Feb 2026 13:00:55 +0000
ROA not after: Sat 28 Mar 2026 13:00:55 +0000
asID: 44559
IP address blocks: 156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106378 (0x19f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 13:00:55 2026 GMT
Not After : Mar 28 13:00:55 2026 GMT
Subject: CN=6999ac8c-a93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:65:47:62:f2:3a:54:22:03:fe:63:23:84:c8:
38:60:6d:39:0b:fa:7f:f2:2a:7d:50:18:79:ac:76:
37:e3:a8:81:5e:d8:27:d1:da:a2:c2:e3:f9:25:96:
7e:f0:4d:47:b1:0f:fd:98:cd:51:05:3f:99:da:b1:
b6:86:df:31:c6:62:f8:b5:5d:02:57:d8:d6:d3:20:
8e:2e:fa:69:18:fa:af:d4:29:fc:d4:77:4f:8b:e3:
8b:4e:19:67:3f:3e:61:9b:74:69:b1:9f:63:73:99:
7c:5c:54:08:f0:0a:68:e3:f7:c2:90:98:98:e3:b0:
33:22:1e:30:75:fc:e6:9f:05:69:26:fd:41:c2:06:
ef:7c:68:0b:1f:8a:bb:3a:4c:f1:a4:c9:bf:e0:82:
87:77:ab:6f:b6:a2:ab:2d:8f:f3:1b:5b:20:98:02:
a1:e7:fd:f2:4e:c7:59:80:52:7e:c9:db:03:27:77:
c8:9f:39:2c:43:05:45:0e:d0:29:d0:dc:8d:e1:99:
48:d0:7c:18:c4:5b:e0:a9:c8:86:31:dd:a7:6c:74:
7d:94:af:99:f0:61:a3:72:e5:ec:bf:ba:36:8d:e1:
9d:c4:bf:93:1f:1d:87:30:81:02:01:e5:a8:47:e8:
73:27:fc:7f:9f:30:41:49:f9:ff:3d:95:02:c5:64:
55:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8C:CE:C3:83:FB:D6:25:3A:68:3E:9C:F2:12:B0:9F:1D:29:A7:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E9395D80F2511F1BBEC69ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:c2:bb:ef:a9:94:3c:f0:ba:6b:28:47:af:9a:2c:9a:75:ec:
c1:8c:e9:91:f0:b6:70:cb:ec:d9:a4:b3:1d:04:58:e2:f9:49:
22:56:7f:47:9c:06:7a:8c:08:0c:23:30:6d:2f:d1:c0:83:22:
f5:81:8a:14:cb:e3:60:43:e1:98:dc:bb:2e:f4:ec:d1:6f:07:
ff:6c:1b:1e:ed:e0:8e:16:a7:08:a8:aa:7a:dd:37:5b:16:af:
12:4e:14:80:e9:4c:7b:ba:94:e5:a6:01:81:17:3e:8f:a5:2d:
93:dd:86:6f:c9:62:a9:7f:31:46:dd:28:d5:74:56:09:e8:80:
a5:03:d5:62:cc:f1:98:c8:03:b7:7d:65:15:57:ac:93:8d:e7:
6a:80:b9:56:50:f0:b4:41:93:7a:0f:12:f2:a3:6b:43:a0:00:
7a:ae:36:30:11:d7:9b:db:e7:97:90:b1:62:da:4d:da:32:5a:
a0:ec:a2:2a:b4:0e:ce:72:29:f9:f1:c8:ae:cf:46:2d:62:75:
23:e5:3c:e4:b0:ec:be:e6:f3:f6:cb:b6:4d:3b:c3:16:fb:b9:
1a:cb:b6:f3:cc:5b:bf:f9:da:fd:77:b4:ba:db:12:7d:5a:22:
ba:6e:17:10:54:91:76:2b:08:d8:28:2c:67:13:3a:1c:2a:0c:
5e:32:3c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:27 2026 by rpki-client