Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E6CD52E0F0811F1A3A8C881DAE4EC9C.roa
File: 9E6CD52E0F0811F1A3A8C881DAE4EC9C.roa (raw, json)
Hash identifier: P2w0NWGp5XePBmtNT24V6bU6tB63HB1K2FjWgQMt03g=
Subject key identifier: 6A:BE:88:D4:3F:12:DE:77:FB:BD:58:E5:0E:9F:8E:C8:F3:C1:A7:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E6CD52E0F0811F1A3A8C881DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:35:12 +0000
ROA not before: Sat 21 Feb 2026 09:35:08 +0000
ROA not after: Sat 28 Mar 2026 09:35:08 +0000
asID: 44559
IP address blocks: 156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
156.246.179.0/24 maxlen: 24
156.246.180.0/24 maxlen: 24
156.246.181.0/24 maxlen: 24
156.246.182.0/24 maxlen: 24
156.246.183.0/24 maxlen: 24
156.246.187.0/24 maxlen: 24
156.246.188.0/24 maxlen: 24
156.246.189.0/24 maxlen: 24
156.246.190.0/24 maxlen: 24
156.246.191.0/24 maxlen: 24
156.246.192.0/24 maxlen: 24
156.246.193.0/24 maxlen: 24
156.246.194.0/24 maxlen: 24
156.246.195.0/24 maxlen: 24
156.246.196.0/24 maxlen: 24
156.246.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106322 (0x19f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:35:08 2026 GMT
Not After : Mar 28 09:35:08 2026 GMT
Subject: CN=69997c50-9786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:14:5e:94:b2:2e:f9:77:57:2e:95:f1:de:
e1:b7:1e:a3:c6:3d:f5:2b:b4:ff:bf:2b:23:b0:2a:
0c:eb:43:ea:9b:bf:af:4b:b7:63:4c:99:74:92:0a:
09:37:2a:ab:74:fb:76:be:42:8e:7d:79:f0:4a:ee:
f6:5c:4a:b5:9b:b5:8c:49:07:84:3d:16:41:02:e7:
e1:6a:4d:f0:fc:c2:ea:36:ae:31:ca:87:1f:a8:4b:
d8:06:f4:a7:d6:7f:11:8a:99:3d:0f:26:6a:d9:8c:
d2:df:e9:be:12:6a:e6:ad:b1:35:27:31:82:b1:b0:
af:6f:9e:23:9c:4d:a2:f2:1c:11:8a:9b:b9:61:79:
dc:b2:1d:6f:65:13:e2:2a:e6:74:4d:0e:54:89:41:
6c:4d:d4:3b:90:51:f0:97:11:45:eb:52:8b:ab:59:
24:e3:37:05:40:08:2f:95:fb:64:38:2d:41:bf:e2:
0b:09:16:98:5d:d5:7e:c6:39:8a:36:d6:8f:e3:5b:
43:82:a6:38:17:55:1a:77:9e:3d:91:51:90:d7:60:
31:70:90:71:7e:69:27:17:18:2e:b3:0f:f1:d8:72:
53:da:38:43:99:42:cf:8c:ce:42:c6:f0:45:b3:f2:
1b:fc:30:04:03:04:98:58:ac:b6:f2:89:19:45:a2:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:88:D4:3F:12:DE:77:FB:BD:58:E5:0E:9F:8E:C8:F3:C1:A7:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E6CD52E0F0811F1A3A8C881DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.175.0-156.246.183.255
156.246.187.0-156.246.197.255
Signature Algorithm: sha256WithRSAEncryption
42:76:6b:13:eb:21:03:d1:c6:05:ec:7b:0b:6e:4c:bd:50:af:
d1:54:4b:dd:19:a5:3c:80:0a:c8:7f:58:ee:04:68:e4:31:b3:
59:0c:14:5f:33:6a:a3:a2:56:e6:a6:14:20:11:dc:77:1d:1e:
7b:e5:9c:5b:a5:66:ac:69:05:75:e6:5c:b9:5e:34:27:03:a7:
46:9b:81:a1:63:ab:18:b9:93:4e:60:fe:1e:40:82:2c:c3:a2:
74:aa:b4:b2:d8:45:84:2c:d4:05:04:7b:82:22:f7:ef:c4:64:
3d:7a:98:36:e0:62:f5:86:fb:44:c2:a7:63:a2:83:3b:0d:3e:
71:27:13:50:f9:3a:f0:82:82:72:d7:31:a4:87:19:b1:6d:ae:
b5:4f:5d:a3:2c:ec:0e:bd:3d:70:0d:50:1d:7b:b8:85:f3:8a:
9d:1d:f2:f1:d1:74:fe:57:69:49:3d:1f:96:1c:25:1d:7b:f9:
c8:f2:e5:6d:5d:89:b5:97:b0:5e:b5:9e:1f:ce:bd:9b:a7:33:
41:33:fe:df:98:60:2f:33:9f:ac:16:24:c1:25:f5:91:fd:04:
83:5d:a4:06:f8:5f:d0:2c:d7:04:1f:7f:e6:be:9c:5b:e0:70:
08:18:af:8a:46:db:4c:24:8f:1e:6b:9b:1f:bb:9c:22:d1:59:
1f:95:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:40 2026 by rpki-client