Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A365185813B711F1B1F652BEDAE4EC9C.roa
File: A365185813B711F1B1F652BEDAE4EC9C.roa (raw, json)
Hash identifier: RmuS5SMUR8m2363xASkI2/zVv1iXNqhZ4X251O9Oga4=
Subject key identifier: 50:3F:06:02:66:1E:E2:D3:DE:D6:9F:51:9C:B3:19:05:5C:F6:13:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A10A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A365185813B711F1B1F652BEDAE4EC9C.roa
Signing time: Fri 27 Feb 2026 08:38:07 +0000
ROA not before: Fri 27 Feb 2026 08:38:02 +0000
ROA not after: Wed 01 Apr 2026 08:38:02 +0000
asID: 11427
IP address blocks: 156.229.180.0/22 maxlen: 24
156.229.232.0/22 maxlen: 24
156.229.240.0/22 maxlen: 24
156.233.4.0/22 maxlen: 24
156.244.192.0/21 maxlen: 24
156.244.216.0/21 maxlen: 24
156.248.96.0/21 maxlen: 24
156.249.72.0/21 maxlen: 24
156.249.88.0/21 maxlen: 24
156.249.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106762 (0x1a10a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 08:38:02 2026 GMT
Not After : Apr 1 08:38:02 2026 GMT
Subject: CN=69a157ef-5961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:a5:13:82:03:ab:14:20:07:76:70:d3:a1:
98:cf:4c:44:d9:ad:19:72:bd:aa:c4:23:e9:00:91:
67:96:14:55:e0:ae:9c:42:e5:d1:9e:8f:02:fb:90:
e3:d8:7d:ad:55:89:c5:49:c7:0e:2a:6a:7f:ca:67:
6d:a9:86:ca:11:ba:bf:0c:ec:93:fc:22:45:4d:8c:
5d:8e:7b:72:cd:d1:0e:bb:c7:21:23:4a:68:7e:58:
5d:20:00:35:11:ba:76:e8:9f:0f:f0:a6:87:79:a0:
26:20:57:2a:6c:94:57:a0:0b:c7:d3:a0:d8:66:95:
75:37:91:66:64:df:50:4d:4e:04:0a:4f:be:d7:c9:
79:3c:0c:a7:f0:8a:47:6c:4d:84:b4:34:fe:7e:42:
62:32:e0:92:20:eb:82:ee:23:23:b6:5a:84:bf:d1:
7e:d7:d8:1f:8d:90:d8:56:73:f9:83:f4:c5:03:88:
a5:e7:cf:68:b7:f9:01:5c:ef:68:d4:f3:6d:d9:1b:
cc:b1:ee:c2:5e:8c:be:94:0c:57:ce:c3:a6:7e:47:
1b:49:46:41:bf:4c:ee:9e:76:0e:73:97:28:64:08:
24:05:d4:50:34:4f:dd:bf:ff:dd:04:16:9c:0f:72:
43:84:35:8c:5e:a2:f0:c3:ee:19:ca:d4:d7:be:e1:
a9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:06:02:66:1E:E2:D3:DE:D6:9F:51:9C:B3:19:05:5C:F6:13:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A365185813B711F1B1F652BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.180.0/22
156.229.232.0/22
156.229.240.0/22
156.233.4.0/22
156.244.192.0/21
156.244.216.0/21
156.248.96.0/21
156.249.72.0/21
156.249.88.0/21
156.249.104.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:f4:64:5b:af:af:c8:87:49:9a:a9:23:4f:5a:81:5a:46:fd:
43:d6:ea:1c:4d:18:93:9a:91:6f:ab:4c:21:b0:4a:88:c3:31:
6c:26:53:5b:5e:a1:f9:08:13:7a:1f:9c:48:23:8b:89:b1:78:
f7:4b:c8:17:7e:94:1f:cd:be:a6:fd:81:dc:92:3f:71:14:7c:
ec:a7:18:8b:c2:d6:30:20:de:a2:12:7b:8d:e7:99:68:d1:d3:
ba:cb:e9:63:59:71:67:da:15:07:12:7f:9d:11:6f:b7:2f:e4:
72:4a:68:43:31:85:21:47:b6:a7:20:08:95:dc:94:ee:85:8a:
74:35:a1:13:02:c5:81:ab:e3:af:b3:33:09:92:6c:d8:e7:bf:
21:e4:be:15:55:6e:e5:c6:f3:ab:30:a1:39:c9:5f:df:ad:fd:
cb:c1:be:c1:2f:c4:98:d3:91:e2:f3:50:64:f2:ea:b1:91:5b:
3e:b6:c4:e6:34:c0:7e:e0:8a:b5:c8:f6:0e:95:c3:69:00:c1:
df:33:ab:39:35:e7:78:be:e4:3c:75:29:08:35:73:f6:58:61:
77:65:25:a9:d3:c1:ac:bd:4e:31:7a:63:f1:f3:0f:d5:14:d3:
56:ee:c6:f9:a2:f5:1e:c0:34:39:ea:94:5b:4c:67:26:51:11:
61:7d:3b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:52 2026 by rpki-client