Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1157CD463E4311F1B74B10D5CE1D38B0.roa
File: 1157CD463E4311F1B74B10D5CE1D38B0.roa (raw, json)
Hash identifier: ESSnhS6BQyF61M6nBhGX+zxa+banvuoxpUneB87bQQg=
Subject key identifier: 7B:E0:76:84:3D:34:C5:85:08:D0:3E:D8:63:E3:F8:CD:E1:65:BF:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1157CD463E4311F1B74B10D5CE1D38B0.roa
Signing time: Wed 22 Apr 2026 12:02:00 +0000
ROA not before: Wed 22 Apr 2026 12:01:56 +0000
ROA not after: Thu 28 May 2026 12:01:56 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
156.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110091 (0x1ae0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 12:01:56 2026 GMT
Not After : May 28 12:01:56 2026 GMT
Subject: CN=69e8b8b8-bedd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:ad:f4:08:ce:f1:43:c6:28:10:64:f1:4a:
e3:ba:04:0c:6e:f3:5a:01:f9:5b:19:ee:b6:32:7a:
0f:76:8a:79:4c:96:3f:e3:b5:3b:fb:d5:b8:c5:b6:
db:a6:e9:c9:c5:73:22:29:ba:33:b3:6a:bb:17:d8:
3a:8d:bf:c0:74:9c:69:8f:ab:bc:06:97:fa:53:37:
4d:0f:d3:ab:98:42:24:1f:e8:1a:c9:5b:a3:96:95:
e7:b7:8c:ee:11:d8:6c:9b:5b:a2:17:ef:86:fd:a5:
79:22:d8:a4:8e:a3:bd:74:f8:6d:56:f4:a6:d8:9f:
94:d2:6a:26:c1:bb:b0:e3:95:65:7c:e7:8c:cb:f8:
7a:2a:03:8e:8a:14:05:0b:2b:ad:93:18:aa:ac:35:
cf:24:45:ac:eb:0a:d3:2b:b5:6a:99:51:72:fa:b0:
2b:f9:41:a4:11:06:1c:19:e5:c2:c3:7f:55:d7:e3:
38:50:25:b5:49:f2:24:11:51:7d:d3:88:73:ed:ed:
84:f7:b6:07:41:51:46:76:15:be:82:95:24:bf:52:
bc:81:5c:c4:eb:40:f6:f2:74:99:08:95:a7:85:99:
99:6b:84:d1:32:5e:f6:24:57:47:61:ed:ff:71:f2:
46:e3:c1:4c:d0:1a:b6:78:de:04:9c:79:1d:7c:e4:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E0:76:84:3D:34:C5:85:08:D0:3E:D8:63:E3:F8:CD:E1:65:BF:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1157CD463E4311F1B74B10D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:13:88:22:b9:df:0a:a2:ed:6a:92:a7:b1:da:a6:36:7d:9b:
5d:a7:1c:31:a6:73:bc:f8:c7:2a:6f:e8:f7:fc:cc:12:dd:19:
96:26:f5:ea:15:54:72:18:ff:e1:c3:c1:0c:ff:b3:2f:4d:e9:
16:98:cd:31:93:0a:b8:b4:45:4a:ce:62:fb:c5:9b:6c:ca:fa:
80:4c:96:3c:cb:49:51:55:7d:47:8a:cb:30:f5:31:2b:1a:e7:
95:a2:70:d2:84:a3:b9:e7:83:5d:31:e9:be:df:22:b7:d2:c3:
26:b8:1b:85:c2:fe:58:dd:dc:d3:05:7a:81:43:79:9d:01:07:
3e:76:02:56:a9:cb:0f:3a:0d:be:98:42:29:45:df:13:21:e1:
40:bb:1d:c9:9e:3b:77:fa:54:1e:fe:e1:35:3f:62:2c:26:ac:
92:70:c5:5e:4b:ec:ac:1c:e0:f5:80:ef:30:3c:55:7d:73:a3:
5e:33:9e:a6:50:0e:ad:70:0e:cb:24:ad:97:d5:1f:11:dc:a4:
c6:33:ee:ad:17:e6:a2:54:43:58:f8:6f:94:61:f6:47:bb:75:
72:a3:b5:92:fd:64:5c:8c:77:de:e5:f5:a5:e1:ce:f4:d2:7d:
08:90:38:85:e9:66:20:fa:97:61:17:c8:88:2f:a3:7c:67:39:
fb:2f:5f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:46:52 2026 by rpki-client