Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D9B8FE253F11F1B7DB46EDDAE4EC9C.roa
File: 17D9B8FE253F11F1B7DB46EDDAE4EC9C.roa (raw, json)
Hash identifier: rn71Q9M+JDbwRlJ96pR+ESvc+dzWHRJ+XBbS8XB696s=
Subject key identifier: EB:4F:34:31:C3:45:3E:F3:99:E6:31:53:94:A8:FC:C1:97:B2:E9:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A686
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D9B8FE253F11F1B7DB46EDDAE4EC9C.roa
Signing time: Sat 21 Mar 2026 16:00:34 +0000
ROA not before: Sat 21 Mar 2026 16:00:29 +0000
ROA not after: Tue 28 Apr 2026 16:00:29 +0000
asID: 48031
IP address blocks: 156.246.128.0/24 maxlen: 24
156.246.129.0/24 maxlen: 24
156.246.130.0/24 maxlen: 24
156.246.131.0/24 maxlen: 24
156.246.132.0/24 maxlen: 24
156.246.133.0/24 maxlen: 24
156.246.134.0/24 maxlen: 24
156.246.135.0/24 maxlen: 24
156.246.136.0/24 maxlen: 24
156.246.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108166 (0x1a686)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 16:00:29 2026 GMT
Not After : Apr 28 16:00:29 2026 GMT
Subject: CN=69bec0a2-ecda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:9a:e2:6a:ba:72:4f:a7:ed:68:f4:70:6c:
c8:ff:a9:d8:8b:54:a0:73:30:1b:f8:fb:12:12:fa:
8f:d8:a0:91:f5:df:d0:45:06:e1:f1:3a:29:ec:be:
e4:25:c6:f6:a4:af:d7:1a:5f:64:8a:e5:3c:2a:7e:
da:75:e9:4d:c7:ba:5e:d0:18:ef:e0:fe:69:d1:90:
1e:4e:1d:d5:7d:a1:d9:9c:5c:3c:c2:d0:ea:fb:aa:
7d:f0:bd:de:e8:b8:59:de:07:7e:b4:1f:59:71:ac:
53:3d:f0:c1:ad:e0:7e:18:6e:53:8d:7b:78:42:31:
dd:b5:4b:6e:7c:95:39:8c:aa:62:db:de:b4:dd:bd:
6a:fa:96:5b:cd:a7:19:0f:d3:fb:b8:74:0c:0f:b7:
c5:06:ab:19:22:03:23:8d:4f:92:79:bc:b3:ee:47:
02:56:a7:18:df:5e:02:ab:0e:e5:e0:c7:8f:1b:7d:
6f:f4:7c:85:eb:12:c3:72:35:f2:97:7e:67:46:6c:
f3:11:21:50:4d:f6:fe:66:26:fc:97:2b:c5:e3:35:
b8:9b:90:2f:dc:f5:34:37:aa:d0:a6:55:63:69:08:
73:85:9c:b8:d3:6e:e4:78:29:30:dd:d9:86:17:99:
36:c4:43:1d:6f:60:1d:19:50:f4:fe:08:e1:a7:43:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:34:31:C3:45:3E:F3:99:E6:31:53:94:A8:FC:C1:97:B2:E9:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D9B8FE253F11F1B7DB46EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.128.0-156.246.137.255
Signature Algorithm: sha256WithRSAEncryption
06:76:3b:9f:d3:f8:1b:68:69:2a:45:9a:be:90:bc:75:44:b3:
fc:bc:5b:e7:dc:9d:81:23:ed:c8:6e:b5:33:93:92:df:d8:15:
51:57:db:f2:68:87:ed:4d:4d:2c:89:04:ec:0a:e7:45:0a:6e:
ba:31:f6:94:46:3e:4c:55:c6:97:8e:ec:b5:38:70:24:fc:09:
65:c9:1a:a1:8e:69:85:78:83:15:b7:ba:4f:da:92:c7:b5:e1:
c7:c4:fb:ab:87:a4:79:de:bb:40:4c:ac:ef:b4:34:59:1d:73:
27:9c:06:19:32:e0:e6:d4:e3:c0:6c:c0:03:29:3a:c6:07:a1:
bd:03:29:e9:9c:01:54:ae:f4:a2:af:37:20:cb:0c:a4:a3:d5:
b3:cd:0d:44:ab:88:e3:37:f2:13:5e:9e:f8:33:9f:ab:b4:39:
55:b5:14:e9:9a:e3:90:18:e2:17:24:e5:b0:c0:36:d9:f1:84:
1e:12:3b:ab:ec:f1:48:8a:1e:63:bf:e5:09:a5:18:a7:a6:98:
fb:16:b3:b2:07:3e:a3:f6:94:9a:b7:e2:91:b4:66:8a:6a:80:
9d:69:d5:f4:e1:f3:5f:7b:05:67:1e:b0:2c:c9:be:12:0c:54:
ad:b1:7c:49:49:7d:65:4c:8e:09:ca:ab:9f:e4:d6:0f:e6:6b:
3d:48:d0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:49 2026 by rpki-client