Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4C3766250A11F18F66AAC3DAE4EC9C.roa
File: 3F4C3766250A11F18F66AAC3DAE4EC9C.roa (raw, json)
Hash identifier: MWQMjtN3H1ghW9sjuwgJVWJg/oGlwiLzGxvauYu0ugQ=
Subject key identifier: E0:6D:37:AA:4F:68:09:44:B0:34:EB:7D:70:6E:A4:63:80:C4:18:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A658
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4C3766250A11F18F66AAC3DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 09:42:17 +0000
ROA not before: Sat 21 Mar 2026 09:42:12 +0000
ROA not after: Tue 28 Apr 2026 09:42:12 +0000
asID: 44559
IP address blocks: 156.246.161.0/24 maxlen: 24
156.246.163.0/24 maxlen: 24
156.246.164.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
156.246.245.0/24 maxlen: 24
156.246.246.0/24 maxlen: 24
156.246.247.0/24 maxlen: 24
156.246.248.0/24 maxlen: 24
156.246.249.0/24 maxlen: 24
156.246.250.0/24 maxlen: 24
156.246.251.0/24 maxlen: 24
156.246.252.0/24 maxlen: 24
156.246.253.0/24 maxlen: 24
156.246.254.0/24 maxlen: 24
156.246.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108120 (0x1a658)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 09:42:12 2026 GMT
Not After : Apr 28 09:42:12 2026 GMT
Subject: CN=69be67f9-101b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:b5:ee:14:5b:6a:0e:f3:fe:1d:ac:03:75:
9c:8d:82:38:43:47:55:26:f2:49:70:c1:01:e5:dd:
93:a7:60:15:1d:66:2c:d6:3b:4e:fd:fe:80:60:36:
7b:65:95:ef:23:ca:32:e8:0d:1d:51:b9:43:69:6a:
70:c4:c3:36:48:fc:75:0b:0c:cb:ef:83:c3:34:2f:
f3:99:36:d3:ec:95:48:6e:39:13:a0:a9:cd:9f:a3:
1f:69:c5:f6:b5:48:ff:93:28:f3:74:40:cf:f9:45:
71:a5:4d:43:3c:cc:17:2b:50:fd:93:99:35:fe:f3:
87:76:49:ae:3a:0a:e9:7a:f8:75:9f:fb:4b:df:2d:
d6:79:10:3f:1a:c8:d7:91:bb:04:53:0f:54:ba:b6:
f7:63:e0:63:56:4a:55:44:ba:64:7a:71:7f:fa:bf:
24:8b:20:5c:6e:41:9c:16:c3:b2:33:da:4a:05:e3:
d6:41:55:d9:51:f0:b8:e9:31:fd:69:9c:fe:5a:21:
0d:bc:e6:d7:dc:0f:df:3e:b7:1c:5c:9d:36:6e:bc:
1a:4c:f2:73:ab:7c:bc:db:72:e2:ee:04:4a:71:a5:
f1:d0:e0:bd:bc:04:bb:96:cb:18:b8:d0:63:1b:98:
e5:29:e0:c6:46:ee:63:e5:7d:d3:3b:75:80:6d:36:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:6D:37:AA:4F:68:09:44:B0:34:EB:7D:70:6E:A4:63:80:C4:18:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4C3766250A11F18F66AAC3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.161.0/24
156.246.163.0-156.246.164.255
156.246.239.0-156.246.255.255
Signature Algorithm: sha256WithRSAEncryption
86:66:9c:60:c1:1b:b1:4c:b1:48:c2:b4:ac:81:8f:52:a0:fc:
92:ac:09:5b:4e:ad:a1:8d:e0:d1:d4:19:44:36:b5:5e:7b:6d:
91:be:d7:3b:bd:d7:5f:19:6d:4b:14:e5:e8:5a:54:8b:35:64:
9a:b4:52:1c:0e:9b:5f:a5:ea:c8:d8:44:78:0a:07:f2:09:c2:
0e:da:64:6c:a6:62:a8:f4:1a:20:60:97:b7:f8:0d:77:8a:10:
8c:fa:78:ce:9d:67:43:29:f7:09:e8:7e:0b:ec:17:d2:89:9c:
b8:5f:ad:f3:ee:49:1a:ee:e5:b2:f5:52:ff:9c:fc:f6:13:03:
f0:fa:ec:15:3e:6c:bf:1c:20:eb:47:71:ea:5c:be:fe:46:3e:
15:1c:58:3e:fb:96:fd:57:4e:62:88:11:1d:19:93:0f:85:35:
61:58:c6:44:f2:bd:19:42:86:52:f5:ae:f8:6c:3b:91:21:d0:
1a:56:ec:98:c7:55:7e:b2:af:17:fa:02:ab:c6:c8:0d:41:2f:
24:9c:3b:60:7e:d0:51:49:3a:4c:bd:3c:ee:16:a4:12:66:d9:
92:5d:d9:3b:ef:47:30:08:82:9f:b2:68:04:d0:60:3e:66:7b:
c5:a1:4c:fc:a1:e2:c4:76:8a:b9:b6:52:52:c4:23:fc:14:7a:
01:0e:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:31 2026 by rpki-client