Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D946F1C1DF811F19D23E288DAE4EC9C.roa
File: 6D946F1C1DF811F19D23E288DAE4EC9C.roa (raw, json)
Hash identifier: X0qN7PBbATa//761WnwpL5T4cla0WjU3dx64zUz6jco=
Subject key identifier: 80:A9:26:BB:47:A1:5C:C5:C1:20:AE:C6:19:1C:7F:DD:CC:08:DD:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A488
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D946F1C1DF811F19D23E288DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:47:06 +0000
ROA not before: Thu 12 Mar 2026 09:47:01 +0000
ROA not after: Fri 17 Apr 2026 09:47:01 +0000
asID: 22773
IP address blocks: 156.229.61.0/24 maxlen: 24
156.229.63.0/24 maxlen: 24
156.233.126.0/24 maxlen: 24
156.238.188.0/24 maxlen: 24
156.238.190.0/23 maxlen: 24
156.239.57.0/24 maxlen: 24
156.239.58.0/23 maxlen: 24
156.239.61.0/24 maxlen: 24
156.239.62.0/23 maxlen: 24
156.239.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107656 (0x1a488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 09:47:01 2026 GMT
Not After : Apr 17 09:47:01 2026 GMT
Subject: CN=69b28b9a-20ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:62:cf:19:d2:f1:23:63:16:f0:12:64:1a:
c6:6e:1f:b7:83:79:75:f7:a1:79:cf:b6:e9:6a:93:
66:f7:be:6d:82:62:2d:48:92:93:ba:15:40:74:5a:
89:26:12:32:fb:5d:36:90:bc:41:ec:75:51:cf:ca:
64:7c:1f:fe:3b:fa:0b:9f:68:06:2d:ce:b7:03:85:
ec:75:75:96:49:4b:6e:cd:ff:61:c7:4c:af:a8:98:
67:e2:9d:6b:ba:e4:f8:de:5b:d3:24:61:7e:08:64:
e6:a9:ee:85:ad:b2:6b:96:d0:08:ea:67:dd:3d:44:
3f:70:9f:6e:32:11:1c:e5:aa:f3:1b:c4:2c:4a:a5:
c9:8b:26:7b:4e:61:41:ed:39:e4:61:dd:d5:87:65:
16:25:04:0f:56:98:5f:b7:74:d9:67:5e:fb:b2:cd:
e9:75:3c:d5:ef:4a:95:0f:52:13:bc:3d:b4:4d:a9:
e4:7f:f3:ce:be:65:c5:9f:e8:c4:88:19:3c:48:fb:
be:84:de:c3:fd:fc:36:3d:70:01:ce:2b:2a:5f:f2:
20:08:b7:1d:a8:c3:07:af:d4:85:cd:82:28:2e:0a:
b4:72:06:d1:8c:1e:4a:b9:c7:12:ab:92:5b:fd:bb:
d7:2d:de:a0:6b:77:7c:4b:b7:07:0c:33:b3:c6:1c:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A9:26:BB:47:A1:5C:C5:C1:20:AE:C6:19:1C:7F:DD:CC:08:DD:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D946F1C1DF811F19D23E288DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.61.0/24
156.229.63.0/24
156.233.126.0/24
156.238.188.0/24
156.238.190.0/23
156.239.57.0-156.239.59.255
156.239.61.0-156.239.63.255
156.239.141.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:54:6c:50:2a:f9:7f:83:ab:05:ef:60:34:d6:30:f2:18:19:
9f:a1:09:5a:20:4b:f2:7c:22:21:4e:a1:b9:59:8e:64:20:81:
c9:95:18:af:58:03:ef:c4:1a:42:5e:13:d0:dc:50:af:c0:d5:
59:5a:34:1c:ef:bc:91:cf:07:4d:3b:e8:c4:0f:48:4d:e5:b8:
fe:b6:1b:8e:80:22:07:f4:24:92:d8:85:c4:fa:5e:29:09:47:
14:8d:e8:64:f6:76:ff:02:56:a5:f5:c3:84:fe:24:24:4a:6a:
ae:74:84:54:df:5e:1d:a4:54:a2:93:03:ed:12:46:86:5a:f8:
41:39:3f:89:52:e9:a0:6f:73:29:78:91:73:e1:78:c9:51:07:
04:37:d0:1d:8e:b7:fc:1e:7d:e6:b6:59:3a:ab:d1:74:16:14:
90:cb:cb:1e:c1:92:43:07:06:1a:c5:47:12:a9:a3:7b:b6:cc:
cf:26:b2:38:f0:63:c3:4e:13:95:c8:e1:62:ee:14:7d:f9:b8:
35:1c:36:01:ce:4b:89:80:59:b4:54:bb:12:29:ef:83:43:68:
10:17:f0:a6:a7:96:20:5f:eb:dd:29:65:5a:30:fa:53:28:d9:
c4:44:0e:b9:ae:37:91:fa:68:fc:3f:e4:9a:8c:63:60:0a:e6:
a6:59:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:11 2026 by rpki-client