Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A3BB9E254611F18C35ED9ADAE4EC9C.roa
File: 71A3BB9E254611F18C35ED9ADAE4EC9C.roa (raw, json)
Hash identifier: 4sxDLstf2UfqhwTu4GS6rIY17bDNut5EXbP5n/wURhU=
Subject key identifier: 3D:B7:DA:05:56:29:A0:40:25:88:E8:BE:A1:4B:49:37:04:24:54:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A699
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A3BB9E254611F18C35ED9ADAE4EC9C.roa
Signing time: Sat 21 Mar 2026 16:53:11 +0000
ROA not before: Sat 21 Mar 2026 16:53:06 +0000
ROA not after: Tue 28 Apr 2026 16:53:06 +0000
asID: 44559
IP address blocks: 156.246.175.0/24 maxlen: 24
156.246.176.0/24 maxlen: 24
156.246.177.0/24 maxlen: 24
156.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108185 (0x1a699)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 16:53:06 2026 GMT
Not After : Apr 28 16:53:06 2026 GMT
Subject: CN=69beccf7-1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:5f:98:c5:fd:c4:7a:83:50:16:15:8c:e0:
77:1e:17:89:c6:f2:9f:47:d3:4f:0c:01:b9:d8:1e:
c7:c2:1e:78:f8:55:09:09:87:4d:12:25:4f:1d:f6:
4e:91:e8:60:fe:76:69:e8:a7:9d:2e:34:8f:41:b8:
ba:8d:84:ad:e5:2f:07:fa:50:fa:aa:44:c5:85:89:
a2:1b:ec:04:4e:a9:bf:08:d0:c3:4f:74:31:fb:8f:
ff:56:dd:44:3a:41:ed:bc:23:66:7c:6e:e1:1d:c9:
88:41:4e:34:04:87:1f:7e:b3:4c:12:cb:91:d6:21:
b5:05:cf:47:5f:36:b5:5b:18:e8:60:86:49:ee:ea:
71:95:be:ad:70:88:45:7d:38:89:14:64:c6:78:74:
a9:eb:bf:80:c5:09:ba:15:b8:9d:a8:95:35:aa:64:
09:ae:3c:01:60:81:4a:9b:2d:cf:4e:93:7f:21:c1:
c9:fa:2f:83:53:c3:0a:81:7d:54:f4:d9:f4:4d:7e:
fe:ec:fe:be:70:20:2f:aa:f7:46:cb:2b:04:0a:94:
c4:01:d1:bf:bb:ae:29:c4:c6:87:31:0f:cf:2f:4f:
25:b7:21:d3:8f:40:cd:6e:4c:1f:30:b6:b6:dd:09:
c2:8a:08:fc:22:f4:85:8b:09:65:45:30:c9:27:83:
23:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:DA:05:56:29:A0:40:25:88:E8:BE:A1:4B:49:37:04:24:54:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71A3BB9E254611F18C35ED9ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.175.0-156.246.178.255
Signature Algorithm: sha256WithRSAEncryption
6f:f0:9d:87:ad:79:26:0a:30:a7:05:ea:eb:f6:44:1d:e5:8d:
64:d2:a5:66:6f:9e:eb:77:08:c6:36:57:1f:96:eb:51:69:7e:
89:cf:f4:9d:ea:11:3a:ff:59:52:41:d7:53:a8:f5:26:37:c9:
c8:8d:f8:26:94:c0:e7:7f:87:23:49:82:e8:de:cd:68:ce:40:
e0:55:e3:1d:36:74:b5:93:17:72:5f:29:e8:25:d4:c7:c7:ba:
af:c1:f5:f4:ba:2a:18:6f:ec:3e:b5:31:00:f1:cc:f3:9b:a5:
cd:1e:b0:ed:2a:23:8d:6e:43:12:f5:5d:1c:67:c9:06:5c:b6:
52:9e:2e:c6:f1:1e:96:f4:cb:59:f8:10:68:6e:30:b7:a7:a2:
9c:68:d0:ac:80:3d:af:67:43:ee:73:33:8d:d2:6b:28:17:ae:
92:c8:f1:bb:61:cb:60:e5:e4:fd:dc:64:73:70:47:c1:2e:a1:
84:95:60:db:0a:98:82:02:8a:ad:30:b3:ed:b5:1d:f5:8e:df:
b7:ed:ec:1b:ad:2b:7b:57:74:ad:24:60:56:b4:0a:7f:33:1a:
7b:5b:c4:04:4c:fc:b3:9d:b9:60:fa:80:99:df:2c:1f:b1:03:
3a:da:61:15:f5:4b:db:83:c7:5e:1d:f0:78:b7:84:90:1f:07:
1e:85:21:4b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAaaZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMTY1MzA2WhcNMjYwNDI4MTY1MzA2WjAYMRYw
FAYDVQQDEw02OWJlY2NmNy0xNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsedfmMX9xHqDUBYVjOB3HheJxvKfR9NPDAG52B7Hwh54+FUJCYdNEiVP
HfZOkehg/nZp6KedLjSPQbi6jYSt5S8H+lD6qkTFhYmiG+wETqm/CNDDT3Qx+4//
Vt1EOkHtvCNmfG7hHcmIQU40BIcffrNMEsuR1iG1Bc9HXza1WxjoYIZJ7upxlb6t
cIhFfTiJFGTGeHSp67+AxQm6FbidqJU1qmQJrjwBYIFKmy3PTpN/IcHJ+i+DU8MK
gX1U9Nn0TX7+7P6+cCAvqvdGyysECpTEAdG/u64pxMaHMQ/PL08ltyHTj0DNbkwf
MLa23QnCigj8IvSFiwllRTDJJ4MjsQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFD23
2gVWKaBAJYjovqFLSTcEJFTyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MUEzQkI5RTI1NDYxMUYxOEMzNUVEOUFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9q8DBACc9rIwDQYJKoZI
hvcNAQELBQADggEBAG/wnYeteSYKMKcF6uv2RB3ljWTSpWZvnut3CMY2Vx+W61Fp
fonP9J3qETr/WVJB11Oo9SY3yciN+CaUwOd/hyNJgujezWjOQOBV4x02dLWTF3Jf
Kegl1MfHuq/B9fS6Khhv7D61MQDxzPObpc0esO0qI41uQxL1XRxnyQZctlKeLsbx
Hpb0y1n4EGhuMLenopxo0KyAPa9nQ+5zM43SaygXrpLI8bthy2Dl5P3cZHNwR8Eu
oYSVYNsKmIICiq0ws+21HfWO37ft7ButK3tXdK0kYFa0Cn8zGntbxARM/LOduWD6
gJnfLB+xAzraYRX1S9uDx14d8Hi3hJAfBx6FIUs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:20 2026 by rpki-client