Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86158F881C6A11F1860AB4F2DAE4EC9C.roa
File: 86158F881C6A11F1860AB4F2DAE4EC9C.roa (raw, json)
Hash identifier: /lsHu9HMIQdHgodUqDCuzn215q6BuCiswP/GVrkD8ww=
Subject key identifier: 16:FF:5B:13:8D:70:C4:7D:4E:6D:D6:5F:35:E1:88:88:0D:D7:27:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86158F881C6A11F1860AB4F2DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:18:47 +0000
ROA not before: Tue 10 Mar 2026 10:18:41 +0000
ROA not after: Fri 10 Apr 2026 10:18:41 +0000
asID: 61112
IP address blocks: 156.226.168.0/23 maxlen: 24
156.226.170.0/23 maxlen: 24
156.226.172.0/23 maxlen: 24
156.226.174.0/23 maxlen: 24
156.229.160.0/21 maxlen: 24
156.229.160.0/22 maxlen: 24
156.231.111.0/24 maxlen: 24
156.231.112.0/22 maxlen: 24
156.231.116.0/23 maxlen: 24
156.243.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107448 (0x1a3b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 10:18:41 2026 GMT
Not After : Apr 10 10:18:41 2026 GMT
Subject: CN=69aff007-2733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:41:8f:48:83:89:6a:47:38:50:71:23:02:
df:80:9b:78:62:64:67:16:73:42:b8:1d:47:8a:cb:
ef:19:48:b0:1e:ca:f4:2f:29:eb:b0:32:38:0e:c2:
ec:5c:29:3b:e7:a2:be:b6:ce:d7:df:46:df:df:c7:
57:09:1c:64:76:af:72:87:06:12:9a:27:96:c1:4b:
23:d4:09:e7:75:e2:8d:45:d7:6e:82:d5:4f:74:02:
18:92:b2:11:7f:de:4b:3e:d6:3a:88:82:20:00:c1:
dc:cb:21:2c:af:22:45:b4:2d:be:a9:1a:0b:b7:1c:
87:a8:57:39:97:8d:cc:21:59:44:62:5b:d7:08:21:
ad:ab:93:28:91:70:88:08:44:6e:cb:ca:b5:a5:ea:
e7:0d:ea:ff:0c:8d:b7:55:37:ab:94:eb:bd:a3:61:
ac:ac:5b:a7:f5:9b:e7:1e:b6:2f:05:52:42:19:92:
95:11:2d:f9:00:b6:b7:4e:8d:bb:45:28:bf:e1:b6:
34:f9:94:35:04:f7:7a:d7:77:c4:50:f9:6f:69:11:
61:83:ef:88:9c:92:35:26:d7:fd:08:95:1a:c6:4c:
ce:c9:b5:2b:55:dd:c3:f7:b1:d5:7a:f4:59:9f:f4:
9f:01:1b:4f:37:21:e2:73:4d:67:09:33:8a:92:38:
68:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FF:5B:13:8D:70:C4:7D:4E:6D:D6:5F:35:E1:88:88:0D:D7:27:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86158F881C6A11F1860AB4F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.226.168.0/21
156.229.160.0/21
156.231.111.0-156.231.117.255
156.243.244.0/24
Signature Algorithm: sha256WithRSAEncryption
90:16:c2:04:ca:50:8b:e7:c8:4c:25:11:e6:47:c8:4d:f5:8b:
36:36:7d:47:ca:6e:c3:6f:ad:1f:9e:9b:1e:5a:27:0d:e2:33:
8b:68:23:c8:0d:66:d5:e8:2e:b1:a8:bd:a9:63:8b:7b:17:4d:
62:b6:db:98:04:56:e1:f1:5e:22:4b:0d:d9:9e:ad:0b:f7:5a:
74:e3:7b:58:93:78:88:71:b7:e3:c2:d7:32:f0:99:9d:7c:cc:
71:7f:3c:e9:d8:4e:d1:b8:bb:39:b3:2c:33:6a:ab:45:05:54:
24:9f:da:61:55:eb:62:76:b3:3f:79:3e:22:06:f2:e4:11:b3:
6e:89:43:45:41:e8:49:60:56:7a:6d:69:0e:1c:c3:e7:f9:42:
b0:1e:63:eb:52:97:a0:9b:41:64:cc:d8:f1:3e:71:d5:21:05:
bb:f0:b9:6d:21:6c:5a:ac:4c:1e:c0:51:03:13:20:9f:61:a4:
08:96:24:d2:16:63:f8:97:bb:57:fb:6d:3a:00:d4:d1:4b:c3:
3e:23:95:bf:af:9e:17:18:e8:6f:06:8e:7c:13:4d:8d:79:d5:
c6:d7:b6:c0:b2:55:59:9f:c3:cd:60:f8:73:db:71:12:b5:a4:
c2:62:23:0e:57:94:7f:9f:cd:5e:0f:8c:ff:6e:44:0b:88:6e:
9f:65:7e:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:50 2026 by rpki-client