Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC7A1963E4111F181E5D4CCCE1D38B0.roa
File: ABC7A1963E4111F181E5D4CCCE1D38B0.roa (raw, json)
Hash identifier: VBlHwnPgs7EW0mXu9YxDrn7XX3fiTMUVPWv8fF4pnz4=
Subject key identifier: 21:45:99:38:D5:4B:0A:92:96:21:7A:49:00:20:35:3E:71:01:F6:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC7A1963E4111F181E5D4CCCE1D38B0.roa
Signing time: Wed 22 Apr 2026 11:52:00 +0000
ROA not before: Wed 22 Apr 2026 11:51:56 +0000
ROA not after: Thu 28 May 2026 11:51:56 +0000
asID: 48031
IP address blocks: 156.246.148.0/24 maxlen: 24
156.246.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110089 (0x1ae09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 11:51:56 2026 GMT
Not After : May 28 11:51:56 2026 GMT
Subject: CN=69e8b660-3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:04:59:b8:c6:7c:84:a3:9e:07:c3:99:ab:
39:71:82:86:33:16:4c:42:87:4e:74:e9:60:90:ce:
d8:34:f5:14:e8:f7:a4:38:90:29:76:26:a5:f8:f4:
72:84:9e:7a:f0:ec:a3:cf:c1:3a:48:30:e9:b3:75:
2c:1e:69:cf:c3:db:ee:3e:40:2c:b7:6e:6d:1c:4e:
00:ae:83:e1:33:00:5b:eb:e2:da:f5:cf:53:30:83:
ff:29:80:a7:e5:0c:33:24:1c:b8:d8:1a:18:8a:ac:
e2:9e:ab:07:1c:cc:f1:a6:30:1d:1d:43:15:2c:d0:
c5:dd:da:1b:65:fc:7d:dd:0d:a4:dc:86:00:ab:20:
01:75:9c:3d:10:f9:93:55:a0:45:1b:d3:14:11:c0:
24:00:c3:74:e7:8d:43:9f:a8:23:93:a2:bb:e0:e6:
cd:84:1b:7b:50:4b:c4:af:7b:a3:50:0e:3f:0c:ad:
15:47:5f:7f:b0:08:31:8d:48:69:ac:61:17:49:52:
ac:70:3d:e9:00:04:af:1e:ad:02:0e:8a:54:3a:00:
a7:10:48:25:1b:a4:d1:57:03:7c:ef:0c:11:44:45:
86:c9:85:1e:9e:77:56:d2:ab:b7:fb:78:ae:35:73:
36:d8:c6:47:bf:6c:12:ac:99:8b:db:49:85:00:62:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:45:99:38:D5:4B:0A:92:96:21:7A:49:00:20:35:3E:71:01:F6:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC7A1963E4111F181E5D4CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.148.0/23
Signature Algorithm: sha256WithRSAEncryption
20:3d:e7:f3:79:1a:74:d1:b6:e4:73:a5:39:e9:77:85:64:cf:
75:f2:7d:4e:58:9e:19:16:82:7a:17:50:05:9b:bb:5f:28:a7:
82:56:e0:d3:49:25:3d:01:64:24:64:3a:09:74:3d:ea:54:d7:
1c:65:8d:ab:6c:98:d5:58:73:0f:32:a8:6c:14:07:40:69:05:
b5:bd:12:3e:1c:6e:fe:98:4c:3e:48:1b:42:6f:44:53:c5:7c:
27:0b:6f:9e:8b:cb:37:9e:ec:90:cb:b4:a3:d5:5c:e4:32:78:
a7:73:76:e1:d0:31:fa:19:81:42:05:ee:43:a7:33:00:d8:12:
b4:cb:68:b8:b7:29:8e:f2:ce:de:98:88:87:07:39:90:8d:7f:
b6:4e:6e:ab:18:7a:36:aa:3b:1c:7c:11:0f:dd:0d:74:e2:ac:
16:29:6c:ae:51:b8:a8:a6:f8:57:2e:85:26:18:4a:e7:ac:1a:
c8:da:8e:3d:0c:09:f7:c9:69:8e:25:55:1a:28:9c:83:cc:91:
64:45:c5:9a:f4:08:f5:ad:69:7a:4a:ee:34:fd:df:32:c7:2f:
fb:73:01:f1:69:7c:ba:fb:f3:9a:9f:0a:f8:5b:46:a9:b6:f4:
04:af:48:5d:49:57:84:e9:00:0f:2a:89:d9:72:d7:5f:76:59:
7b:7c:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:55:20 2026 by rpki-client