Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2816C101DE911F18A9AEAB4DAE4EC9C.roa
File: B2816C101DE911F18A9AEAB4DAE4EC9C.roa (raw, json)
Hash identifier: ebLotFteyr53gggghteoyMasOMWWovDF1wZTZZFR2aI=
Subject key identifier: CB:11:2A:D7:8C:61:AD:45:BE:47:B9:CD:7E:DC:10:F1:F5:71:51:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A454
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2816C101DE911F18A9AEAB4DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 08:01:39 +0000
ROA not before: Thu 12 Mar 2026 08:01:33 +0000
ROA not after: Thu 16 Apr 2026 08:01:33 +0000
asID: 22773
IP address blocks: 156.242.241.0/24 maxlen: 24
156.242.242.0/24 maxlen: 24
156.242.243.0/24 maxlen: 24
156.242.244.0/24 maxlen: 24
156.242.245.0/24 maxlen: 24
156.242.246.0/24 maxlen: 24
156.242.247.0/24 maxlen: 24
156.242.248.0/24 maxlen: 24
156.242.249.0/24 maxlen: 24
156.243.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107604 (0x1a454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 08:01:33 2026 GMT
Not After : Apr 16 08:01:33 2026 GMT
Subject: CN=69b272e3-73ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:30:ae:0f:dc:55:2a:6e:91:4c:35:9d:a5:
10:98:33:78:ba:3b:a2:43:d0:c2:dc:35:c0:41:e8:
13:7f:33:02:f5:65:8d:ea:a6:cb:1f:f1:5e:a5:82:
88:7e:8b:fc:0d:10:bf:57:c8:5b:70:8c:fe:9a:92:
da:00:40:8f:6c:a9:74:16:c2:5c:df:41:12:51:02:
66:3b:7d:77:9f:43:7f:de:bc:22:d9:aa:61:6f:6b:
96:11:4a:a8:22:62:a8:a4:89:49:64:af:61:25:ab:
30:95:70:58:ca:05:e4:19:e9:67:f6:b2:2d:b8:8d:
85:38:50:83:83:b6:be:b2:2c:ec:5f:5f:58:38:07:
02:21:69:00:48:d4:8f:d3:fa:1f:be:3b:f4:df:41:
7d:a4:94:fe:14:e0:4a:3e:72:2b:39:ee:ea:7a:26:
e9:bd:b3:51:f7:35:9e:4e:fb:ca:a1:70:95:ab:f8:
9b:fe:c2:3a:a2:72:c6:05:78:04:41:f0:99:c3:8b:
b7:b8:9e:ce:f2:71:73:4e:79:74:ab:42:a2:1c:27:
4f:16:e9:32:b2:a8:b2:ea:5d:8c:de:e9:32:d5:e9:
4f:0b:a0:f1:6a:10:84:87:e5:0d:cf:e6:fa:7e:b2:
2a:45:f5:7a:e9:80:3b:1a:48:5e:31:36:74:60:21:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:11:2A:D7:8C:61:AD:45:BE:47:B9:CD:7E:DC:10:F1:F5:71:51:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2816C101DE911F18A9AEAB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.241.0-156.242.249.255
156.243.111.0/24
Signature Algorithm: sha256WithRSAEncryption
95:15:10:e9:7c:00:a9:d8:2d:bc:44:ab:ba:0f:e8:c7:31:79:
94:45:6a:7a:78:1f:0d:eb:e1:26:11:50:aa:b8:25:d4:bd:5a:
a9:e4:86:1f:7d:cf:e3:76:63:d1:3c:7d:3c:5e:22:18:57:5d:
85:6e:fe:5c:68:18:82:31:ba:40:33:f1:fd:1b:4f:db:80:5e:
0a:92:be:36:58:d5:02:b9:4a:7c:8e:da:1a:f1:00:13:88:7f:
43:8e:6b:69:d7:2e:76:e9:2d:92:f3:fb:f9:9b:05:c0:9b:88:
83:12:c3:ba:58:16:c9:8d:97:8a:c8:8a:77:04:91:91:16:d3:
d0:5a:a8:e0:90:f3:ca:86:d4:f5:08:64:54:05:45:42:3b:b8:
53:de:43:74:5a:d9:94:8f:03:40:aa:c8:48:6f:f5:ee:62:2b:
d0:0f:b7:9e:3f:35:84:06:d5:66:71:6d:80:da:01:7f:a2:c2:
2a:11:a4:05:5f:df:34:dd:50:c2:7d:24:14:df:f9:51:1c:9f:
14:c4:f7:c2:ca:e0:87:51:24:67:61:6c:5d:6b:43:53:33:36:
8a:71:c8:bc:55:4f:31:cb:4b:dd:f4:d8:d3:44:a9:9a:72:e8:
96:17:46:af:9c:79:20:37:68:b6:53:1e:31:ad:4a:8a:20:0a:
45:c6:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:28 2026 by rpki-client