Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E16F3122254311F1A61C248ADAE4EC9C.roa
File: E16F3122254311F1A61C248ADAE4EC9C.roa (raw, json)
Hash identifier: Znu1QzNjlOj9BkFOZ8LqUVLXoOCkX1rPe6t+jyLKrs8=
Subject key identifier: 3D:A0:B0:4A:2F:7B:2E:A8:EB:E6:86:BD:84:BA:5E:B4:43:67:48:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A690
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E16F3122254311F1A61C248ADAE4EC9C.roa
Signing time: Sat 21 Mar 2026 16:34:50 +0000
ROA not before: Sat 21 Mar 2026 16:34:45 +0000
ROA not after: Tue 28 Apr 2026 16:34:45 +0000
asID: 202656
IP address blocks: 156.246.162.0/24 maxlen: 24
156.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108176 (0x1a690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 16:34:45 2026 GMT
Not After : Apr 28 16:34:45 2026 GMT
Subject: CN=69bec8aa-63ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:a5:97:96:81:21:e9:37:87:76:ad:58:a0:
0b:36:45:f0:4a:98:5e:45:78:d0:42:0e:63:2c:cf:
74:ba:f1:2b:96:6a:07:b9:6a:2d:1e:81:20:16:6f:
1f:65:b7:de:ac:ac:f1:9f:99:07:9b:11:69:0f:8e:
f2:87:f6:1f:d7:36:f7:54:6c:c5:8b:2a:1b:4c:34:
bb:d2:36:a1:c0:0b:40:aa:2d:15:9c:9e:49:06:66:
70:d6:44:15:8d:50:8f:74:22:2a:44:35:f6:43:6a:
21:0d:5e:74:8f:7d:ce:c3:81:92:ff:5c:cc:77:b5:
c6:22:00:1f:43:46:14:7a:5b:bf:6a:e6:b7:f0:ee:
95:bd:cb:8e:03:a1:54:55:18:d3:d3:8f:a2:43:62:
06:c4:e0:8d:5e:1c:a3:2f:31:82:51:84:37:84:fd:
59:86:7d:1f:69:4f:e6:a5:3d:f3:37:d0:0c:9f:86:
2f:c3:db:d0:5a:78:d1:9f:95:3e:a4:7e:84:b2:d9:
a4:8f:68:9d:d9:87:14:42:58:a9:10:06:88:40:2c:
31:56:5b:51:75:4d:b7:97:bc:ef:14:43:94:10:bb:
83:22:03:11:5b:79:ba:43:a5:21:b8:b3:12:c2:ed:
3f:3e:80:af:09:4f:f4:d5:7e:25:1c:bb:b4:c6:ee:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A0:B0:4A:2F:7B:2E:A8:EB:E6:86:BD:84:BA:5E:B4:43:67:48:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E16F3122254311F1A61C248ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.162.0/24
156.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:b8:3e:89:e8:5f:f6:72:8c:92:46:a8:df:f2:42:71:55:ff:
f2:a7:3f:ba:a2:b1:21:33:d7:7c:7e:c6:d2:95:e9:1b:c0:0c:
d1:9f:21:fb:fa:75:88:aa:31:8b:42:ec:a0:53:51:ac:c6:11:
07:c5:3e:03:f4:61:c6:5e:84:58:85:bf:86:e7:c6:47:ac:7a:
d6:87:6e:2b:c9:d7:a9:73:8c:5d:23:d2:7a:ec:98:66:cf:7d:
2f:98:40:08:3a:51:64:ad:d6:b8:9a:1d:17:ec:25:75:d3:bc:
0d:b0:80:bd:ab:02:91:0f:8a:ca:5a:35:71:80:a9:67:dd:bd:
49:09:18:12:77:69:8c:01:27:9a:df:bb:d0:ba:6d:fb:0b:93:
97:02:46:76:b5:cd:8e:9a:ad:a5:ed:21:d0:da:06:a2:74:d3:
51:a9:f9:8b:03:7c:73:61:1d:85:38:6d:a8:ba:a5:53:54:5c:
8a:73:e4:fd:91:10:bf:d4:af:99:f6:ba:2f:df:34:8a:a3:8f:
b9:6a:98:8b:bc:27:94:68:6a:c7:67:d9:b2:9c:0a:28:36:52:
70:ef:bc:41:30:a2:f4:1b:62:1e:56:f2:ab:e1:e4:a3:86:2b:
44:85:f5:18:05:c4:84:52:a7:c5:6a:b3:42:16:3b:8d:f0:98:
c2:2a:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:07 2026 by rpki-client