Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB27401C211311F1B72A76ADDAE4EC9C.roa
File: EB27401C211311F1B72A76ADDAE4EC9C.roa (raw, json)
Hash identifier: lwRjkBq+8LbhIDT3+CQ/hpH4O1tefa5GuySz/mtjt6E=
Subject key identifier: 92:31:6D:62:7E:2A:D0:AA:1B:65:22:80:C9:6E:DA:6A:BC:4E:BF:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A58E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB27401C211311F1B72A76ADDAE4EC9C.roa
Signing time: Mon 16 Mar 2026 08:41:26 +0000
ROA not before: Mon 16 Mar 2026 08:41:22 +0000
ROA not after: Fri 16 Mar 2029 08:41:22 +0000
asID: 17561
IP address blocks: 156.247.203.0/24 maxlen: 24
156.247.204.0/24 maxlen: 24
156.247.205.0/24 maxlen: 24
156.247.206.0/24 maxlen: 24
156.247.207.0/24 maxlen: 24
156.247.208.0/24 maxlen: 24
156.247.209.0/24 maxlen: 24
156.247.210.0/24 maxlen: 24
156.247.211.0/24 maxlen: 24
156.247.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107918 (0x1a58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 08:41:22 2026 GMT
Not After : Mar 16 08:41:22 2029 GMT
Subject: CN=69b7c236-ff78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e7:fe:dd:70:2e:33:2f:3b:21:1f:2a:ee:58:
de:bd:ac:16:1e:c4:b6:44:b0:8b:c2:93:b5:77:58:
fb:65:15:bd:e3:99:15:21:8b:0e:0a:3a:d6:a9:73:
b9:f1:58:55:43:e8:44:17:48:da:a8:5e:18:de:5a:
4e:67:9e:10:e3:78:71:da:77:2a:bd:5d:aa:02:37:
eb:e4:26:a2:f0:c7:77:40:a3:d1:36:24:41:d2:db:
cb:6b:6e:77:45:58:63:50:12:12:52:b5:bc:82:e3:
87:d8:90:11:3b:0b:ac:d1:ee:ce:6e:39:01:86:d6:
43:cd:64:9b:17:57:38:ab:2b:9a:08:c2:b3:eb:11:
88:a4:65:e9:ee:b0:e3:86:f9:40:89:f1:81:87:a3:
9d:24:fb:e8:a2:bb:de:76:0b:c7:31:71:af:6c:f3:
91:e1:3e:cf:b0:9e:51:8e:a4:ae:2f:1d:3f:96:fd:
c7:da:38:ef:a7:24:20:39:b2:84:f9:b1:e1:cc:47:
a4:44:0d:a5:79:3d:b1:82:5b:dd:65:c4:55:31:66:
26:b9:df:d7:eb:d2:06:72:03:c9:09:a4:f5:47:8a:
d5:2b:b5:6c:a8:74:1f:c7:d2:b1:f8:ca:76:50:54:
1b:ea:c3:24:28:d3:80:66:eb:a6:ed:08:f5:0b:9c:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:31:6D:62:7E:2A:D0:AA:1B:65:22:80:C9:6E:DA:6A:BC:4E:BF:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB27401C211311F1B72A76ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.203.0-156.247.212.255
Signature Algorithm: sha256WithRSAEncryption
69:e7:72:70:96:dd:c5:0d:a8:96:0c:08:bb:9a:14:7c:9c:88:
62:60:f9:36:70:e1:86:78:88:a0:5b:3b:3d:1c:b2:a3:5d:db:
10:ee:5b:58:c4:c5:2b:6b:bb:da:b9:5c:46:b8:dc:25:b3:85:
c2:46:ff:43:d2:37:78:fd:6b:53:c8:e0:61:83:9a:f0:e6:a0:
3b:95:c5:78:6b:e6:24:e3:2d:03:c1:a6:c3:13:3e:b4:d8:87:
10:8e:e6:e8:9f:08:21:6d:71:df:f1:53:46:09:d5:9c:0d:7e:
11:50:cd:d4:8d:1a:2a:40:12:89:93:b0:01:fe:51:c8:dd:41:
98:4d:6d:d7:7e:a4:7a:3d:57:6c:bc:a7:e9:92:15:fd:fc:44:
b4:bf:b3:57:46:69:fd:85:75:b4:0d:29:ed:bb:23:7b:34:ac:
cb:99:1d:fc:b0:fd:ff:23:e3:57:50:3d:56:47:63:21:8b:66:
0e:16:34:a6:23:70:38:fa:7c:f7:41:03:c4:28:f8:d3:8c:c8:
a4:08:a4:7e:c3:81:f5:68:77:ab:da:3b:d4:35:11:07:c5:35:
30:f5:00:87:b4:26:e1:ee:5f:ea:d2:0a:c8:ab:20:8a:a8:03:
99:92:8f:b9:fb:16:a1:ac:50:2a:3d:f8:5d:44:bd:99:a9:04:
27:f9:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:07 2026 by rpki-client