Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE16F0DC210411F197D770D6DAE4EC9C.roa
File: FE16F0DC210411F197D770D6DAE4EC9C.roa (raw, json)
Hash identifier: +pBxQbyTEheHlhb7AmUpE881O3xshrECBmNnO1j+qNU=
Subject key identifier: 35:6F:14:B8:52:30:4E:42:05:E0:2C:FE:D2:60:E3:CA:A5:E0:F8:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A552
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE16F0DC210411F197D770D6DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 06:54:36 +0000
ROA not before: Mon 16 Mar 2026 06:54:31 +0000
ROA not after: Fri 16 Mar 2029 06:54:31 +0000
asID: 17561
IP address blocks: 156.255.148.0/24 maxlen: 24
156.255.149.0/24 maxlen: 24
156.255.150.0/24 maxlen: 24
156.255.151.0/24 maxlen: 24
156.255.152.0/24 maxlen: 24
156.255.153.0/24 maxlen: 24
156.255.154.0/24 maxlen: 24
156.255.155.0/24 maxlen: 24
156.255.156.0/24 maxlen: 24
156.255.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107858 (0x1a552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 06:54:31 2026 GMT
Not After : Mar 16 06:54:31 2029 GMT
Subject: CN=69b7a92b-455c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d2:07:0a:21:47:1a:02:96:3b:0f:18:40:fb:
6a:49:98:26:6b:7a:69:8e:35:e4:82:8b:3b:b8:39:
f2:f2:d7:74:bc:84:78:b0:ad:f6:85:c1:ec:78:92:
48:60:35:ce:a2:57:32:c7:d5:5e:69:ea:95:b8:eb:
8f:4a:b8:0f:49:92:d0:9b:4d:cb:08:0c:86:ae:2d:
da:90:e0:9d:b5:6b:18:7e:46:58:98:c5:66:27:fb:
32:57:44:f6:2b:9a:b0:fd:39:52:04:26:e1:4d:ac:
7f:c6:f7:cf:12:94:57:49:98:b2:e6:3a:8f:6c:79:
14:5b:65:ce:4b:5e:2c:74:00:c2:ca:b3:8d:37:92:
ad:cc:63:8d:81:23:09:02:f8:7d:01:e1:dd:a7:06:
f3:8b:2c:b7:34:e1:97:2e:52:b8:46:d3:e2:34:0f:
cf:81:3c:a0:7f:1d:0b:a7:f2:29:74:4f:11:8a:df:
64:ad:81:b6:8b:96:d3:a7:4e:13:f2:69:6e:76:64:
fc:ac:12:cc:e2:5a:e6:45:87:55:c8:af:87:27:56:
04:bb:4d:b7:12:aa:cf:67:68:fe:fb:4a:25:c0:25:
39:f8:eb:49:62:f2:bd:28:52:48:b3:4a:b8:8e:8b:
12:dd:b4:17:7f:94:85:2c:59:19:2c:0f:4e:d7:a3:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:14:B8:52:30:4E:42:05:E0:2C:FE:D2:60:E3:CA:A5:E0:F8:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE16F0DC210411F197D770D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.255.148.0-156.255.157.255
Signature Algorithm: sha256WithRSAEncryption
44:c3:fb:d9:4e:8e:32:62:c3:dc:07:15:1c:14:b4:fe:57:75:
c1:39:66:b0:47:7a:3e:5a:f1:d3:7a:1b:26:a9:0d:ff:6b:f6:
c9:c4:b5:2a:ab:fe:01:1d:de:29:69:d1:49:45:d4:60:a7:93:
a1:a2:16:7b:02:a6:d0:d9:5e:a5:a4:be:22:96:50:63:f1:28:
70:a7:ae:b5:b5:41:5e:6a:3e:e4:25:7e:15:2f:a3:22:fd:41:
c0:22:74:f2:bb:a0:69:7b:09:25:2d:2c:a5:c8:13:86:0a:ba:
08:a6:40:39:5c:58:fc:16:d8:14:68:48:20:cc:09:6b:77:17:
5a:c1:17:a3:65:da:90:14:18:5c:68:1d:24:d9:79:69:39:fa:
dc:85:77:00:ac:63:13:41:e7:bb:f8:7e:f8:94:36:07:b2:df:
f5:61:4a:49:73:cd:a7:bf:bb:17:f9:47:16:2c:e3:81:c6:e5:
6c:b7:b3:4c:87:0b:6e:53:1a:19:9c:2d:76:24:36:3c:63:e2:
f7:cf:7d:64:48:2c:3d:2b:5e:8c:35:de:8d:f5:93:52:b6:74:
4e:fd:3f:85:68:48:f1:aa:d8:90:95:15:97:bf:76:f8:16:63:
76:8c:d7:74:32:89:5e:63:66:78:09:0e:a2:b1:cd:c5:a9:d1:
7a:fa:55:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:17 2026 by rpki-client