Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FECE6488245611F1A5E1F1AADAE4EC9C.roa
File: FECE6488245611F1A5E1F1AADAE4EC9C.roa (raw, json)
Hash identifier: 5BgAZxue80cD56LR++pHPFYSQpfgzbcm8gsG8PCjNsI=
Subject key identifier: A1:C2:93:64:2E:5C:BA:B4:63:48:83:D1:21:11:F2:CE:00:F3:70:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A628
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FECE6488245611F1A5E1F1AADAE4EC9C.roa
Signing time: Fri 20 Mar 2026 12:19:09 +0000
ROA not before: Fri 20 Mar 2026 12:19:04 +0000
ROA not after: Sun 26 Apr 2026 12:19:04 +0000
asID: 138915
IP address blocks: 156.225.117.0/24 maxlen: 24
156.225.126.0/24 maxlen: 24
156.227.193.0/24 maxlen: 24
156.227.199.0/24 maxlen: 24
156.229.51.0/24 maxlen: 24
156.229.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108072 (0x1a628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 20 12:19:04 2026 GMT
Not After : Apr 26 12:19:04 2026 GMT
Subject: CN=69bd3b3d-55a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:45:fe:b8:c9:42:c4:d2:27:41:56:64:62:
c4:79:dd:2b:c1:e1:d5:99:c2:ab:36:2f:c4:fb:dc:
fa:55:9f:8f:54:6d:c2:1e:c5:5e:ea:f5:05:a6:4b:
c8:52:0a:34:56:c5:af:c0:61:e5:5f:31:17:17:f7:
0e:89:d4:48:2c:03:dc:6e:78:2b:a0:e7:27:f1:82:
cc:ad:60:6c:45:8e:b7:f6:ff:5a:48:a8:7b:7d:28:
ea:95:2d:ab:23:b9:1e:b8:ab:e9:e3:93:17:f3:5b:
06:c1:a6:ad:be:0d:da:2e:5c:87:69:3c:cf:51:98:
fd:bc:a3:d8:2f:7f:db:8a:95:83:33:22:12:62:5c:
09:20:4c:37:97:23:6c:c1:a1:cb:13:a9:43:13:07:
32:6d:bf:ca:8f:c3:43:d0:66:c7:70:1e:18:3e:e2:
dd:85:51:1b:47:35:c6:7d:ad:49:51:55:2b:4d:ce:
63:9e:0e:5b:a7:8a:53:b7:0e:b8:53:fe:e4:f3:a7:
38:f1:67:01:1b:d5:de:76:59:86:00:75:87:c2:8c:
06:85:10:a1:cb:bb:c6:99:7e:a2:d3:6b:95:72:7e:
88:7c:db:b1:79:fe:88:94:b4:02:a1:58:51:b9:1a:
83:89:2f:4f:2f:f4:73:8d:86:25:0d:6d:34:49:ea:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:93:64:2E:5C:BA:B4:63:48:83:D1:21:11:F2:CE:00:F3:70:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FECE6488245611F1A5E1F1AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.117.0/24
156.225.126.0/24
156.227.193.0/24
156.227.199.0/24
156.229.51.0/24
156.229.64.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:32:74:fb:fb:c1:9f:4f:fe:bc:8c:76:4e:44:3d:dd:83:66:
ad:3d:14:48:d6:38:b3:0a:16:33:25:e4:01:63:c5:97:6e:9c:
e4:80:81:87:21:ec:be:d7:2e:f0:79:60:76:9d:05:ab:78:63:
11:cb:4e:c0:5c:86:3e:87:90:d0:b8:b2:6e:a7:67:2b:de:56:
00:59:33:a9:12:2a:89:f9:8e:65:ca:74:c9:53:9a:db:b1:37:
6d:38:b2:6b:35:50:60:0e:d0:22:88:88:a4:a2:3f:ae:40:0f:
b0:da:f3:81:33:21:3a:68:fb:09:2b:ba:de:1f:4e:9e:ac:36:
f9:59:71:eb:32:d7:4a:46:96:65:e4:32:4e:33:64:79:d4:51:
dc:38:9e:e3:a5:dc:ad:66:76:f8:95:3c:28:03:85:8b:3d:0a:
32:9a:a0:90:6f:d8:c7:c2:73:fb:16:3a:d3:bb:1a:93:e2:6e:
2f:78:37:f7:81:da:56:c4:04:b2:e9:fe:e4:5a:2b:06:fc:f9:
66:14:c4:e5:5f:0a:f6:33:0b:d8:e6:67:db:8f:dd:3b:d1:65:
2b:47:af:16:8e:75:4c:43:ec:93:e4:4d:ca:00:85:37:f0:48:
f1:aa:e5:55:91:93:0b:b3:7f:f8:0f:da:c4:dd:22:38:60:9a:
78:67:ff:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:29 2026 by rpki-client