Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC281B4163111F185742EEBDAE4EC9C.roa
File: 2CC281B4163111F185742EEBDAE4EC9C.roa (raw, json)
Hash identifier: 3BvxhteJoMWXsn48Bo73nofUUUF7jwHnxZSZAKxL58U=
Subject key identifier: 8A:86:7C:1C:C4:2E:DB:EB:50:B4:05:45:89:8B:27:8B:E8:BE:BF:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC281B4163111F185742EEBDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 12:13:09 +0000
ROA not before: Mon 02 Mar 2026 12:13:04 +0000
ROA not after: Thu 09 Apr 2026 12:13:04 +0000
asID: 138915
IP address blocks: 156.244.0.0/24 maxlen: 24
156.244.1.0/24 maxlen: 24
156.244.2.0/24 maxlen: 24
156.244.3.0/24 maxlen: 24
156.244.4.0/24 maxlen: 24
156.244.5.0/24 maxlen: 24
156.244.6.0/24 maxlen: 24
156.244.7.0/24 maxlen: 24
156.244.61.0/24 maxlen: 24
156.244.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106966 (0x1a1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 12:13:04 2026 GMT
Not After : Apr 9 12:13:04 2026 GMT
Subject: CN=69a57ed4-a189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c9:20:b7:f2:fc:fc:0e:25:71:8c:1f:38:3c:
41:01:41:b7:b7:ac:3f:8c:08:f7:72:00:ea:4c:e1:
0d:e3:6b:cd:3f:d3:fb:ec:42:7e:27:f4:c0:3e:77:
b5:0c:15:b8:b0:47:5f:59:89:7e:f3:84:20:44:c1:
80:e6:46:5d:0a:4d:b4:23:ab:94:1e:9d:60:c1:8a:
c8:cf:52:96:87:14:87:dc:89:dd:5d:a5:cf:0e:a8:
26:88:b1:a0:d0:ba:2c:09:57:73:63:35:6d:f7:b8:
90:ba:dc:94:b8:c8:bb:83:b6:b6:cb:47:a9:80:a0:
3d:c4:3c:19:0a:0a:5b:78:1f:69:7b:7c:4b:2e:f8:
4f:d5:11:21:78:be:13:25:c1:45:f3:9b:a7:28:76:
23:da:18:70:1e:3b:eb:ad:b1:d3:df:d4:95:9b:07:
d5:05:0f:58:09:d4:f4:b6:81:0a:9b:8d:2a:5c:20:
bb:a0:b9:a2:b5:ea:9e:47:23:6f:1f:73:46:dc:06:
aa:62:ab:b4:3a:10:93:44:02:8e:4a:84:ae:4e:15:
93:23:82:62:db:c0:50:70:ce:20:67:1b:1c:d3:fe:
57:96:aa:63:e8:ca:a6:96:aa:64:88:33:97:88:e5:
27:8e:82:70:6e:a4:2c:76:59:5c:62:d4:6c:fd:a5:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:86:7C:1C:C4:2E:DB:EB:50:B4:05:45:89:8B:27:8B:E8:BE:BF:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CC281B4163111F185742EEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.244.0.0/21
156.244.61.0-156.244.63.255
Signature Algorithm: sha256WithRSAEncryption
25:57:87:38:22:7a:6a:1d:39:08:79:21:3d:18:3f:8c:3b:5b:
ff:99:3d:ff:53:ec:b6:c3:45:be:86:25:73:b2:29:53:cc:54:
05:f6:b0:1f:fd:1d:69:4c:d9:5c:6c:3e:09:0f:79:b4:fd:f6:
3d:a4:6d:78:24:0f:eb:aa:f3:4b:dc:b2:f1:48:94:72:3f:b2:
77:72:f2:fb:b5:a3:fc:0e:0d:5a:de:70:55:c3:43:58:9d:b4:
6c:e2:86:3e:86:5f:96:fa:ff:8f:a6:30:d1:49:89:e0:1e:7c:
37:13:f0:19:8f:2b:a1:69:c9:b3:2d:8d:f5:f9:b9:25:99:54:
58:40:f1:24:96:75:3b:47:cc:47:b8:83:38:57:05:b0:39:ff:
e6:34:d5:2e:01:c9:f2:b5:a0:75:60:97:02:b0:b1:69:49:a4:
8e:2d:d6:d5:c4:a0:04:26:e5:82:b3:46:21:a3:07:92:65:46:
56:e9:fd:da:e0:2a:7b:83:3c:a6:56:11:3d:ca:fd:6e:ee:93:
26:5d:1f:8d:f8:99:b6:f6:34:e5:28:63:01:ea:0a:54:ab:54:
44:1c:54:fe:65:aa:83:95:39:87:75:76:17:fd:04:74:6c:7a:
0b:80:05:12:fa:5b:4c:85:0a:af:77:15:60:96:da:fa:c2:6e:
cc:4c:93:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:26 2026 by rpki-client