Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4053CBE8160911F1813C467BDAE4EC9C.roa
File: 4053CBE8160911F1813C467BDAE4EC9C.roa (raw, json)
Hash identifier: LnKqLZp8e7ZVszgPMOt803yw9U4FRx3DmwQbbk3Hm5U=
Subject key identifier: 05:A1:3A:10:4A:2C:2A:56:09:3F:36:09:35:E2:E8:CD:07:3C:F4:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4053CBE8160911F1813C467BDAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:27:21 +0000
ROA not before: Mon 02 Mar 2026 07:27:17 +0000
ROA not after: Mon 09 Mar 2026 07:27:17 +0000
asID: 150706
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106930 (0x1a1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 07:27:17 2026 GMT
Not After : Mar 9 07:27:17 2026 GMT
Subject: CN=69a53bd9-ae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b1:97:8c:56:68:ff:69:8f:22:77:ff:1a:65:
b0:88:38:e8:6d:ee:a9:c6:e5:16:83:b0:d4:fe:88:
2b:0f:a0:9a:8a:57:7d:87:1a:89:e1:25:a3:58:5b:
b4:6f:a3:b9:07:ce:5b:4a:4c:3c:93:ca:7a:a9:a1:
bb:0c:ff:12:e5:91:94:59:cd:cb:4d:cd:e8:5e:37:
4d:2c:e2:a7:06:95:c4:2f:bb:48:8d:a9:d0:ef:9d:
4f:4c:7b:14:f5:f1:8b:83:c6:b8:36:a9:2e:e6:24:
6e:b2:b0:2a:55:23:10:98:ab:cf:78:29:82:82:42:
80:21:9e:eb:e7:31:17:0e:02:45:bd:25:67:7d:5d:
ac:fd:f8:87:ab:3e:3c:02:20:08:a1:cf:37:c5:87:
86:08:21:f3:59:c0:16:1a:a0:16:cd:4f:27:77:b4:
90:64:90:42:db:8c:a5:10:88:e8:54:b8:da:70:5e:
53:11:31:11:b8:ea:64:7b:56:ef:c9:99:04:35:72:
9c:b5:d2:f3:c1:40:21:54:c6:44:08:09:8a:4b:7f:
02:d5:c7:26:73:8e:64:bf:ea:da:58:23:68:d4:0c:
96:3e:6d:c0:e7:fa:ab:88:f7:a6:50:0d:3e:77:eb:
13:57:7d:20:0e:03:19:49:26:35:88:41:fd:86:12:
e2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A1:3A:10:4A:2C:2A:56:09:3F:36:09:35:E2:E8:CD:07:3C:F4:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4053CBE8160911F1813C467BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
32:46:09:a0:49:e7:c2:37:4f:9b:ad:d1:be:1d:eb:f5:39:5f:
9e:1b:c3:23:f6:a1:76:fd:77:24:64:fb:95:a5:d9:ca:f6:0d:
0c:66:cf:74:c1:fc:e1:94:c2:bf:b5:b5:9d:9d:eb:3b:69:79:
f3:76:18:aa:ea:de:bb:fc:26:25:08:0d:a5:1b:db:b1:86:1c:
18:0f:1c:5e:9e:4c:57:f4:25:f9:bf:d7:0f:39:7a:4b:53:7a:
77:d3:8b:51:fe:22:f2:77:c1:bb:16:42:ff:f0:84:f0:d3:3b:
09:e8:90:e7:c6:77:66:db:62:23:90:68:fd:5e:af:95:65:16:
39:42:80:6f:23:81:2d:74:dd:80:d0:a5:7e:40:1b:aa:eb:60:
86:ec:c1:41:8f:ba:08:69:a8:bf:9f:2d:29:87:64:2d:ea:6b:
87:45:e0:9c:48:ba:6e:14:c6:44:b8:0a:bd:d8:a2:5a:df:be:
e3:53:84:5d:7d:2f:d0:84:e4:6e:52:12:a1:c7:9d:90:f6:87:
2d:2e:47:41:9a:b8:bc:0d:d3:4c:7b:af:d4:85:a1:3b:0e:8f:
10:e5:97:e3:c0:bd:b1:db:0d:f6:71:2c:89:d3:42:ef:bf:72:
41:a8:b2:cd:4a:7b:40:12:e0:2c:85:31:8d:b0:90:ee:85:80:
19:04:43:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:42 2026 by rpki-client