Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6166F7721C5011F1A871B7DCDAE4EC9C.roa
File: 6166F7721C5011F1A871B7DCDAE4EC9C.roa (raw, json)
Hash identifier: 5g7otXaPnGrsFCOV92lwc3xkbldRiq6agGNO6piQsOQ=
Subject key identifier: 62:A0:1E:3E:15:CD:F5:58:C1:69:3A:A7:C7:72:0D:91:D8:48:08:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6166F7721C5011F1A871B7DCDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:11:39 +0000
ROA not before: Tue 10 Mar 2026 07:11:34 +0000
ROA not after: Tue 17 Mar 2026 07:11:34 +0000
asID: 153656
IP address blocks: 156.254.32.0/19 maxlen: 24
156.254.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107426 (0x1a3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 07:11:34 2026 GMT
Not After : Mar 17 07:11:34 2026 GMT
Subject: CN=69afc42b-6057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:2e:3b:e6:b2:38:c7:38:03:1a:c9:55:81:
fd:9d:44:69:59:63:13:1e:13:f6:91:3b:95:e5:33:
17:39:0e:b4:e4:4e:6b:19:d1:43:9e:c6:21:0c:bb:
d3:ad:1f:91:52:80:95:2e:ea:83:1e:98:3c:1c:05:
fa:4a:8c:e1:bf:a2:71:06:c7:70:ba:84:ba:7f:f1:
70:3c:13:fe:47:36:55:3b:5c:1a:b9:6b:9d:db:a9:
20:d9:c9:e4:2e:54:4e:ec:5a:32:1b:ef:86:85:ae:
aa:58:12:e5:5d:35:e7:64:ba:46:64:19:5e:8e:93:
6a:11:ad:ea:4f:64:c2:f2:70:67:3a:47:77:92:66:
96:dd:64:0b:23:9c:95:ee:c2:f8:70:2f:f7:b0:51:
b8:f2:5f:f3:e9:ac:ec:09:82:8d:b4:00:fd:a2:ee:
ee:0b:a1:14:af:f3:76:02:a8:b1:a6:c7:47:8f:ab:
89:a3:9a:4d:0a:47:bf:e7:b6:c1:7f:dc:45:63:cc:
0a:08:6f:1d:71:2c:62:ca:c3:62:3c:4b:2f:1b:d3:
76:72:03:0a:3d:ab:ea:98:7b:59:44:69:9f:18:7c:
43:39:a7:c9:f0:ab:ae:2f:88:98:1f:fb:16:e3:0c:
0a:d2:db:2e:cb:e0:8e:47:0a:0a:1d:ad:60:02:f2:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A0:1E:3E:15:CD:F5:58:C1:69:3A:A7:C7:72:0D:91:D8:48:08:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6166F7721C5011F1A871B7DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.32.0-156.254.95.255
Signature Algorithm: sha256WithRSAEncryption
88:40:00:e1:23:90:da:92:b4:09:22:ae:c5:0a:44:c1:d4:3b:
18:d8:23:45:5c:5c:e1:40:a2:31:81:c1:75:ff:1f:ee:3f:63:
11:22:2e:e8:23:09:83:3f:5e:fa:85:61:b0:99:cc:b3:5b:47:
a4:c6:1f:84:b7:f5:e4:8c:c6:4b:95:ba:86:cd:2b:f3:b1:a4:
30:ab:c1:a4:5f:43:e7:8c:d5:bc:65:01:12:5d:3a:10:a8:10:
f3:30:d3:69:d6:95:0c:ac:2b:61:3a:34:ae:00:75:1b:59:08:
78:e3:0d:cc:66:10:63:93:de:42:6e:b7:8c:33:31:a8:47:ff:
5f:3b:a5:46:d0:5c:7a:90:21:4f:31:e9:c4:1b:b2:ba:d8:a9:
4b:52:43:12:c7:8c:f5:bc:8c:2b:5b:d0:07:6f:de:ee:6a:70:
bd:cb:87:68:c0:c8:de:8c:c2:0e:97:ed:0f:ac:f9:fd:60:8f:
77:c5:57:6b:35:49:70:cf:d1:b8:f0:bd:14:28:69:81:9c:4a:
51:b0:0b:90:cb:e1:9b:64:c5:53:c5:ed:b3:4e:22:a6:c1:dc:
28:c5:ea:58:7a:a9:f3:37:4e:e6:d2:81:55:85:7b:06:b3:a7:
51:73:c8:ea:92:8c:63:f7:6e:aa:61:0f:76:a8:3b:27:6a:ca:
06:1d:23:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:54:23 2026 by rpki-client