Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBB5AD8160611F193740EE9DAE4EC9C.roa
File: 6BBB5AD8160611F193740EE9DAE4EC9C.roa (raw, json)
Hash identifier: IYF2nOaHDZUczbGef3KF5VIn3Gxl7VBQAVfos3RZ+ts=
Subject key identifier: 72:72:B8:97:80:B7:BC:47:03:09:A1:D7:EE:B5:71:48:32:AA:19:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBB5AD8160611F193740EE9DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 07:07:06 +0000
ROA not before: Mon 02 Mar 2026 07:07:02 +0000
ROA not after: Mon 09 Mar 2026 07:07:02 +0000
asID: 137443
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106921 (0x1a1a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 07:07:02 2026 GMT
Not After : Mar 9 07:07:02 2026 GMT
Subject: CN=69a5371a-8409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cc:eb:24:6b:62:5e:1a:79:a3:78:ca:60:ec:
68:7b:ad:ab:71:c3:d1:0f:f6:20:63:fe:2a:85:e0:
92:2f:f2:db:6f:d0:f8:d7:e0:c6:97:50:5c:39:9f:
b4:6f:28:f8:c8:0b:4e:4c:77:98:3e:53:da:0d:17:
0e:8d:6a:1f:88:64:c5:5d:6d:81:6e:b3:26:23:8f:
46:d6:03:a1:d7:2a:f1:73:a7:ea:51:b5:e7:d9:5c:
db:59:9e:c4:0d:a4:2f:ce:75:9a:d8:0d:54:d1:f3:
2f:bb:51:09:ea:82:da:db:45:97:28:7b:40:05:6b:
bc:b1:c1:12:39:ed:dc:32:b5:f0:c9:82:27:56:9d:
8f:d0:03:ea:cc:a0:2e:79:30:8a:f7:6f:91:36:09:
76:db:b5:bf:50:2e:cd:47:31:33:3c:8b:5c:e5:10:
2c:75:88:49:ef:31:a6:a4:0d:1a:33:e7:40:25:fd:
08:97:19:07:32:02:c3:c9:cd:04:bf:0e:7d:60:43:
b0:94:af:6e:61:76:20:d0:39:a1:8a:04:ad:a8:3e:
0e:60:98:38:db:ec:ea:02:ff:21:3d:ad:ec:9a:4e:
73:ed:0e:ee:f7:30:b7:d0:ff:94:f7:ef:40:d3:bf:
16:c8:7d:67:2b:3b:02:63:93:f2:56:8c:80:90:ee:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:B8:97:80:B7:BC:47:03:09:A1:D7:EE:B5:71:48:32:AA:19:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBB5AD8160611F193740EE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:65:54:98:b3:a5:da:cd:a0:15:9f:f4:fa:21:32:2f:de:65:
45:67:c8:52:c7:83:ab:0c:53:b3:7a:37:10:22:69:60:ac:41:
d1:9b:76:99:6f:84:3f:62:af:da:07:99:a8:c3:c2:42:39:13:
92:ad:ea:ac:3a:14:f6:ba:d3:1f:82:3f:0b:4b:2c:ef:fb:18:
aa:40:41:16:27:b7:3c:e2:ef:d0:4c:14:b5:5f:ba:80:f3:ca:
2e:b9:4d:9b:7a:3e:61:19:ea:1c:a9:41:1b:32:b6:87:14:e3:
fe:9b:20:9b:fc:ac:21:dc:1b:ff:26:9b:9c:66:a0:9a:3a:5c:
ed:df:e3:cd:00:48:c6:13:02:43:40:74:d9:1e:fb:9e:6a:b9:
da:8b:3c:d6:dd:58:f0:4a:7f:02:a9:09:de:2d:da:3b:2c:c0:
54:4d:9a:2e:ab:79:4b:be:32:56:e4:86:a4:bb:48:f6:60:a7:
56:e9:e8:88:f5:4c:f4:2d:97:0a:df:8a:90:62:b3:71:5c:bc:
99:77:5e:5d:14:78:82:dd:c5:0c:c0:4a:42:f5:90:37:7c:1d:
74:ca:be:74:64:75:7c:19:d9:7f:48:15:ef:a2:8b:28:fb:f8:
87:24:53:1d:7e:85:85:f1:05:9a:ef:3e:83:3b:5c:51:94:88:
6a:5c:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:28 2026 by rpki-client