Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFE4366193011F1B00B72E0DAE4EC9C.roa
File: 6BFE4366193011F1B00B72E0DAE4EC9C.roa (raw, json)
Hash identifier: uXGG4X7KZ3l3+f4E+XHrF8qruDOExRk2acI3IkzV9r4=
Subject key identifier: C7:A8:25:2F:6F:3F:A2:CC:00:EC:DA:B2:77:83:0D:86:47:38:AA:3C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFE4366193011F1B00B72E0DAE4EC9C.roa
Signing time: Fri 06 Mar 2026 07:45:19 +0000
ROA not before: Fri 06 Mar 2026 07:45:13 +0000
ROA not after: Mon 13 Apr 2026 07:45:13 +0000
asID: 17497
IP address blocks: 156.245.176.0/21 maxlen: 24
156.245.176.0/24 maxlen: 24
156.245.177.0/24 maxlen: 24
156.245.178.0/24 maxlen: 24
156.245.179.0/24 maxlen: 24
156.245.180.0/24 maxlen: 24
156.245.181.0/24 maxlen: 24
156.245.182.0/24 maxlen: 24
156.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107236 (0x1a2e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 07:45:13 2026 GMT
Not After : Apr 13 07:45:13 2026 GMT
Subject: CN=69aa860f-bc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:e1:20:5c:80:a3:f0:f7:4b:1b:53:66:42:
a6:61:4f:b8:db:d1:48:1d:d5:87:35:0c:a5:7b:19:
d4:d0:ae:dd:58:dd:db:75:6f:2a:ca:91:e8:a0:9a:
3b:47:ed:0b:c6:e6:77:4a:a7:51:fe:43:a2:54:f2:
a0:9b:35:dd:b7:66:1b:92:f9:af:58:79:fa:7b:e8:
53:29:d3:4c:50:d4:65:07:2a:8a:c2:16:dd:66:b7:
29:ca:ea:84:44:e3:d2:33:68:26:e5:27:4b:a4:76:
7d:a7:8f:81:99:29:94:a7:2b:00:27:ae:05:d5:59:
95:73:2d:7a:a3:ee:ba:bb:58:57:c6:93:bc:79:eb:
ab:d1:59:e1:70:0d:bc:e1:19:e1:4c:c0:f0:a2:53:
6a:56:39:65:6a:4c:5c:b0:fd:43:72:d4:16:d1:ad:
74:9c:92:2d:9b:ad:84:c6:f4:75:cc:38:95:6e:10:
53:a2:b8:b8:d5:25:f5:0c:36:a4:d2:d3:07:2b:2b:
ea:75:49:08:86:20:7d:38:c0:be:92:7d:b8:00:08:
62:60:d7:5e:f2:e2:a6:4c:b2:78:37:47:2f:2e:be:
1b:36:85:19:fd:93:00:b7:9c:2a:0b:a9:3d:ff:cc:
59:cf:ee:6b:f0:b7:a0:7d:37:ae:35:1d:b1:7b:ed:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A8:25:2F:6F:3F:A2:CC:00:EC:DA:B2:77:83:0D:86:47:38:AA:3C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BFE4366193011F1B00B72E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.176.0/21
Signature Algorithm: sha256WithRSAEncryption
38:b6:5a:d5:82:a9:c9:d6:9f:5b:f7:d5:ff:b2:44:6d:73:23:
e8:e3:a0:e8:84:17:27:86:27:5c:cf:a4:ee:e6:9f:d7:59:b8:
42:1d:81:80:a7:e1:5a:5c:43:f6:37:73:54:a5:f6:f0:f5:03:
96:27:c2:65:d4:9c:8b:0f:0b:f7:c1:09:95:a5:f8:f2:05:68:
58:64:2e:03:6d:98:a5:81:1f:7f:e8:28:a7:19:3b:27:21:43:
68:d7:b3:af:06:e8:be:3f:4b:62:fe:4f:5c:79:90:51:20:3d:
eb:c8:54:65:28:9e:ad:7e:a3:fd:86:56:b7:11:f7:66:ea:12:
40:82:77:1c:2d:6a:35:a5:3f:79:5c:ee:d6:b5:fd:91:fb:2a:
0c:45:6a:bc:4f:e8:0f:f8:a0:18:00:85:73:02:03:4a:4a:23:
77:ef:50:5b:dc:eb:f4:5c:96:e8:f7:be:a7:ef:ea:4e:50:a2:
ef:ae:64:02:fd:f8:1a:a6:1e:b2:88:9a:50:13:c3:db:24:84:
01:56:02:f8:98:e1:81:c7:fe:72:21:9c:79:ab:61:01:8f:f3:
6c:7e:db:d6:a5:2e:b9:8f:8f:a7:30:70:e9:82:3d:72:44:45:
b9:4e:22:95:fc:0f:c8:51:66:35:77:de:05:34:61:ef:9f:23:
57:34:16:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:47 2026 by rpki-client