Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC1D60A739D11F18E27F9B3CE1D38B0.roa
File: FEC1D60A739D11F18E27F9B3CE1D38B0.roa (raw, json)
Hash identifier: sjKPp4xZTY/HSSTInEHBgBkNlISWvO/IFIDtMZ5nvgU=
Subject key identifier: 2B:95:71:CF:AE:D8:21:B3:ED:37:9C:B9:25:B1:37:EE:DF:5E:DF:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C17E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC1D60A739D11F18E27F9B3CE1D38B0.roa
Signing time: Mon 29 Jun 2026 09:36:25 +0000
ROA not before: Mon 29 Jun 2026 09:36:20 +0000
ROA not after: Thu 30 Jul 2026 09:36:20 +0000
asID: 32043
IP address blocks: 156.249.216.0/22 maxlen: 24
156.249.244.0/22 maxlen: 24
156.249.248.0/22 maxlen: 24
156.252.6.0/23 maxlen: 24
156.252.10.0/24 maxlen: 24
156.252.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115070 (0x1c17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 29 09:36:20 2026 GMT
Not After : Jul 30 09:36:20 2026 GMT
Subject: CN=6a423c99-950d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cc:d8:af:72:ac:67:eb:5b:48:0f:d0:44:82:
7b:5c:94:6a:78:d0:32:b5:1f:4d:ef:85:4c:33:05:
0b:ad:5f:fd:37:c5:d3:92:bc:9c:43:55:a7:4f:f6:
4e:3b:2c:12:7c:0a:21:5f:f7:29:7a:74:6a:42:9d:
19:a3:67:7b:51:75:8f:28:49:ba:95:ce:94:45:eb:
2a:ae:2c:9e:4a:fb:ce:7c:e7:08:02:eb:5d:3b:c7:
1f:82:42:b4:a8:09:3d:e4:58:57:da:f5:5a:47:a0:
5c:05:bf:43:4d:0e:45:1d:6d:b7:0b:b5:3e:ab:cd:
b4:95:98:75:28:17:21:71:5e:7f:9b:8b:cf:86:3e:
96:ee:11:d4:a9:ab:ed:e5:e5:19:81:23:cc:b5:a7:
66:4d:18:c1:77:86:63:c5:70:f6:ae:6a:5b:7d:20:
0c:4e:4a:77:c9:00:12:ee:53:3e:0f:87:63:82:0c:
9a:9d:7d:08:a8:ab:a9:fd:02:21:6d:4a:c4:6e:fb:
52:b3:de:bd:85:ff:d0:2e:03:ee:2c:ae:62:3c:da:
1c:59:f4:3b:bf:4e:05:9e:67:48:89:3d:a6:ee:9a:
3e:f2:6d:25:81:dc:54:22:cb:ea:27:2d:1c:32:e1:
80:42:43:9f:1b:7c:06:22:7a:1f:7e:23:c2:96:09:
49:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:95:71:CF:AE:D8:21:B3:ED:37:9C:B9:25:B1:37:EE:DF:5E:DF:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC1D60A739D11F18E27F9B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.216.0/22
156.249.244.0-156.249.251.255
156.252.6.0/23
156.252.10.0/24
156.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
85:2d:49:c7:b0:22:08:6d:68:80:1f:74:08:f3:ae:d9:37:7b:
7d:68:28:4e:39:a7:98:50:4e:2d:4f:07:3e:23:9f:67:7d:c6:
96:30:ab:31:cc:3a:1f:48:e6:7c:89:c7:c8:a8:0c:d0:27:00:
5a:6d:8a:f1:c2:e1:6e:2c:36:47:02:27:ab:71:c4:63:72:18:
44:e4:73:b8:ba:02:45:42:d6:e1:0c:93:2d:6c:21:32:74:52:
20:36:d9:18:4a:4d:35:6b:31:eb:14:1a:7c:6c:01:d3:11:9f:
88:b9:14:f5:6e:21:d3:f8:4a:b6:ef:d0:73:39:e8:b1:69:61:
08:5d:a7:a0:5f:52:49:d9:ec:af:65:d3:dc:97:9c:ed:8f:9f:
fb:a5:e5:e1:4a:62:09:43:82:90:c9:da:ff:aa:65:5e:73:a4:
83:0c:f0:bd:ab:cb:32:51:3a:a7:63:cc:a0:56:a4:a0:f5:51:
3a:bb:a9:49:85:69:98:e2:2e:e2:09:14:39:99:6a:5e:f7:0f:
75:72:ef:9c:39:7f:85:75:a7:98:13:ff:70:bd:54:53:2a:5d:
5d:94:26:6d:bd:0e:13:75:01:f7:ce:85:c1:52:d5:0b:29:d0:
cd:a6:b4:5f:d3:03:65:a8:ab:0b:f9:bb:b6:16:08:e7:7e:9e:
78:a6:99:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:36 2026 by rpki-client