Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A616F467C2E11F1905085FCCE1D38B0.roa
File: 0A616F467C2E11F1905085FCCE1D38B0.roa (raw, json)
Hash identifier: kRppNcpczgA0DkEPqXbdzz4+Zh4P3YIKerzpqAb3H38=
Subject key identifier: 6B:6F:51:32:7D:ED:A1:48:18:81:D0:C7:92:45:1F:AF:50:51:34:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C412
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A616F467C2E11F1905085FCCE1D38B0.roa
Signing time: Fri 10 Jul 2026 07:07:41 +0000
ROA not before: Fri 10 Jul 2026 07:07:36 +0000
ROA not after: Mon 20 Jul 2026 07:07:36 +0000
asID: 22773
IP address blocks: 156.229.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115730 (0x1c412)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 07:07:36 2026 GMT
Not After : Jul 20 07:07:36 2026 GMT
Subject: CN=6a509a3d-556c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:1a:1a:a0:09:da:5c:02:65:e0:9c:8b:59:
4b:57:cd:03:39:60:eb:5f:1d:ee:9b:32:88:f2:20:
f4:79:d8:70:7c:15:a9:8a:d7:04:2b:9a:86:18:74:
eb:dc:d5:45:95:08:2f:29:4f:3b:39:34:c5:25:d6:
15:93:45:58:91:40:46:8a:26:98:18:af:ab:a9:5b:
7f:13:50:e9:b7:01:c8:a5:fe:56:c4:3d:ae:03:6f:
3e:db:21:60:21:c8:19:b8:f3:6f:c7:c2:4f:dc:93:
12:6a:c4:2b:76:09:c8:82:44:19:f5:af:8a:52:d3:
8f:14:fc:4e:c9:93:19:33:a2:bc:bf:3a:bb:53:69:
23:23:d2:b6:a3:8b:c9:60:27:c3:07:02:5f:c8:9b:
b6:c6:cf:bc:5a:2e:d5:28:fe:da:be:b2:d0:a8:ca:
41:17:65:91:ff:21:01:ac:79:53:05:41:47:a8:b8:
53:39:c2:ac:ab:30:7b:b0:32:b1:e2:61:1b:12:4b:
f1:76:01:73:ec:0a:26:94:96:f7:c7:64:dd:84:0f:
ef:81:58:ac:8d:00:2e:30:03:59:ed:99:8d:54:03:
6f:bf:65:d5:67:96:20:70:43:07:22:99:63:1a:45:
52:a7:0f:be:19:7e:c9:f1:85:31:02:28:cc:8b:e5:
d5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6F:51:32:7D:ED:A1:48:18:81:D0:C7:92:45:1F:AF:50:51:34:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A616F467C2E11F1905085FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.229.61.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:90:67:6c:c1:d0:4c:af:bb:99:c3:b4:81:ef:41:27:65:60:
72:25:f3:b2:4e:1a:13:09:f9:14:7b:85:55:77:26:6b:39:c9:
24:c3:68:15:40:48:89:44:a9:41:8d:97:de:00:ac:f3:f8:ad:
ad:44:79:d7:f7:bf:69:53:99:08:38:53:81:99:b7:8b:b8:07:
e6:8c:a7:0d:dc:11:fe:f3:97:c5:99:9f:e0:5c:80:e3:f3:e6:
6f:36:f3:c8:a3:75:38:a7:97:c7:96:66:45:72:29:a7:06:7c:
89:2b:e0:9e:c3:a5:bc:8a:58:d0:14:14:f6:80:cc:8a:e5:ed:
56:8f:ff:07:4d:25:19:b3:08:0e:3a:db:d9:89:ae:b9:b4:05:
6d:ec:9f:56:50:d2:87:d7:ae:91:18:05:47:cf:4a:d5:cf:b9:
a8:91:bb:80:52:84:0b:3c:9b:ef:b2:02:e4:48:d1:87:e2:a0:
ac:c8:07:30:6a:29:8d:0b:4b:a4:40:98:bb:24:04:0a:25:70:
ac:8f:9a:ea:d3:81:d8:c9:cf:5a:d9:38:71:49:1b:3d:69:54:
e7:33:17:e9:5f:e2:65:d2:88:4c:e4:d6:fc:31:f6:28:23:ee:
61:2f:60:11:7e:46:bf:40:c1:f8:71:ac:98:48:f3:03:78:2a:
61:21:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:59 2026 by rpki-client