Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61BB51683B0011F1A9D2D0D1CE1D38B0.roa
File: 61BB51683B0011F1A9D2D0D1CE1D38B0.roa (raw, json)
Hash identifier: wO12nav6x9uggUoE4EAKLfvXsymLtvJyVKArTDnxwr4=
Subject key identifier: 28:E3:48:27:BF:B4:15:5B:A3:1F:D9:D2:3F:14:1C:EA:53:9C:08:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61BB51683B0011F1A9D2D0D1CE1D38B0.roa
Signing time: Sat 18 Apr 2026 08:27:05 +0000
ROA not before: Sat 18 Apr 2026 08:27:00 +0000
ROA not after: Sat 23 May 2026 08:27:00 +0000
asID: 138415
IP address blocks: 156.247.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109964 (0x1ad8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 08:27:00 2026 GMT
Not After : May 23 08:27:00 2026 GMT
Subject: CN=69e34059-7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:f7:36:e7:39:b1:20:55:21:38:3d:b5:c7:
c3:7d:b7:42:51:4a:1c:af:76:db:a9:fb:c0:45:c4:
ab:f2:64:24:c6:d3:e5:cf:68:b1:e4:e4:10:6c:8a:
9b:af:20:90:61:d6:4d:66:c1:f0:f5:ca:31:5b:15:
da:03:2a:d3:ac:a9:73:b2:5b:b0:16:bd:1b:8d:1b:
66:86:b7:70:5f:f0:3f:2e:9a:46:af:1a:fa:43:97:
82:fb:f9:a7:78:6f:92:97:bb:ca:6b:e7:12:8c:ec:
6e:9a:34:81:4b:a3:81:60:dd:cb:47:31:75:03:d2:
84:df:1f:bf:89:0b:9b:bb:59:90:1a:77:1f:33:fa:
c0:81:32:87:49:f9:1a:15:e4:78:37:5b:f5:b4:39:
36:32:7f:c3:b2:82:2d:32:87:b9:cf:e3:02:03:20:
80:b9:98:86:2f:47:47:92:ed:14:77:e7:fc:3f:5c:
84:6c:3f:bd:d8:77:93:34:01:a5:f5:2a:2e:1b:a8:
1a:44:cb:5d:5f:1b:2f:43:97:47:b7:6d:74:28:bc:
09:22:e8:42:07:54:a2:41:7d:8e:c5:69:17:8d:a9:
8d:0b:cd:22:4d:d6:a1:77:fb:62:6c:ea:c5:c8:88:
e2:d5:04:c3:f9:77:f0:a9:61:cc:fd:a3:64:13:c7:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E3:48:27:BF:B4:15:5B:A3:1F:D9:D2:3F:14:1C:EA:53:9C:08:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61BB51683B0011F1A9D2D0D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:ff:ce:f4:98:cf:a1:94:ee:0b:b8:a7:e3:8c:26:79:32:a9:
06:e3:3f:b3:82:09:12:08:e4:8b:fa:e1:9b:17:85:e2:3a:2f:
e6:ff:68:7f:40:44:56:6a:54:6b:79:c4:35:24:69:7d:da:36:
c5:1a:b9:80:53:aa:69:27:b3:9a:9e:e6:66:8b:9a:b2:49:26:
61:57:df:fc:c0:ba:62:70:c9:11:9a:5e:62:2e:98:47:1c:76:
06:59:17:95:de:a4:ff:78:4b:0e:c8:61:b7:bb:a1:d5:07:57:
3e:f2:07:fa:ca:e1:4d:12:a8:54:e1:31:93:94:3f:9e:9c:5e:
db:66:87:d6:2f:76:9f:88:46:98:ff:43:cd:55:90:8e:0b:cc:
7b:6c:82:03:70:f9:24:f1:61:60:fc:11:2f:aa:3f:68:0b:bb:
a7:0b:e3:0d:3b:64:41:b5:64:c5:8c:84:53:37:2d:ea:bc:c5:
62:fe:18:c1:67:f0:a2:ed:7c:52:26:21:04:41:9c:d8:f1:81:
27:ea:9f:26:a5:b4:63:55:cf:77:7f:e3:cf:48:6a:20:c1:2a:
77:09:f5:c2:ed:a8:40:ef:7f:4c:cc:02:06:00:77:85:35:04:
4e:27:0d:f4:16:32:0c:e9:87:06:82:2a:d1:13:62:89:6d:c8:
85:88:96:ea
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAa2MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNDE4MDgyNzAwWhcNMjYwNTIzMDgyNzAwWjAYMRYw
FAYDVQQDEw02OWUzNDA1OS03YmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtVf3Nuc5sSBVITg9tcfDfbdCUUocr3bbqfvARcSr8mQkxtPlz2ix5OQQ
bIqbryCQYdZNZsHw9coxWxXaAyrTrKlzsluwFr0bjRtmhrdwX/A/LppGrxr6Q5eC
+/mneG+Sl7vKa+cSjOxumjSBS6OBYN3LRzF1A9KE3x+/iQubu1mQGncfM/rAgTKH
SfkaFeR4N1v1tDk2Mn/DsoItMoe5z+MCAyCAuZiGL0dHku0Ud+f8P1yEbD+92HeT
NAGl9SouG6gaRMtdXxsvQ5dHt210KLwJIuhCB1SiQX2OxWkXjamNC80iTdahd/ti
bOrFyIji1QTD+XfwqWHM/aNkE8eZpwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCjj
SCe/tBVbox/Z0j8UHOpTnAjmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MUJCNTE2ODNCMDAxMUYxQTlEMkQwRDFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnPcgMA0GCSqGSIb3DQEBCwUA
A4IBAQBc/870mM+hlO4LuKfjjCZ5MqkG4z+zggkSCOSL+uGbF4XiOi/m/2h/QERW
alRrecQ1JGl92jbFGrmAU6ppJ7OanuZmi5qySSZhV9/8wLpicMkRml5iLphHHHYG
WReV3qT/eEsOyGG3u6HVB1c+8gf6yuFNEqhU4TGTlD+enF7bZofWL3afiEaY/0PN
VZCOC8x7bIIDcPkk8WFg/BEvqj9oC7unC+MNO2RBtWTFjIRTNy3qvMVi/hjBZ/Ci
7XxSJiEEQZzY8YEn6p8mpbRjVc93f+PPSGogwSp3CfXC7ahA739MzAIGAHeFNQRO
Jw30FjIM6YcGgirRE2KJbciFiJbq
-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:31 2026 by rpki-client