Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DB15887F5811F1BAD57BBCCE1D38B0.roa
File: 61DB15887F5811F1BAD57BBCCE1D38B0.roa (raw, json)
Hash identifier: SRAgMSzLzuPWlsJ4TMgcHquLTup9eevL76Pxl17nPls=
Subject key identifier: 6A:D6:F0:3D:B5:3D:F7:F2:56:2E:1F:A9:0A:06:C9:6A:24:D9:FB:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4E5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DB15887F5811F1BAD57BBCCE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:48:20 +0000
ROA not before: Tue 14 Jul 2026 07:48:15 +0000
ROA not after: Mon 17 Aug 2026 07:48:15 +0000
asID: 22773
IP address blocks: 156.241.41.0/24 maxlen: 24
156.242.2.0/23 maxlen: 24
156.248.104.0/21 maxlen: 24
156.249.0.0/24 maxlen: 24
156.249.4.0/22 maxlen: 24
156.249.16.0/24 maxlen: 24
156.249.20.0/22 maxlen: 24
156.249.48.0/21 maxlen: 24
156.249.121.0/24 maxlen: 24
156.249.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115941 (0x1c4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 07:48:15 2026 GMT
Not After : Aug 17 07:48:15 2026 GMT
Subject: CN=6a55e9c4-dd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:62:57:fe:f7:3d:40:79:83:19:63:77:c3:
3d:19:26:23:0c:af:bb:99:48:51:51:58:1c:64:10:
2d:e7:1a:f5:14:7d:64:b2:eb:06:5c:7b:4e:21:d1:
60:9e:0c:46:06:e3:06:f5:48:9e:20:f6:bd:00:18:
83:4d:b2:e6:69:0f:7e:45:3e:74:3a:67:02:32:6c:
b6:e7:42:63:dc:d1:84:d5:cf:cf:ad:d5:8c:35:14:
76:14:9c:89:1d:bb:a9:1d:ea:1f:33:fb:da:34:a0:
d9:4d:13:2e:22:17:79:d1:0c:f6:c7:81:83:97:e3:
b8:92:7e:6b:d7:c4:d2:14:ff:44:d8:a1:6f:00:62:
59:df:bd:3e:eb:68:88:e7:6e:74:37:3f:f7:ed:ef:
2b:9a:ef:89:b2:3b:dc:36:eb:c8:81:e8:a7:83:1a:
00:8c:d4:b3:58:47:87:49:d4:ac:3d:6a:6c:04:60:
35:12:4d:6d:96:c6:60:0d:9f:5a:a1:13:81:db:f8:
36:f1:4b:32:55:eb:25:6f:85:98:49:86:cf:20:e4:
a9:2f:bc:5f:7f:4f:66:d4:be:e3:66:e7:fa:bd:4e:
96:ee:27:d5:b4:b5:23:a4:2d:e2:43:73:91:4c:9b:
c8:0e:1b:ca:2d:22:bd:fd:20:4d:73:85:ff:c6:0e:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D6:F0:3D:B5:3D:F7:F2:56:2E:1F:A9:0A:06:C9:6A:24:D9:FB:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61DB15887F5811F1BAD57BBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.41.0/24
156.242.2.0/23
156.248.104.0/21
156.249.0.0/24
156.249.4.0/22
156.249.16.0/24
156.249.20.0/22
156.249.48.0/21
156.249.121.0-156.249.123.255
Signature Algorithm: sha256WithRSAEncryption
49:0d:46:1c:15:b1:fb:02:a5:a0:c3:f3:00:ea:e1:a7:75:99:
1c:13:53:bd:65:03:b1:8d:55:7d:a6:6d:31:2f:37:62:47:df:
17:fc:d9:5a:62:4e:22:29:a3:b2:c4:ab:bb:3c:a8:48:13:ea:
6f:c9:ca:78:88:c4:21:2e:87:3e:b4:9a:56:26:69:af:6e:dd:
1d:2a:1c:ac:59:c7:a5:1a:29:11:b2:57:38:d1:1e:98:87:24:
88:14:72:06:20:66:47:00:ec:2a:b4:69:b0:e5:7b:c5:28:d9:
6a:bd:45:0f:2e:b6:2f:4f:f1:08:73:9d:90:ab:d3:9c:5c:6a:
43:f6:a3:cc:c9:4a:d2:a7:5f:36:5c:9c:79:51:aa:af:6d:07:
0b:37:01:44:8b:b3:68:8c:c5:c8:0c:c7:79:d8:20:5d:42:b2:
de:2d:83:10:76:65:a6:89:da:f6:35:cd:ff:27:2e:f4:52:97:
8a:54:a3:97:2e:27:c6:c9:48:51:83:77:5b:03:3f:e9:bb:48:
ea:31:33:8a:3c:41:55:01:8d:e1:fd:0b:81:40:7c:f3:d7:c2:
31:a3:51:21:52:39:37:38:e8:fa:ef:36:46:3a:82:cd:23:6a:
a1:80:a1:d8:f6:95:b2:7b:b2:f7:a2:fc:7d:8b:24:2c:e8:8d:
ee:f0:ce:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:42 2026 by rpki-client