Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F344287B8911F181F5BD0BCF1D38B0.roa
File: 61F344287B8911F181F5BD0BCF1D38B0.roa (raw, json)
Hash identifier: 12jOFQZGUDkK5KnhvdOyfkKF9+cSFuHvt43cIGwWrcI=
Subject key identifier: EF:36:DA:9E:72:0D:03:2A:BA:D8:72:9A:D4:CA:A6:0D:7B:F0:99:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C40B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F344287B8911F181F5BD0BCF1D38B0.roa
Signing time: Thu 09 Jul 2026 11:29:01 +0000
ROA not before: Thu 09 Jul 2026 11:28:56 +0000
ROA not after: Sun 19 Jul 2026 11:28:56 +0000
asID: 984
IP address blocks: 156.242.68.0/24 maxlen: 24
156.242.80.0/24 maxlen: 24
156.242.89.0/24 maxlen: 24
156.242.90.0/24 maxlen: 24
156.242.92.0/24 maxlen: 24
156.242.93.0/24 maxlen: 24
156.243.229.0/24 maxlen: 24
156.249.172.0/24 maxlen: 24
156.249.173.0/24 maxlen: 24
156.249.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115723 (0x1c40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 9 11:28:56 2026 GMT
Not After : Jul 19 11:28:56 2026 GMT
Subject: CN=6a4f85fd-6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f6:02:cb:49:44:3a:f9:50:90:42:f6:65:9f:
83:b3:c2:ad:d0:ad:54:38:f6:2e:be:8c:10:44:46:
04:0a:e4:82:cc:c4:84:01:7b:22:79:f9:09:0a:5d:
91:30:62:e7:39:3b:af:0e:64:f7:82:b7:da:a6:d1:
e2:8f:39:ab:a3:ca:38:17:15:ed:7f:80:3e:30:fb:
74:9f:e7:46:ad:04:01:cd:3b:0b:92:c0:9f:49:af:
95:11:89:eb:55:46:c2:d9:7c:e9:b7:c1:04:ea:07:
30:0b:dc:86:00:4d:05:89:8e:ab:48:a1:10:a5:3e:
37:83:7d:be:2e:74:39:f0:19:a5:a7:c2:b2:23:55:
04:87:34:e2:de:b2:73:ce:d6:a0:2b:45:97:ec:2b:
2d:b8:1f:6b:53:76:38:dd:af:87:15:eb:3e:4c:1c:
0b:1a:b9:df:c7:af:41:2b:2d:f6:42:44:3d:35:96:
09:87:2c:49:f0:c9:13:f9:74:15:8f:ab:dc:8d:b7:
bb:a1:c3:3a:4b:59:e5:81:08:13:45:ee:a3:4d:2b:
be:04:85:5a:de:5f:55:6a:a7:a2:6d:18:3e:36:a5:
3a:64:b2:a0:e0:b2:65:79:46:9d:3b:bb:37:83:70:
a7:08:89:d2:26:3a:dc:ab:64:b2:2a:38:f7:d3:df:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:DA:9E:72:0D:03:2A:BA:D8:72:9A:D4:CA:A6:0D:7B:F0:99:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61F344287B8911F181F5BD0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.68.0/24
156.242.80.0/24
156.242.89.0-156.242.90.255
156.242.92.0/23
156.243.229.0/24
156.249.172.0/23
156.249.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ac:cb:e5:b0:d9:0e:a0:15:e4:da:20:ca:06:f8:f0:47:be:
f3:ba:6c:c4:50:5c:71:85:02:32:46:1b:57:53:e7:a7:1a:e6:
d0:de:bd:bb:7a:74:65:11:48:fe:da:b3:85:2a:f2:0e:10:bb:
3e:a2:fd:b2:66:3a:5f:15:60:f1:ef:77:3d:a7:aa:98:ee:c7:
61:bf:67:49:22:4b:61:bf:38:da:32:15:53:78:8d:b9:ab:17:
c6:d4:1e:d7:47:39:04:b0:84:d8:f2:f6:35:6b:ed:46:52:92:
c1:d1:f6:8b:9c:46:41:b6:a2:f7:d5:fc:09:89:fc:bd:3f:80:
8c:1f:cd:f9:eb:2c:11:a9:76:fe:c9:d5:a9:14:0e:2a:b9:23:
0b:b7:f8:dd:52:bb:54:7c:6d:0e:94:65:29:c0:86:0e:eb:2f:
1a:59:02:ba:bd:e7:02:2e:0b:fa:54:1b:fc:fb:84:ed:9c:d7:
1c:c6:08:0c:47:85:e1:ab:c6:97:65:47:f3:a1:7b:0a:7e:e3:
c7:1b:30:fe:41:6b:37:0d:29:4f:79:f1:11:28:24:ba:86:fb:
ce:0a:8e:fa:ea:a7:b3:d8:d5:52:2d:52:5b:95:0e:65:56:36:
d1:17:e1:eb:db:bf:79:04:20:d7:93:03:7d:4c:c1:30:ae:b4:
67:ac:b6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:53 2026 by rpki-client