Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61939C4550911F1928C35FFCE1D38B0.roa
File: A61939C4550911F1928C35FFCE1D38B0.roa (raw, json)
Hash identifier: 1LnqUUVJbAtv7dRXMuioLcVdTxhYxR+Fe2Bss5JCZss=
Subject key identifier: 8B:43:E0:67:88:6A:18:BB:B1:56:6E:35:A7:1E:F5:3E:6A:75:7C:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61939C4550911F1928C35FFCE1D38B0.roa
Signing time: Thu 21 May 2026 11:38:56 +0000
ROA not before: Thu 21 May 2026 11:38:51 +0000
ROA not after: Sat 22 May 2027 11:38:51 +0000
asID: 63199
IP address blocks: 156.242.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112346 (0x1b6da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 11:38:51 2026 GMT
Not After : May 22 11:38:51 2027 GMT
Subject: CN=6a0eeed0-ef4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:e6:b0:34:1c:dc:26:cd:36:6d:10:4a:24:
44:ae:8d:ea:0b:2a:8d:5e:17:41:e1:e9:04:8c:76:
6f:d0:d4:be:6b:50:f6:52:79:29:b5:5a:1d:64:97:
3b:fb:8e:b8:01:a1:26:8c:93:ae:50:7a:c1:1b:cd:
1c:59:7f:77:7d:4d:c5:31:77:ec:8f:b0:9b:35:98:
ad:12:4c:29:af:fe:50:66:74:33:7a:03:1f:05:e0:
41:0d:b8:9c:1d:9b:f8:0c:a2:dc:c9:82:df:6b:15:
db:8b:25:26:4e:1d:73:4c:e8:dc:4d:05:cb:5e:e9:
eb:7c:35:5c:4f:82:78:f9:73:21:ea:a8:e5:62:b0:
54:7e:b2:05:fc:b0:b2:82:f1:c6:27:0d:44:c8:a9:
13:3a:3e:9e:8a:84:ad:95:61:04:10:c9:7d:17:58:
0f:15:3f:41:b1:36:3f:f5:dd:0f:dc:e2:58:ac:27:
71:1b:e5:74:3f:f2:2e:bc:1c:1a:86:e9:d5:96:ce:
09:a1:e1:86:19:c4:44:9e:a1:ad:48:f8:61:47:50:
64:58:45:d2:78:6d:d0:aa:4f:8b:64:59:28:47:31:
5e:7e:78:14:28:55:d2:18:09:23:78:12:31:ca:9b:
66:18:cd:59:a3:c1:2c:09:e9:e1:97:17:b8:0a:ac:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:43:E0:67:88:6A:18:BB:B1:56:6E:35:A7:1E:F5:3E:6A:75:7C:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A61939C4550911F1928C35FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.242.82.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c4:e1:59:38:c2:59:eb:e3:69:58:e1:f5:d2:fe:aa:b3:a4:
03:7a:d8:46:83:4f:b5:1a:ce:a9:e0:84:8a:e8:d6:06:b0:16:
e4:e2:98:66:82:4b:ef:b1:ed:e7:6f:d1:51:f7:19:54:17:e0:
0b:a6:3b:5c:ff:b5:c0:d4:90:2c:a8:08:f6:ac:d8:67:d6:b7:
d3:d0:9d:a8:7a:6b:d6:86:fa:d6:30:4c:31:ef:64:44:e1:84:
49:79:30:51:86:f9:5c:a9:50:de:3a:78:84:94:ae:9a:75:e8:
04:d3:f4:29:27:06:19:7e:7e:fd:87:a2:eb:8b:02:4b:ca:08:
4d:a8:f5:9a:21:98:9f:51:25:c6:75:bf:a9:ce:cf:52:a3:d0:
47:22:fb:1e:05:0b:07:d4:32:65:c0:4d:8f:60:58:af:05:cf:
6a:26:96:05:5e:99:a5:5b:56:ee:d3:ab:c4:b8:f3:c1:4a:7f:
ec:ec:93:02:19:af:df:35:f4:0b:63:55:9a:cf:4d:7e:fd:bd:
51:f8:62:29:8b:e0:54:f9:0f:da:35:04:17:6f:bf:5f:10:62:
fb:c7:50:2b:32:f0:59:37:ef:83:fa:27:71:aa:47:5a:a6:f7:
66:0a:75:4f:63:db:71:cb:ab:89:35:bd:33:12:63:c8:84:16:
2d:18:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:38 2026 by rpki-client