Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D7E59C49F411F1A0A45515CF1D38B0.roa
File: 60D7E59C49F411F1A0A45515CF1D38B0.roa (raw, json)
Hash identifier: LqllrRDP9Aq+M7MnkSG4QDwJUXg8hf7o+EOWSFRCHAA=
Subject key identifier: 66:4D:92:6A:59:DE:DE:27:7C:30:FB:4F:A6:39:30:81:D3:01:D2:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B21C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D7E59C49F411F1A0A45515CF1D38B0.roa
Signing time: Thu 07 May 2026 09:08:57 +0000
ROA not before: Thu 07 May 2026 09:08:53 +0000
ROA not after: Mon 07 May 2029 09:08:53 +0000
asID: 17561
IP address blocks: 156.232.159.0/24 maxlen: 24
156.232.160.0/24 maxlen: 24
156.232.161.0/24 maxlen: 24
156.232.162.0/24 maxlen: 24
156.232.163.0/24 maxlen: 24
156.232.164.0/24 maxlen: 24
156.232.165.0/24 maxlen: 24
156.232.166.0/24 maxlen: 24
156.232.167.0/24 maxlen: 24
156.232.168.0/24 maxlen: 24
156.232.169.0/24 maxlen: 24
156.232.170.0/24 maxlen: 24
156.232.171.0/24 maxlen: 24
156.232.172.0/24 maxlen: 24
156.232.173.0/24 maxlen: 24
156.232.174.0/24 maxlen: 24
156.232.175.0/24 maxlen: 24
156.232.176.0/24 maxlen: 24
156.232.177.0/24 maxlen: 24
156.232.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111132 (0x1b21c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:08:53 2026 GMT
Not After : May 7 09:08:53 2029 GMT
Subject: CN=69fc56a9-4dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:af:c5:48:ab:15:40:b5:d3:c0:ab:62:60:
15:e4:b9:0f:97:18:b4:25:6e:5f:12:5b:5d:36:6e:
3d:60:41:ba:89:57:0c:1b:9e:bf:65:1c:8a:72:17:
11:29:6e:b1:8e:9a:92:18:ed:ee:ee:58:e4:af:fa:
eb:35:ae:8d:ee:5c:f9:ad:77:a0:e6:86:a5:0a:50:
ab:0e:6e:f0:35:18:55:6e:25:d6:6c:5f:90:ba:67:
61:48:82:d3:6a:bb:3d:0e:48:0a:c5:4f:00:7d:da:
c9:b5:06:c9:3a:27:31:1e:9d:5e:28:54:aa:8f:26:
0f:2b:75:8a:f2:66:f9:d9:39:03:8e:cb:1b:92:18:
1e:e0:e8:0e:91:94:34:42:4d:3c:56:53:ee:e0:9b:
29:33:38:53:44:02:49:5d:42:b9:63:2b:5d:ad:77:
af:ca:5c:21:42:60:d5:49:32:d8:54:73:b1:67:3b:
8a:ce:f0:65:8e:6f:c6:80:b8:31:66:fd:ce:6f:5f:
ce:16:10:70:a9:85:7f:2d:15:84:67:58:8c:58:59:
c4:c2:27:53:a6:dc:d8:4e:89:8b:45:c3:93:52:34:
b4:1c:6f:e0:66:45:77:1c:47:29:d5:f9:d8:d1:a3:
9e:67:49:52:7b:73:21:ff:bb:b2:ef:11:c7:c4:55:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4D:92:6A:59:DE:DE:27:7C:30:FB:4F:A6:39:30:81:D3:01:D2:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60D7E59C49F411F1A0A45515CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.159.0-156.232.178.255
Signature Algorithm: sha256WithRSAEncryption
73:74:bc:af:aa:8b:89:ad:60:65:74:61:69:4e:af:1b:e4:f8:
7a:3d:6a:f8:9f:31:54:ce:26:a4:6a:de:01:37:e5:be:5b:77:
85:75:62:91:23:62:6d:ef:1b:1c:a9:60:1a:73:00:19:63:fa:
01:b7:40:4b:91:bd:8d:b9:f7:31:de:6d:4b:4b:9c:f6:a7:54:
fd:63:07:90:87:bf:14:9a:7b:c8:2f:7f:c9:f2:ac:2c:d8:be:
31:62:7e:0b:63:8e:98:1b:db:9f:f5:5f:91:4a:9a:11:f3:bb:
e0:a2:df:1e:1a:51:46:04:ac:8a:39:37:31:87:a8:24:ed:8b:
f4:ce:dd:c6:1a:c8:4e:00:df:0e:ae:35:a4:70:c7:76:8a:80:
44:1b:f5:42:aa:62:c7:7e:d1:02:78:7b:ca:3d:b7:76:9e:11:
3d:70:e7:36:04:ba:a9:0d:3d:f2:d9:16:ff:ff:a9:e1:77:86:
42:e0:d2:05:b8:2a:08:e0:46:4e:d1:66:c7:fe:f5:12:5b:6a:
52:a3:b3:12:2d:85:de:69:45:b6:60:e9:19:b1:28:0d:d9:4b:
1a:1a:69:8d:9a:b2:b1:c7:ac:b0:25:7f:b5:47:27:91:5e:35:
62:07:86:de:6e:f3:93:4b:40:d2:a8:f9:00:6a:03:c6:4f:23:
90:08:30:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:08:48 2026 by rpki-client