Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E777E245A611F185068CD8CE1D38B0.roa
File: 61E777E245A611F185068CD8CE1D38B0.roa (raw, json)
Hash identifier: DTJWrY2RXNvR3DbFwbeOWKdP0VyOPhz4JnD4gibKu2s=
Subject key identifier: 69:9C:52:70:12:72:AA:EB:50:69:71:D3:F8:9F:FA:5B:42:CB:68:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B104
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E777E245A611F185068CD8CE1D38B0.roa
Signing time: Fri 01 May 2026 21:40:34 +0000
ROA not before: Fri 01 May 2026 21:40:29 +0000
ROA not after: Mon 15 Jun 2026 21:40:29 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110852 (0x1b104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:40:29 2026 GMT
Not After : Jun 15 21:40:29 2026 GMT
Subject: CN=69f51dd2-0202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:4a:64:20:c4:bf:9b:7e:23:ba:a1:4d:ed:
fc:00:d1:7b:aa:22:4a:cc:21:7c:07:0a:6d:6b:7d:
70:95:d5:57:ca:bb:be:4f:a7:09:37:ec:1f:1d:9c:
b7:d0:e5:73:b2:88:a2:ff:26:3d:1e:cc:30:bc:31:
7c:87:28:2c:23:57:a1:ab:0f:95:ee:12:f4:d2:d4:
43:a6:69:78:01:e2:2b:55:58:2e:f0:88:7a:e3:83:
1d:82:94:33:4a:52:ea:cb:49:a4:74:a2:45:47:26:
43:31:fb:ca:26:ad:c4:33:ca:cd:a3:a9:d5:5d:fc:
bf:85:a7:e3:25:c5:2c:b3:39:45:2e:6e:31:6a:e0:
e5:f9:a6:bb:34:8c:f0:5b:52:ae:ae:b7:79:d3:5d:
99:16:88:c0:8e:de:91:74:fd:6d:6a:99:b5:d8:d9:
47:47:b7:02:db:a3:21:a5:c8:cc:dd:26:1b:b8:c4:
0c:4f:4b:84:de:27:f8:55:a5:0b:56:25:df:a9:ba:
57:a0:63:a9:dc:e2:d1:d7:ed:9b:fa:09:e0:86:1d:
52:8f:63:3c:97:ae:1c:ab:b2:c9:ee:74:a4:ae:04:
70:5a:36:e9:c8:de:ec:40:54:a7:5d:e5:6f:18:31:
0d:ff:39:ac:57:ad:7b:6d:a5:d3:14:83:a5:31:47:
66:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9C:52:70:12:72:AA:EB:50:69:71:D3:F8:9F:FA:5B:42:CB:68:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61E777E245A611F185068CD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
77:02:68:58:70:f1:47:96:91:10:ca:48:24:d5:95:c4:d5:54:
99:be:18:27:2c:b4:dd:ca:7a:fe:cd:d4:59:da:78:83:a0:21:
48:15:be:39:ec:d7:55:2a:59:2d:da:f5:17:72:c7:ce:73:38:
68:e1:ef:dd:95:d1:91:f0:c3:fe:bd:62:65:32:c5:e2:62:af:
76:98:55:1c:fb:93:9f:96:74:34:5f:03:15:19:8e:8c:94:0f:
7d:1a:8c:86:21:a2:d6:65:4b:25:17:ad:d5:85:3c:98:e3:d4:
3a:30:22:0d:29:91:13:1e:10:c3:2b:f4:e8:18:f4:fb:e3:2c:
29:67:12:e7:7a:f2:bc:8c:d5:32:62:64:ca:4b:5c:99:e6:c7:
3f:7e:ca:97:4d:de:9b:e8:a0:37:84:f7:d1:c2:7c:b4:1d:39:
2e:cb:46:9d:35:bb:3d:66:5b:bb:f9:07:19:28:1b:28:2e:f7:
4a:2c:01:65:9e:de:37:d1:9d:9e:69:b5:31:94:5e:84:3f:30:
b3:52:cf:b4:68:fa:c4:e0:26:84:b0:12:ef:68:2d:ce:9f:66:
d7:5f:a7:c1:38:f4:79:f3:12:f4:a6:2e:fa:91:31:fa:b9:39:
c6:34:89:56:6b:5a:42:3a:29:f4:e9:1e:07:d3:3a:dc:9a:91:
fb:89:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:42:34 2026 by rpki-client