Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B2F1B524AB011F1811BB50FCF1D38B0.roa
File: 6B2F1B524AB011F1811BB50FCF1D38B0.roa (raw, json)
Hash identifier: RtdP4OsOCC8X6v810aKzOgnbcQi39GCyNLHDV0J2Or8=
Subject key identifier: 85:B5:5E:69:62:CD:4D:24:B0:A3:B4:77:9A:84:BA:58:40:E4:94:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B2F1B524AB011F1811BB50FCF1D38B0.roa
Signing time: Fri 08 May 2026 07:35:00 +0000
ROA not before: Fri 08 May 2026 07:34:55 +0000
ROA not after: Mon 07 May 2029 07:34:55 +0000
asID: 17561
IP address blocks: 156.232.66.0/24 maxlen: 24
156.232.67.0/24 maxlen: 24
156.232.68.0/24 maxlen: 24
156.232.69.0/24 maxlen: 24
156.232.70.0/24 maxlen: 24
156.232.71.0/24 maxlen: 24
156.232.72.0/24 maxlen: 24
156.232.73.0/24 maxlen: 24
156.232.74.0/24 maxlen: 24
156.232.75.0/24 maxlen: 24
156.232.76.0/24 maxlen: 24
156.232.77.0/24 maxlen: 24
156.232.78.0/24 maxlen: 24
156.232.79.0/24 maxlen: 24
156.232.80.0/24 maxlen: 24
156.232.81.0/24 maxlen: 24
156.232.82.0/24 maxlen: 24
156.232.83.0/24 maxlen: 24
156.232.84.0/24 maxlen: 24
156.232.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111276 (0x1b2ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 07:34:55 2026 GMT
Not After : May 7 07:34:55 2029 GMT
Subject: CN=69fd9224-e1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:40:66:a6:1d:d9:ce:9e:3e:36:0d:3d:00:14:
01:06:05:a1:34:31:6b:2e:52:91:75:bc:cd:06:dd:
ea:79:71:85:b5:7f:0d:a3:11:76:d6:da:76:87:ed:
60:0d:72:2f:f8:ee:64:25:02:ed:14:24:3b:10:e2:
52:35:f4:ee:98:18:21:5e:c0:e7:49:34:d3:e0:cb:
6a:bd:4d:8a:81:40:e5:58:69:5b:6b:ac:fe:f1:cf:
16:95:be:b5:df:8e:8d:07:f6:33:5d:0a:91:03:83:
27:40:1a:40:83:7b:7d:7b:b3:73:15:c4:65:4a:cb:
9a:3e:cb:4b:97:4a:9b:e3:50:73:14:95:47:bd:f8:
47:0a:5b:4d:21:4e:4a:8e:f8:f7:71:15:14:34:bf:
f9:aa:b3:bd:d6:9c:70:52:61:fb:8e:15:ea:0c:89:
ef:fa:5d:eb:45:18:8c:ee:c4:19:9e:2a:f3:ce:0c:
24:d4:1f:e4:fe:c1:81:35:8a:00:2f:36:ae:f5:ba:
e5:ea:55:03:7f:04:f1:36:5d:f8:6a:d9:42:18:23:
8a:b6:c2:e6:af:8b:38:4c:46:06:b1:dd:8c:ae:08:
62:79:05:fd:ff:69:6b:99:10:ac:f3:e0:72:59:2d:
94:72:72:59:e9:a1:cb:69:cc:eb:d6:19:9f:d6:c1:
56:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:5E:69:62:CD:4D:24:B0:A3:B4:77:9A:84:BA:58:40:E4:94:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B2F1B524AB011F1811BB50FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.232.66.0-156.232.85.255
Signature Algorithm: sha256WithRSAEncryption
72:1d:c5:2e:4d:c0:3c:1e:52:dd:79:1c:09:13:5a:84:f6:2e:
ba:07:ef:69:0b:87:7a:e9:71:fc:13:9f:bc:52:fe:88:90:c4:
01:07:a7:f8:0a:54:d0:51:9e:32:48:73:8d:90:fd:82:01:ad:
06:86:d1:75:dc:48:89:84:0d:54:7b:69:1a:ca:7e:8a:ad:65:
23:1f:9d:c3:95:06:4c:47:a1:c4:e2:80:73:c7:02:e0:1c:01:
e1:e1:a0:ef:e7:5f:45:dd:2f:b3:70:c9:d5:50:20:16:ae:fd:
97:52:76:d3:83:62:af:d5:12:73:52:f6:cd:60:d4:2a:21:0f:
8a:bb:1c:ad:50:4a:c8:c3:4a:da:01:d3:1f:d2:2c:99:96:00:
c2:b9:1b:30:69:86:49:bf:9b:93:ff:be:be:d3:6f:23:d6:02:
d8:82:a2:ad:0a:62:11:29:2e:06:b0:d1:56:b3:3e:d7:a8:26:
3a:0f:82:06:59:45:32:40:f8:6c:3b:fc:ca:da:18:f1:15:ed:
89:45:dc:3a:fb:73:e8:5d:d4:73:c7:be:cf:7a:07:2d:e8:74:
2e:74:cf:a1:08:7d:77:04:67:ca:a6:56:75:b8:24:b4:0e:38:
2a:3e:0d:05:b5:a9:60:96:14:d8:a7:26:60:80:a7:a2:d7:7c:
49:51:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:13:32 2026 by rpki-client