Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EE05F88A5C11F19C7A7CACCE1D38B0.roa
File: 61EE05F88A5C11F19C7A7CACCE1D38B0.roa (raw, json)
Hash identifier: 195qdMyDSq06QIOp6L/O/KcnSxW/tXDkpPLM7EeoUfI=
Subject key identifier: 13:28:66:9E:E3:9B:A7:C4:3F:3D:F3:DC:28:8F:FE:71:FC:32:10:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C856
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EE05F88A5C11F19C7A7CACCE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:14:41 +0000
ROA not before: Tue 28 Jul 2026 08:14:37 +0000
ROA not after: Tue 15 Sep 2026 08:14:37 +0000
asID: 214413
IP address blocks: 156.225.52.0/22 maxlen: 24
156.226.200.0/22 maxlen: 24
156.227.52.0/22 maxlen: 24
156.230.152.0/22 maxlen: 24
156.236.120.0/22 maxlen: 24
156.238.56.0/22 maxlen: 24
156.245.220.0/22 maxlen: 24
156.249.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116822 (0x1c856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 08:14:37 2026 GMT
Not After : Sep 15 08:14:37 2026 GMT
Subject: CN=6a6864f1-bf42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f2:0a:fa:00:66:a8:0c:3f:11:b4:c2:41:20:
3e:2a:b9:0c:d3:b3:d9:7b:eb:6e:43:ee:90:83:6f:
67:a8:3c:d4:5f:83:7c:53:43:ea:41:12:db:e6:8d:
5a:b3:dc:42:a5:a7:a5:cf:83:d0:4e:00:df:cc:c8:
72:02:fb:81:69:43:31:7d:95:51:1d:b0:30:7d:b1:
ac:9c:6f:f2:04:d1:d9:82:a9:07:39:32:a1:b6:a1:
44:04:0a:19:4a:ce:45:cf:25:d1:b1:f9:8a:66:3e:
2e:87:7c:88:d0:d9:d5:cf:63:82:dd:2c:79:d7:71:
21:9a:d3:78:92:8a:2b:d8:4c:25:f2:08:c7:fd:d2:
67:32:28:23:70:ca:ce:24:43:61:d5:24:3c:56:92:
3d:fd:95:4a:8e:81:26:d0:ac:eb:fd:7d:cc:86:cb:
2e:05:42:92:c1:1a:c2:8b:ac:93:af:2e:9f:8b:ca:
23:ea:da:78:aa:4c:17:f4:83:0d:43:e3:7b:64:54:
86:4f:e3:7e:65:58:fe:ba:89:09:fa:00:09:79:8d:
50:63:01:e8:53:13:8e:4c:30:8a:5e:10:9f:78:1c:
b4:86:36:95:68:16:11:0b:f5:a8:e9:59:52:8d:f3:
08:98:a3:00:8c:ec:95:f5:cf:ac:23:4c:8b:84:3d:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:66:9E:E3:9B:A7:C4:3F:3D:F3:DC:28:8F:FE:71:FC:32:10:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/61EE05F88A5C11F19C7A7CACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.52.0/22
156.226.200.0/22
156.227.52.0/22
156.230.152.0/22
156.236.120.0/22
156.238.56.0/22
156.245.220.0/22
156.249.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:39:42:50:ac:09:e1:8a:b1:d5:cd:59:04:d9:8f:ac:fc:0c:
20:5b:71:b7:de:36:14:fc:81:96:71:a4:e7:21:26:14:71:8f:
9b:8c:bd:2c:7e:96:24:5a:07:6e:e0:79:8d:49:2e:8f:0e:25:
c4:27:34:20:35:31:cb:6e:94:4f:9e:ff:bd:c0:92:22:79:1d:
92:ba:3e:45:3b:9a:a4:9b:ca:dd:51:eb:22:0d:2c:e4:e2:fd:
6c:60:92:83:4c:86:50:b5:32:28:db:cb:1f:c7:5d:e2:61:ef:
42:98:14:11:25:1f:a8:2e:45:96:cc:ee:9b:98:07:ef:82:e5:
a6:62:b4:0e:4e:29:a0:71:80:fb:94:15:67:e4:17:c3:26:6a:
1a:ee:12:3a:80:5d:11:9a:9d:5e:e7:75:93:fd:73:e6:00:44:
90:a2:4a:a5:b9:01:b3:93:b4:06:f4:4d:92:2c:db:80:79:21:
5d:f1:1e:d7:6d:3c:7e:fa:01:9b:16:f0:4f:23:25:cc:a9:cd:
f1:50:eb:e9:52:52:42:1d:42:8a:4c:1f:16:8b:1a:81:c4:fb:
27:06:d0:6d:6c:81:df:08:52:b0:a9:ba:55:2f:b0:10:f8:8f:
33:9f:09:af:66:7d:4d:c7:00:3f:6d:5a:aa:fe:a0:bb:2d:55:
c1:0f:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:06:38 2026 by rpki-client