Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF61B2AA123711F1A9F0E18CDAE4EC9C.roa
File: FF61B2AA123711F1A9F0E18CDAE4EC9C.roa (raw, json)
Hash identifier: 16/wyHet0GH+f3yhX6aD+36Jz0X9OeV+OG1IJNmISIo=
Subject key identifier: B3:32:F4:FE:44:74:7B:54:EC:A8:23:D7:27:9C:18:E6:1A:14:4A:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A078
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF61B2AA123711F1A9F0E18CDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 10:51:54 +0000
ROA not before: Wed 25 Feb 2026 10:51:50 +0000
ROA not after: Fri 06 Mar 2026 10:51:50 +0000
asID: 136907
IP address blocks: 156.230.32.0/21 maxlen: 24
156.230.40.0/21 maxlen: 24
156.230.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106616 (0x1a078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 10:51:50 2026 GMT
Not After : Mar 6 10:51:50 2026 GMT
Subject: CN=699ed44a-89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:d0:58:73:b0:2e:91:33:79:6b:d0:6f:a7:
56:b0:0a:32:8d:9c:57:9e:82:d5:27:f7:3e:f5:d1:
40:cd:a8:87:ab:62:c9:0e:87:b4:b9:0c:e0:10:d3:
d9:ce:d3:cb:54:8b:9c:fc:a3:85:8d:c3:b1:ad:fd:
4c:e4:46:ce:25:f7:a3:54:5c:cf:4f:8c:71:2b:25:
d6:30:9d:c9:8d:06:08:09:1b:05:7b:18:f7:d8:b3:
81:f4:62:d3:ab:36:10:2c:6c:ee:2c:e3:8d:b1:9d:
dc:2a:09:d3:94:9b:ad:7a:50:db:69:33:db:fb:29:
de:64:6d:f7:56:36:84:dc:5a:eb:a8:ec:c3:f2:c9:
70:0d:16:e4:85:bd:7e:b4:91:56:3d:0e:91:36:52:
ee:0c:a9:84:c6:3b:6e:1b:0f:96:ac:61:61:36:59:
60:62:18:73:d2:3c:b4:b7:ec:c1:a3:c7:15:ee:2e:
87:9e:f6:b0:e0:a6:5b:b1:ce:d1:27:1e:1f:43:3f:
90:5a:2d:67:b3:54:9e:c5:a6:c7:29:46:b3:e0:33:
84:30:25:c5:cd:c5:f8:b9:09:e8:61:2b:06:3a:c6:
5d:0d:66:a8:f2:9f:4a:7c:70:73:64:7b:d5:8c:63:
59:88:a1:4c:37:35:0f:00:80:68:55:ad:e8:e0:6f:
72:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:32:F4:FE:44:74:7B:54:EC:A8:23:D7:27:9C:18:E6:1A:14:4A:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF61B2AA123711F1A9F0E18CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.32.0/20
156.230.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:46:ac:6f:61:20:27:b0:98:19:fb:43:d0:80:2f:2f:0a:69:
9c:bd:7c:30:82:bd:ca:07:f0:9c:9c:da:63:f2:ae:66:a6:91:
a6:8f:f0:28:d1:0e:e2:b2:74:15:a9:3b:b9:24:44:33:81:b1:
36:c5:7a:0d:28:7a:e2:01:95:9b:3b:3f:d4:e4:20:c9:a6:19:
ad:d3:e4:5e:42:aa:dc:4b:f5:b4:2a:3d:7c:18:dd:71:30:5d:
6c:37:67:a0:0a:f5:e6:f9:e0:72:d7:d7:0b:f1:33:b7:90:4c:
d9:89:e4:a0:60:b7:2c:cd:73:18:aa:2b:42:cd:cc:77:1d:da:
d6:d6:db:cc:16:74:7f:65:c9:28:5f:93:9d:23:94:da:71:6c:
38:28:9b:c1:bf:6c:15:eb:ae:22:e0:4a:76:2b:dd:10:b4:0f:
f1:20:fd:98:1c:97:7f:13:c3:2a:06:8c:20:27:a5:14:b5:8e:
6c:7e:5f:6c:16:f8:eb:cb:e5:8b:7c:fe:eb:d3:cc:9e:0e:bd:
29:51:2a:2e:3f:86:a9:09:a9:25:a7:92:2c:90:ad:2c:e0:20:
16:6f:e3:3a:ec:36:b4:98:25:04:41:14:92:64:08:6f:19:9c:
c5:4b:26:7f:53:82:44:8d:3b:b8:76:f4:76:00:38:ea:5b:8f:
1f:d1:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:54 2026 by rpki-client