Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBA75E24253411F18E86C2B2DAE4EC9C.roa
File: BBA75E24253411F18E86C2B2DAE4EC9C.roa (raw, json)
Hash identifier: yxElgLK1iGKj/S3V0CtMfep2BLq/zrfSVKgIIYqgtAw=
Subject key identifier: FD:A7:B0:82:9B:AB:E1:EA:DD:C4:15:CE:6B:0D:83:C6:88:0A:BF:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A672
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBA75E24253411F18E86C2B2DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 14:46:25 +0000
ROA not before: Sat 21 Mar 2026 14:46:20 +0000
ROA not after: Mon 27 Apr 2026 14:46:20 +0000
asID: 213690
IP address blocks: 156.235.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108146 (0x1a672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 14:46:20 2026 GMT
Not After : Apr 27 14:46:20 2026 GMT
Subject: CN=69beaf41-19d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:93:7d:0b:91:21:65:08:24:28:73:63:1b:
44:1d:3c:bb:45:68:49:71:3b:0d:79:71:30:77:71:
1a:7d:f4:7c:f8:38:00:63:e3:f1:2a:f1:49:53:e0:
9d:b5:09:5f:4f:46:34:8d:34:99:5c:e7:24:f9:49:
7c:8e:dc:7b:65:d8:1d:c6:92:86:d9:2f:b0:9a:6c:
5d:e8:83:8a:cd:73:6d:e5:b3:81:2f:6a:f4:59:d0:
da:86:87:61:37:a8:e3:bf:58:7c:d9:04:9b:6e:55:
ff:37:fb:30:64:46:a7:8e:71:d4:97:21:31:86:9f:
23:98:a8:f9:f4:ec:b1:4c:96:2d:17:3a:9e:ae:a2:
f7:fc:52:01:b4:80:bc:85:bb:48:5d:da:02:90:13:
22:c3:04:6f:01:9f:54:e7:2c:99:70:c9:70:f2:dc:
c8:8f:c9:11:af:07:90:db:54:59:a1:3c:fe:84:ee:
e2:67:b8:16:1c:0e:78:af:40:1f:3e:3c:59:c6:3f:
be:b9:76:0b:88:48:b5:04:a8:8b:4d:59:ba:ab:06:
5f:49:4a:9d:64:44:f2:4d:a1:55:ba:40:cd:4a:58:
99:52:61:19:16:79:4c:92:8d:1b:04:42:05:0e:07:
81:21:78:d1:1d:62:e4:06:32:cc:2a:b6:16:2a:82:
fd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A7:B0:82:9B:AB:E1:EA:DD:C4:15:CE:6B:0D:83:C6:88:0A:BF:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBA75E24253411F18E86C2B2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:95:ef:b9:09:00:04:0f:0c:cd:d6:ed:31:cd:9f:1f:59:02:
c5:1d:94:fc:23:e4:a5:4b:c8:13:e2:29:5e:b3:b1:31:d6:df:
6c:85:d6:e9:e0:3c:44:fb:ed:45:a2:13:d1:6d:56:14:25:17:
3a:ff:a7:91:4c:53:c8:42:eb:7e:e7:8b:da:bf:d9:b2:cf:fa:
90:f3:cf:f9:eb:dc:53:2f:44:a3:b3:f1:03:a2:bd:e1:ba:d0:
d6:0a:f0:92:27:5d:48:fd:b5:48:e4:ed:40:85:39:e9:cd:5b:
3c:ec:8f:f9:7b:ff:5b:65:4d:24:69:2a:1d:1b:cb:d1:5d:0f:
e0:18:00:46:7a:5a:3d:32:11:ca:5d:14:6b:76:30:98:bd:45:
04:59:78:a0:ec:98:17:1c:cd:7b:c6:24:ef:4d:9a:42:79:ae:
f0:92:a2:22:0a:a5:8b:ee:5a:a6:7a:ca:87:e8:fc:ee:22:5e:
80:c6:d2:af:b9:6f:99:18:ed:cb:30:44:d3:c5:d1:1d:f0:3a:
4a:1c:d5:3f:98:45:b5:06:00:92:f6:c8:50:e5:35:e7:3b:27:
50:a7:66:25:77:ce:40:25:d9:f0:19:95:71:fa:fc:d4:62:fa:
38:95:3a:96:25:8c:c5:05:4f:79:33:59:ac:d3:a8:7b:7a:c1:
bc:80:21:fd
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaZyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzIxMTQ0NjIwWhcNMjYwNDI3MTQ0NjIwWjAYMRYw
FAYDVQQDEw02OWJlYWY0MS0xOWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtF2TfQuRIWUIJChzYxtEHTy7RWhJcTsNeXEwd3EaffR8+DgAY+PxKvFJ
U+CdtQlfT0Y0jTSZXOck+Ul8jtx7ZdgdxpKG2S+wmmxd6IOKzXNt5bOBL2r0WdDa
hodhN6jjv1h82QSbblX/N/swZEanjnHUlyExhp8jmKj59OyxTJYtFzqerqL3/FIB
tIC8hbtIXdoCkBMiwwRvAZ9U5yyZcMlw8tzIj8kRrweQ21RZoTz+hO7iZ7gWHA54
r0AfPjxZxj++uXYLiEi1BKiLTVm6qwZfSUqdZETyTaFVukDNSliZUmEZFnlMko0b
BEIFDgeBIXjRHWLkBjLMKrYWKoL9OwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFP2n
sIKbq+Hq3cQVzmsNg8aICr+VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQkE3NUUyNDI1MzQxMUYxOEU4NkMyQjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsQMA0GCSqGSIb3DQEBCwUA
A4IBAQCxle+5CQAEDwzN1u0xzZ8fWQLFHZT8I+SlS8gT4iles7Ex1t9shdbp4DxE
++1FohPRbVYUJRc6/6eRTFPIQut+54vav9myz/qQ88/569xTL0Sjs/EDor3hutDW
CvCSJ11I/bVI5O1AhTnpzVs87I/5e/9bZU0kaSodG8vRXQ/gGABGelo9MhHKXRRr
djCYvUUEWXig7JgXHM17xiTvTZpCea7wkqIiCqWL7lqmesqH6PzuIl6AxtKvuW+Z
GO3LMETTxdEd8DpKHNU/mEW1BgCS9shQ5TXnOydQp2Yld85AJdnwGZVx+vzUYvo4
lTqWJYzFBU95M1ms06h7esG8gCH9
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:53 2026 by rpki-client