Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC04417818C511F1AC9EF6C1DAE4EC9C.roa
File: BC04417818C511F1AC9EF6C1DAE4EC9C.roa (raw, json)
Hash identifier: lLFtHrQ8IbWRthywHeblaIGauDNgxyrhx5hGBX6apPU=
Subject key identifier: 66:4A:F2:AD:A1:29:E2:3B:4C:53:C9:2D:92:9D:2D:6C:7B:8E:56:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2D3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC04417818C511F1AC9EF6C1DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 19:01:37 +0000
ROA not before: Thu 05 Mar 2026 19:01:32 +0000
ROA not after: Wed 22 Apr 2026 19:01:32 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107219 (0x1a2d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 19:01:32 2026 GMT
Not After : Apr 22 19:01:32 2026 GMT
Subject: CN=69a9d311-5b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:1b:44:8c:d6:e3:8e:ef:7a:c4:37:5f:ca:
f6:e9:f7:2a:94:f7:77:53:b9:60:9b:62:fb:f7:13:
c6:5e:5b:53:3e:89:c2:0a:36:9e:9c:6d:2e:e5:ab:
ca:b5:6c:bc:ea:42:65:9b:ca:a9:cc:03:f9:f4:58:
2f:dc:57:6e:6a:af:64:1b:3e:b3:84:17:fa:d8:27:
6d:65:e5:d7:66:95:ec:7e:d8:9f:e2:b6:bc:71:d7:
32:8c:b2:16:fb:99:fd:92:37:71:98:85:8b:c4:1f:
70:e8:82:22:c2:fe:d1:28:d6:43:db:5b:1f:24:34:
59:d2:a8:41:28:63:01:89:42:6a:88:cc:60:cc:f5:
e7:53:2e:4f:a1:dd:92:90:40:b7:6b:ff:dc:c1:cf:
f4:43:a1:4b:b3:25:b0:a1:22:14:05:bd:d2:1b:ca:
e8:00:81:6b:5b:ec:5d:1b:85:33:ad:23:5e:90:ae:
67:3b:95:73:79:69:a3:a7:25:5c:c8:f6:64:e1:76:
d9:8b:af:54:a3:f6:ee:f9:c3:2c:f3:fd:28:11:e9:
9e:21:61:0e:4a:87:2b:c5:58:16:3e:ee:f0:fe:d9:
2e:61:26:a1:a2:dc:4b:58:6b:aa:5b:08:52:62:25:
60:0f:3d:88:c8:10:14:67:46:8a:a8:6e:be:75:0b:
ff:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:F2:AD:A1:29:E2:3B:4C:53:C9:2D:92:9D:2D:6C:7B:8E:56:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC04417818C511F1AC9EF6C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0c:f2:39:30:e6:b8:cf:9e:7a:0a:30:15:fe:c6:7b:99:66:09:
bf:a6:94:2a:89:22:9c:8c:0b:7d:25:85:d6:63:75:4d:5d:1e:
e2:94:65:20:05:23:55:c4:28:83:58:6d:62:35:af:c5:e7:31:
91:93:29:b3:c3:d5:71:54:af:86:cd:80:93:15:54:c4:a5:c4:
16:87:9b:bb:9d:ff:b9:ba:3e:38:be:56:94:a5:ab:9d:0d:48:
3e:71:37:2d:6d:c3:47:65:6b:87:fe:48:f4:20:1c:7e:c9:50:
4c:fd:d6:9c:bd:75:ce:27:92:9a:cb:5d:20:23:b5:77:39:25:
a8:85:c6:c7:cc:ce:78:ab:5c:60:36:c3:1f:31:be:56:e8:42:
47:07:45:a4:c8:ee:e2:86:ef:9e:8f:5b:03:e2:d4:1e:55:19:
c8:c9:8d:da:03:51:19:93:3b:6a:5c:32:47:34:22:fa:0b:2c:
7f:05:c2:fc:49:ec:4b:8e:38:a7:c4:2d:19:ab:71:a8:60:12:
88:e9:13:54:a5:4b:17:95:74:55:90:2e:c2:6e:15:02:b3:58:
f6:19:d7:f3:6a:df:f1:96:29:df:6c:c9:26:5f:24:4d:ce:e1:
b9:9d:de:54:f6:42:a0:d3:27:1e:24:c2:5d:5f:89:dc:74:2e:
5e:e2:fc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:30 2026 by rpki-client