Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF10F5BC282B11F191CDF187DAE4EC9C.roa
File: BF10F5BC282B11F191CDF187DAE4EC9C.roa (raw, json)
Hash identifier: aNBCMYON5Qiuj26+9Bt6ODTmeGsy9W/mwv+WEZIXE+c=
Subject key identifier: 4A:69:EE:09:AD:66:06:99:AC:53:6B:6C:99:3F:25:18:BF:72:EE:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A753
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF10F5BC282B11F191CDF187DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 09:19:38 +0000
ROA not before: Wed 25 Mar 2026 09:19:32 +0000
ROA not after: Sat 02 May 2026 09:19:32 +0000
asID: 984
IP address blocks: 156.253.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108371 (0x1a753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 09:19:32 2026 GMT
Not After : May 2 09:19:32 2026 GMT
Subject: CN=69c3a8aa-96ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:75:44:62:c5:37:67:b4:bc:96:81:1c:6b:
0a:fa:76:5d:9c:ad:03:e4:f0:f5:fa:2b:ed:65:1e:
76:8f:76:86:3a:99:a9:32:67:55:cf:15:8f:ba:37:
08:90:a8:b2:9e:bd:3a:d3:2c:84:85:1d:9b:f6:ba:
cf:69:fb:74:82:7c:a0:eb:a4:ba:76:17:15:a5:0e:
49:a4:9a:e4:6a:29:53:f5:0e:fa:3c:94:22:92:4f:
83:08:78:8b:aa:71:56:04:71:9c:e7:3b:7c:27:9c:
23:78:a5:d7:36:3a:e2:82:e4:b3:83:4f:ae:6b:ea:
84:61:ab:e5:9e:f9:ed:13:16:12:bc:ae:0d:db:3c:
cb:37:55:77:9a:54:45:97:94:0c:2f:b6:28:a4:cc:
38:7a:28:ed:b4:f6:34:fe:b0:04:6f:49:a8:40:63:
89:65:5a:46:93:c2:63:69:f1:93:20:29:4e:ee:fb:
8b:d6:05:76:42:c1:fa:be:b5:26:c8:31:e2:cf:a8:
1e:f8:65:06:80:5f:fd:c2:a5:7c:b0:09:16:19:e0:
4f:65:dc:e9:29:c9:d8:bf:a8:cb:bc:f7:c8:93:cc:
bf:20:46:2b:e5:49:d4:c3:86:de:38:62:95:d1:3a:
32:80:6c:59:d1:50:36:2e:a0:01:99:87:0f:68:5c:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:69:EE:09:AD:66:06:99:AC:53:6B:6C:99:3F:25:18:BF:72:EE:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF10F5BC282B11F191CDF187DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.134.0/24
Signature Algorithm: sha256WithRSAEncryption
77:35:99:42:8e:d1:d9:29:6f:91:27:63:2b:a8:d5:dc:3d:7d:
90:56:d2:02:23:c5:3a:bc:f0:ba:80:26:ba:44:d9:96:43:bc:
ef:a6:56:e2:09:e9:89:9f:ce:94:87:c9:90:7d:0c:01:e9:b7:
5f:a0:ce:fa:84:cb:ef:d0:53:ea:94:e3:4a:5d:d2:73:e1:0f:
20:be:ea:3f:a8:94:f3:26:2a:6e:ad:1e:a6:c8:85:07:90:f0:
20:71:5b:32:35:51:15:11:76:c3:59:b4:ec:36:15:59:69:d9:
36:ba:ea:45:17:e8:9b:a0:8f:86:d9:54:96:15:dc:a0:da:0f:
5c:dc:af:c9:cb:bb:96:f6:1b:09:82:33:0e:da:70:74:58:db:
cc:ee:96:a2:88:87:a6:5b:41:65:05:38:72:95:7c:14:1a:db:
9d:0e:47:5c:26:3b:db:21:16:c1:65:a6:c0:96:dd:a9:bd:41:
37:d2:bd:26:36:1e:e5:86:08:37:97:de:f4:cb:65:71:91:1c:
82:d9:df:4d:f1:ca:90:94:47:8d:52:60:1f:d7:ee:94:03:26:
cf:b8:d9:71:00:c7:39:40:7f:6c:8c:26:a1:d7:65:c3:c1:10:
6d:54:56:9e:88:90:5c:c3:37:cd:d9:70:fa:85:bf:be:7e:21:
cf:aa:5f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:57 2026 by rpki-client