Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF6570B0194911F19C76047ADAE4EC9C.roa
File: BF6570B0194911F19C76047ADAE4EC9C.roa (raw, json)
Hash identifier: VHwC3hpwH5BGshh2emCv4t6hQWmfM8IXyuWPYzhhKsM=
Subject key identifier: DB:8B:43:36:1D:76:0C:50:B4:E4:98:C5:6E:63:73:FE:EC:44:02:1B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF6570B0194911F19C76047ADAE4EC9C.roa
Signing time: Fri 06 Mar 2026 10:46:36 +0000
ROA not before: Fri 06 Mar 2026 10:46:31 +0000
ROA not after: Sun 05 Apr 2026 10:46:31 +0000
asID: 265721
IP address blocks: 156.248.128.0/20 maxlen: 24
156.248.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107253 (0x1a2f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 6 10:46:31 2026 GMT
Not After : Apr 5 10:46:31 2026 GMT
Subject: CN=69aab08c-e1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:a0:d8:34:33:02:a5:b1:fb:13:fe:19:49:
19:cc:77:49:22:c6:01:04:7c:1b:b0:57:0d:2c:45:
32:cf:bb:c1:fa:72:3c:7f:72:ca:cf:93:1c:91:8e:
c5:29:43:1f:71:d3:35:f2:2c:9b:86:79:3f:5e:97:
89:2d:d1:cc:c1:87:35:4e:32:65:0d:c5:12:ad:ef:
fb:14:20:a8:7b:ee:35:9b:67:03:a7:8f:ec:e9:9e:
a7:80:4f:6b:59:ef:37:0b:61:1f:cd:54:27:c4:ae:
17:33:fd:21:fa:0d:f8:1e:c9:6e:46:e7:0b:ce:8f:
fd:1c:62:2b:f7:34:c1:3e:8f:c3:bb:85:cd:14:6e:
13:18:f0:27:69:59:59:fc:07:c5:83:af:ea:59:6f:
58:69:bf:35:f8:b4:ce:35:77:e6:b3:a9:27:e2:1b:
f2:ae:f2:b0:df:87:3d:2c:5e:ec:72:b4:21:12:c2:
73:15:bb:cb:50:b2:6f:d9:dd:d8:99:fb:ec:77:54:
6e:21:7f:b3:92:08:b1:70:7b:f7:81:0d:9d:2e:be:
3f:58:f1:a1:fb:98:3b:c9:21:b2:e8:81:75:3f:01:
3c:c2:a2:46:6f:fa:2c:fa:3d:eb:15:6e:a2:67:24:
39:21:af:79:55:14:c6:9e:ab:d5:06:d0:ca:9f:82:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8B:43:36:1D:76:0C:50:B4:E4:98:C5:6E:63:73:FE:EC:44:02:1B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF6570B0194911F19C76047ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.128.0/19
Signature Algorithm: sha256WithRSAEncryption
09:3b:17:fa:77:84:3e:71:f6:1f:b0:a1:4d:2d:31:ff:b7:25:
be:0e:d9:4e:11:ec:76:93:44:8e:0f:f8:2a:89:f5:94:a7:cb:
4d:a8:58:8d:8d:80:b4:28:c6:4b:93:4e:ef:b4:de:35:14:01:
8c:e1:a0:a0:08:b6:04:00:9e:76:52:01:59:a6:24:85:dd:b1:
c3:a7:28:25:51:23:a6:c0:9d:d0:b0:84:76:d6:18:e0:aa:bf:
0c:1a:02:32:d5:e0:5c:e0:7a:3f:62:b8:04:b1:be:f0:26:e7:
88:0d:03:ec:53:06:1a:8d:82:37:ff:3c:d8:92:e2:97:41:29:
37:7e:b0:c3:b9:32:07:95:4e:c0:83:09:45:a7:74:e9:60:ad:
d8:ef:f7:9d:4b:8a:f8:44:20:e3:a0:c6:38:bf:fc:9e:76:cb:
ae:40:5e:bd:6a:2f:bb:26:c5:43:71:17:e3:3f:7e:aa:97:d6:
c1:20:f3:00:dc:5b:d1:d8:f7:78:b6:0b:0f:0f:3f:d1:91:6d:
2c:27:d3:24:b7:1b:4f:2d:e1:95:9c:15:34:06:be:91:b0:4d:
e6:ca:05:9b:1f:dd:5f:25:69:06:f7:f4:4c:2c:0a:96:a2:88:
4a:11:fe:59:98:e9:44:53:32:df:fc:0b:05:44:90:e7:3c:31:
bd:13:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:15 2026 by rpki-client