Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB240C165DDF11F188FA23BACE1D38B0.roa
File: BB240C165DDF11F188FA23BACE1D38B0.roa (raw, json)
Hash identifier: gckaZRAOf/DhBsLzGfT6ZyZsABoJy08XF6d74zUFNQA=
Subject key identifier: F6:5D:51:0D:51:E9:B2:E9:CE:E3:3C:D3:3E:9C:D2:8F:CC:BC:11:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB240C165DDF11F188FA23BACE1D38B0.roa
Signing time: Mon 01 Jun 2026 17:31:33 +0000
ROA not before: Mon 01 Jun 2026 17:31:28 +0000
ROA not after: Mon 06 Jul 2026 17:31:28 +0000
asID: 269816
IP address blocks: 156.248.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113459 (0x1bb33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 17:31:28 2026 GMT
Not After : Jul 6 17:31:28 2026 GMT
Subject: CN=6a1dc1f5-bfff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:14:48:af:00:aa:e2:cb:f0:af:78:34:95:
d3:31:ea:90:65:e9:05:00:6b:34:7d:ee:e3:d1:75:
6f:e0:1b:db:f3:36:fa:03:4c:86:cd:d9:03:c2:59:
67:d4:a4:9c:e1:e5:51:04:fc:4d:70:b7:6e:ab:01:
b2:72:d4:47:5b:af:1e:a8:3c:ec:4a:58:49:83:2f:
59:36:0e:fd:77:72:51:34:84:0c:f3:ee:51:a3:0f:
c5:96:f2:4e:44:a4:a5:92:ed:82:66:b7:00:e0:45:
96:b0:57:2c:e4:56:32:6c:fa:87:58:29:a3:01:67:
46:7e:b5:b2:3a:2c:2b:77:f2:27:a2:05:18:9b:64:
c4:82:98:01:15:eb:31:c6:9e:b6:31:83:98:7b:87:
01:06:5e:ce:33:b3:9a:3e:ae:3a:a0:76:d7:70:aa:
46:1e:5f:59:49:68:07:1b:58:8e:21:d7:5c:0c:77:
61:e2:48:53:4b:07:f5:e5:a7:e3:72:85:64:ad:9e:
2a:93:68:a6:d8:6c:05:86:14:6d:bb:3f:3d:ee:38:
11:08:71:14:b6:bf:2b:d1:92:24:62:e4:2e:22:24:
cc:ee:6b:d3:fe:6f:92:4d:b9:1c:27:4c:e0:81:99:
01:04:85:63:81:48:47:1d:ec:5a:d2:2f:d4:36:59:
e1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5D:51:0D:51:E9:B2:E9:CE:E3:3C:D3:3E:9C:D2:8F:CC:BC:11:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB240C165DDF11F188FA23BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.248.160.0/19
Signature Algorithm: sha256WithRSAEncryption
99:12:d5:7f:f1:bc:6d:67:7e:7a:91:0d:2b:c7:60:53:c5:1c:
8a:d0:5a:87:a9:38:23:a6:7f:6d:1d:1d:92:8b:37:11:80:c0:
f5:15:33:fa:5f:10:fd:dc:90:cb:a1:8f:07:8b:2c:a8:d5:69:
bf:89:33:5a:cd:da:ee:cc:74:d2:7c:00:f1:4a:c2:50:a4:ab:
07:40:45:bb:87:1b:ac:fe:b5:56:fd:84:d1:b6:d7:d4:4d:42:
f7:19:b7:1e:cf:8d:c8:ed:9c:be:31:ee:8b:92:dc:ad:92:3f:
89:26:b9:5b:98:da:ee:4e:9e:20:4b:04:13:01:6e:7d:49:70:
65:31:b7:59:a3:69:df:bc:09:3e:87:a5:0f:61:2f:e9:77:48:
bf:6e:56:ba:14:3b:f7:1a:c8:d5:01:8b:49:e9:dd:61:af:bf:
39:96:3e:d7:c2:6c:f9:9c:59:b1:62:15:b7:27:6f:85:89:c3:
25:f8:9b:79:36:e8:ce:77:0f:2d:51:69:b5:5c:0c:8c:90:a6:
1a:bd:82:26:40:a2:18:65:c9:45:a6:79:07:df:a2:43:2c:1c:
c3:8c:8d:f5:df:c1:3e:fc:4f:d4:73:ae:59:02:d6:43:66:c6:
5c:52:de:09:ec:d8:69:3c:54:8b:3e:02:85:a5:de:80:ac:10:
de:68:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:12 2026 by rpki-client