Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E96B41B9E11F1A3C314CCDAE4EC9C.roa
File: BB7E96B41B9E11F1A3C314CCDAE4EC9C.roa (raw, json)
Hash identifier: 5teJop1ApIadh1WnFMKCiwhLnrhaRxljXnunyssLXBU=
Subject key identifier: 57:5F:94:87:2A:BE:47:1B:E1:75:71:FF:AB:85:E0:40:9A:A1:17:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A381
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E96B41B9E11F1A3C314CCDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:59:59 +0000
ROA not before: Mon 09 Mar 2026 09:59:55 +0000
ROA not after: Thu 16 Apr 2026 09:59:55 +0000
asID: 17497
IP address blocks: 156.245.8.0/22 maxlen: 24
156.245.8.0/24 maxlen: 24
156.245.9.0/24 maxlen: 24
156.245.10.0/24 maxlen: 24
156.245.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107393 (0x1a381)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 09:59:55 2026 GMT
Not After : Apr 16 09:59:55 2026 GMT
Subject: CN=69ae9a1f-2878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:cf:b0:07:dd:2f:fb:11:56:15:64:60:cf:
74:d3:22:da:4b:7a:03:17:c5:61:0f:a0:66:02:6d:
96:2b:23:4b:89:f7:da:0b:63:eb:cb:61:a9:3e:8f:
48:32:3b:21:c6:d3:34:24:10:30:0c:e2:36:f3:38:
bf:0d:0e:41:1d:d5:21:c8:84:24:ea:57:5b:13:4a:
54:87:93:9c:b2:61:e1:ba:fe:77:ae:6b:fe:57:d4:
93:7c:39:ce:02:04:da:27:fd:52:b0:a8:fa:4e:15:
10:ca:f4:4f:50:25:e5:d7:40:7f:d7:74:c2:a1:ce:
7d:33:e4:2b:f8:80:8d:38:89:3e:e8:01:92:56:2a:
b6:b4:4d:3c:95:a0:d0:ff:e9:20:94:14:f5:2a:49:
d3:e3:0a:49:32:d0:df:54:09:b5:41:53:5c:6f:88:
ec:0e:a7:d7:63:3b:a8:8f:47:d9:de:80:b6:6b:33:
3a:5d:be:d6:29:6e:81:90:0a:b0:05:e1:1b:0a:71:
1a:cd:0e:00:b4:f7:4f:1f:43:a5:44:af:90:60:96:
df:23:73:90:b9:2b:9f:fd:8c:4d:39:5a:58:db:7d:
e1:e4:27:24:02:27:e3:67:e1:04:36:a4:e8:58:08:
55:ce:c4:51:5e:fd:df:69:ee:a0:cb:47:73:a2:2b:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5F:94:87:2A:BE:47:1B:E1:75:71:FF:AB:85:E0:40:9A:A1:17:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BB7E96B41B9E11F1A3C314CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.8.0/22
Signature Algorithm: sha256WithRSAEncryption
69:9c:c1:bd:84:2e:b3:52:45:31:93:73:7c:dc:38:98:1c:9f:
30:71:18:f5:d4:ff:d2:7b:29:14:52:e2:1a:2e:1a:19:8f:6b:
1e:61:9f:87:b4:6c:bf:a3:58:d4:a1:45:d4:59:2c:36:98:07:
94:d1:7a:09:56:b5:70:fd:64:79:f3:e2:6f:c8:9e:04:e9:1f:
32:a6:fe:a6:ba:4e:8b:08:ba:03:fa:08:cc:20:30:ad:41:b3:
28:6e:1d:19:c5:3e:3c:b8:d1:8a:ca:7c:1c:c3:61:00:45:6d:
fe:dd:1b:a0:b8:83:28:55:d7:e8:e8:70:89:b5:90:73:6c:ff:
ad:68:13:6d:81:3d:3b:33:b5:f7:3d:c6:35:4e:02:55:b1:1e:
66:24:ad:9d:ba:df:19:f0:bb:1a:07:31:96:7b:62:64:89:a4:
2d:38:07:39:85:b0:6c:f7:da:92:5f:3d:a1:f5:14:a1:83:eb:
fa:b7:29:04:c2:45:66:96:63:c8:a8:ea:c7:0a:48:64:ff:99:
6f:52:0c:b1:ca:6c:70:e7:f1:b6:d8:1a:ac:73:96:08:64:9f:
69:dc:4a:de:1b:9a:64:8c:79:13:17:fe:0b:9d:b9:29:02:54:
58:e8:dd:2f:85:d7:49:7f:b5:f6:04:69:55:6b:56:5e:77:e3:
a8:ad:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 09:28:47 2026 by rpki-client