Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC314CA85A8E11F1A0E9FD18CF1D38B0.roa
File: BC314CA85A8E11F1A0E9FD18CF1D38B0.roa (raw, json)
Hash identifier: nSaPXFBMHOQ4PKi6SMoh7FyNFijTcVv8IN6FMRvWqrc=
Subject key identifier: 29:6C:76:4D:9B:45:E6:EB:F2:6D:48:79:4D:64:67:22:57:7F:37:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC314CA85A8E11F1A0E9FD18CF1D38B0.roa
Signing time: Thu 28 May 2026 12:14:12 +0000
ROA not before: Thu 28 May 2026 12:14:07 +0000
ROA not after: Sun 05 Jul 2026 12:14:07 +0000
asID: 21859
IP address blocks: 156.252.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113317 (0x1baa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 12:14:07 2026 GMT
Not After : Jul 5 12:14:07 2026 GMT
Subject: CN=6a183194-80ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:c3:69:dd:bc:7c:2e:12:2b:4c:e0:13:34:
c3:ea:46:ed:44:47:2f:0a:07:25:23:7f:94:51:24:
bd:46:4d:4f:1d:65:96:8c:c4:f7:59:76:ca:55:23:
29:26:7e:e4:8c:22:28:06:25:4b:fb:71:ee:61:7e:
93:16:2c:a9:c0:5b:f6:1b:ce:ba:0a:62:f3:65:3c:
54:2f:f7:a1:c8:7b:e3:95:16:af:08:5a:5e:e6:49:
38:07:bb:70:32:dd:d8:29:13:1e:df:29:62:ae:b7:
fb:a9:1d:fb:86:5a:7f:3d:a9:86:04:13:f6:60:3f:
55:43:d4:93:3e:4f:6a:56:2c:f1:dd:bc:c7:6c:b7:
90:13:ea:8f:86:c0:f5:1b:a7:9d:b5:c7:b3:a4:a2:
ea:ac:b4:d1:44:3d:09:26:c3:fb:66:ce:75:a0:d2:
28:bf:d0:d8:6c:52:7f:70:3a:32:cc:c2:b3:a6:b3:
31:88:08:fe:9a:d6:cb:85:04:40:63:aa:90:8f:73:
78:74:b5:3f:64:9d:dc:4c:f8:97:a9:70:00:67:30:
a6:04:b9:48:43:43:52:93:82:9f:ec:74:52:87:dd:
da:e9:d7:23:ab:47:f9:73:88:83:67:53:07:bf:f2:
a8:69:76:64:b0:e5:ed:f2:34:b4:44:f9:56:b2:64:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6C:76:4D:9B:45:E6:EB:F2:6D:48:79:4D:64:67:22:57:7F:37:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC314CA85A8E11F1A0E9FD18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.29.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e7:47:ac:ba:29:55:85:1b:ce:dd:e9:22:05:bb:de:ab:38:
df:13:05:35:97:2c:66:32:f0:54:8c:52:3c:e3:58:19:00:b1:
3e:06:74:8d:3a:b2:5b:f2:32:49:36:7d:87:86:08:8f:b6:1e:
10:99:1f:e1:38:0d:97:9b:d1:16:3f:5a:a1:23:31:ea:05:97:
60:d0:84:e2:96:d2:72:29:d3:eb:84:b5:df:0e:c3:45:9d:a9:
17:d0:47:41:0a:11:fa:67:c6:d7:b5:1d:82:21:34:5c:67:5c:
ef:4d:cc:9a:84:40:fb:99:dc:65:ab:18:d8:42:56:10:82:b4:
58:7c:3f:04:7f:56:38:ca:68:1a:8c:2f:48:f1:4b:70:d7:85:
f2:b3:99:93:df:63:4c:da:53:ab:df:4d:c9:9b:9e:b4:8f:b2:
f2:08:c6:7d:8d:ed:91:14:ea:54:54:44:54:d1:fd:aa:bb:7c:
44:80:75:77:01:9d:c0:94:e8:f7:0b:5e:36:d0:9f:86:24:d7:
b8:b5:0d:f8:3d:19:68:a0:d6:e5:8d:7c:1f:28:f8:31:43:c2:
13:28:c0:9c:db:b0:c5:a1:d9:42:3e:14:e8:3c:d6:d7:76:69:
4a:ab:3c:96:e1:39:a3:69:3b:33:c9:a1:79:f3:7d:2e:61:1b:
14:a8:d1:c4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbqlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTI4MTIxNDA3WhcNMjYwNzA1MTIxNDA3WjAYMRYw
FAYDVQQDEw02YTE4MzE5NC04MGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1j7Dad28fC4SK0zgEzTD6kbtREcvCgclI3+UUSS9Rk1PHWWWjMT3WXbK
VSMpJn7kjCIoBiVL+3HuYX6TFiypwFv2G866CmLzZTxUL/ehyHvjlRavCFpe5kk4
B7twMt3YKRMe3ylirrf7qR37hlp/PamGBBP2YD9VQ9STPk9qVizx3bzHbLeQE+qP
hsD1G6edtcezpKLqrLTRRD0JJsP7Zs51oNIov9DYbFJ/cDoyzMKzprMxiAj+mtbL
hQRAY6qQj3N4dLU/ZJ3cTPiXqXAAZzCmBLlIQ0NSk4Kf7HRSh93a6dcjq0f5c4iD
Z1MHv/KoaXZksOXt8jS0RPlWsmSOewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCls
dk2bRebr8m1IeU1kZyJXfzfHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzMxNENBODVBOEUxMUYxQTBFOUZEMThDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwdMA0GCSqGSIb3DQEBCwUA
A4IBAQBk50esuilVhRvO3ekiBbveqzjfEwU1lyxmMvBUjFI841gZALE+BnSNOrJb
8jJJNn2HhgiPth4QmR/hOA2Xm9EWP1qhIzHqBZdg0ITiltJyKdPrhLXfDsNFnakX
0EdBChH6Z8bXtR2CITRcZ1zvTcyahED7mdxlqxjYQlYQgrRYfD8Ef1Y4ymgajC9I
8Utw14Xys5mT32NM2lOr303Jm560j7LyCMZ9je2RFOpUVERU0f2qu3xEgHV3AZ3A
lOj3C1420J+GJNe4tQ34PRlooNbljXwfKPgxQ8ITKMCc27DFodlCPhToPNbXdmlK
qzyW4TmjaTszyaF5830uYRsUqNHE
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:51 2026 by rpki-client