Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC7937C358911F1A82275E8CE1D38B0.roa
File: BCC7937C358911F1A82275E8CE1D38B0.roa (raw, json)
Hash identifier: YD/QUXk+lI+06ypnXO6EgtIcjzpDvNJAJWAjfXFkYoA=
Subject key identifier: B4:29:0E:C0:1F:68:3C:01:DC:56:AD:DA:05:F9:22:30:29:18:0A:A6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC7937C358911F1A82275E8CE1D38B0.roa
Signing time: Sat 11 Apr 2026 09:35:12 +0000
ROA not before: Sat 11 Apr 2026 09:35:08 +0000
ROA not after: Fri 15 May 2026 09:35:08 +0000
asID: 269070
IP address blocks: 156.249.64.0/24 maxlen: 24
156.249.65.0/24 maxlen: 24
156.249.66.0/24 maxlen: 24
156.249.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109562 (0x1abfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 09:35:08 2026 GMT
Not After : May 15 09:35:08 2026 GMT
Subject: CN=69da15d0-3b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:ee:f7:46:24:e6:a2:95:09:c9:41:3d:d4:
3f:94:e8:af:96:d4:5a:81:7b:ce:ca:bd:08:f5:a3:
f4:b0:b3:af:eb:94:3e:bb:64:9f:4d:b7:bd:0a:fa:
aa:6c:31:20:56:85:7e:9d:ef:f1:45:5e:78:9a:70:
df:8c:4e:c8:4f:98:55:7c:be:de:d2:89:b8:30:bf:
5a:68:74:b5:44:8e:a7:c7:1a:2c:92:c0:49:b0:a7:
6d:bd:e9:f5:94:5c:07:a0:83:39:11:57:56:bc:7c:
cc:09:85:43:f8:49:15:82:bf:00:da:66:6e:11:88:
46:f7:df:86:7a:78:62:f5:f7:94:b9:50:a7:9a:c2:
80:f6:da:de:85:5f:50:20:1c:08:12:95:32:3d:99:
96:77:28:69:55:67:15:32:e7:e9:f5:e5:a8:ac:20:
98:86:36:15:66:1b:af:2d:21:5a:f0:74:da:93:22:
f6:b8:ae:dc:05:b9:e9:a7:e0:9c:57:87:6e:76:79:
0b:a0:ad:11:65:1e:43:c7:92:01:b7:f8:ab:89:7a:
c7:8f:f2:2d:87:05:c3:ad:5d:ad:ed:3e:a8:45:8f:
57:29:0e:00:81:33:8d:00:80:07:ec:15:df:65:d4:
c0:cc:e1:44:3c:cd:eb:85:ce:d4:c2:e3:70:1c:40:
db:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:29:0E:C0:1F:68:3C:01:DC:56:AD:DA:05:F9:22:30:29:18:0A:A6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCC7937C358911F1A82275E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
70:28:43:57:9c:e4:50:43:98:e6:96:cf:84:53:5d:30:4a:ed:
ee:97:99:89:57:9f:6c:7a:96:0d:6d:6e:74:51:65:69:60:6b:
6e:a2:03:85:0b:9c:90:e1:36:f2:6d:04:b0:06:49:87:89:ff:
76:f2:fc:f7:28:1c:66:b5:8c:5a:cb:c3:09:b2:2e:ec:d5:aa:
9c:a9:5c:bd:f3:63:11:18:dc:8b:fd:59:71:56:49:e0:31:c9:
44:1e:0c:e0:ec:2d:85:a4:66:35:9d:4a:84:63:e5:ff:3a:a8:
97:dd:02:94:88:9c:b2:6f:e7:b4:56:ea:c6:97:26:67:ae:f9:
5a:ad:f3:26:9c:4d:77:31:31:a5:05:c1:9b:86:db:4d:28:23:
0b:84:df:83:6c:3c:69:72:d0:4a:e9:8f:e5:2b:ce:32:09:8b:
ee:a8:b1:cf:68:5b:49:0a:6b:a1:2f:44:f7:c6:21:81:b5:f2:
8e:d0:3d:01:aa:02:ee:e0:47:d2:27:b1:30:76:44:bc:88:65:
b0:a1:3c:e0:7d:3a:7d:36:a1:46:3e:df:1e:51:f7:6b:00:2e:
79:06:32:67:ac:73:9e:df:fc:bb:4f:c5:df:57:9a:42:a0:f0:
8b:24:f4:55:f7:34:23:3b:05:36:da:77:54:08:0c:e8:24:7a:
38:3d:c7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:32 2026 by rpki-client