Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCF89A9A7C4111F19367B5F1CE1D38B0.roa
File: BCF89A9A7C4111F19367B5F1CE1D38B0.roa (raw, json)
Hash identifier: H6Dh39eD6DNtAo+LhY809nXA92GhfJ06rSpHpVBB+l8=
Subject key identifier: 06:74:2A:D5:F2:57:4F:D8:22:66:3F:92:79:29:7C:DB:53:45:5E:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C456
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCF89A9A7C4111F19367B5F1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:28:41 +0000
ROA not before: Fri 10 Jul 2026 09:28:37 +0000
ROA not after: Tue 18 Aug 2026 09:28:37 +0000
asID: 18013
IP address blocks: 156.241.128.0/18 maxlen: 24
156.241.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115798 (0x1c456)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 09:28:37 2026 GMT
Not After : Aug 18 09:28:37 2026 GMT
Subject: CN=6a50bb49-c595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:30:23:6c:f9:a1:d9:c8:a7:8b:86:e4:1d:24:
26:5e:dd:b7:ef:ee:3a:04:a6:b9:92:20:b5:37:5d:
c8:d0:2d:ee:9a:37:cd:aa:85:1e:b2:0c:fb:4d:85:
d9:d4:91:22:a9:20:2c:65:84:10:0a:6d:5b:c9:b4:
b1:5d:55:ea:12:44:cc:32:a1:5d:de:8e:43:73:c9:
6f:54:2a:fb:8a:58:6e:0e:53:fa:c6:13:8a:2e:a3:
51:9c:ee:b0:6a:29:d2:fd:7b:87:d9:12:dd:1f:c9:
98:a1:d4:c0:e1:a4:1d:0c:b2:8d:fe:8c:1e:c9:5c:
28:16:51:69:6e:3e:d0:92:f9:b3:dd:0c:4c:bf:61:
fa:2b:6c:7a:f2:4f:9b:39:a6:33:7f:9a:de:22:a4:
39:1a:46:ab:0d:10:32:ce:17:fa:f7:5a:b1:0f:46:
bc:cc:b0:79:5f:0e:30:2e:c9:81:7a:da:cb:4a:00:
fe:11:61:c9:62:4e:ba:57:7e:8a:39:8b:55:00:c7:
b1:2c:e1:0e:e4:85:28:7d:78:1f:3e:06:8d:68:9a:
a6:13:38:1f:07:ce:42:0a:41:c8:f7:db:78:cc:3f:
43:ab:21:10:15:74:2f:e6:ac:83:bb:fb:96:ea:01:
8d:78:94:ab:b4:cf:98:59:54:0b:8d:d8:39:cc:fc:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:74:2A:D5:F2:57:4F:D8:22:66:3F:92:79:29:7C:DB:53:45:5E:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCF89A9A7C4111F19367B5F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.241.128.0/18
Signature Algorithm: sha256WithRSAEncryption
91:ee:fa:8e:36:c4:bc:38:bd:3b:1f:06:aa:62:3d:a7:d9:93:
b9:06:82:e4:5d:af:40:7e:9b:9f:4e:64:89:62:8d:98:af:4d:
33:c4:28:f4:a1:7b:d7:7f:ea:1e:6f:67:3c:79:93:8d:49:50:
d7:3d:b9:f6:0e:1d:71:c3:d3:a8:1e:40:01:de:c0:b9:52:0d:
60:ff:7d:23:4a:3d:6d:db:7a:c0:87:53:7d:e0:49:06:b6:66:
08:fd:a7:bc:7f:1d:8e:a9:8a:58:1d:8d:34:ea:a8:41:1c:71:
bf:77:61:c5:7d:c7:5e:58:55:1e:36:2b:7c:cd:ff:e3:bf:1b:
3a:6f:2f:f4:e2:78:42:e4:49:8d:4c:1d:27:f6:bf:04:04:85:
39:9d:03:32:e9:02:b6:d3:35:11:01:fd:0e:21:29:bf:b4:c1:
79:d1:16:42:23:60:53:8f:0b:0e:69:e8:bf:7a:60:e9:da:0d:
45:d9:00:e3:0e:b9:26:b1:dc:57:8d:00:1e:bb:66:45:c7:d8:
81:08:b5:d5:7a:d1:bc:21:99:58:eb:64:54:71:5a:ae:ec:84:
d0:df:c3:e0:10:31:c6:8e:e8:6a:96:b5:81:7e:58:09:8b:a3:
e4:14:fe:3f:98:db:f7:17:7e:8f:6d:5c:b0:35:a7:49:a8:a1:
5e:33:ed:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:37 2026 by rpki-client