Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDF1DECC698411F189BFBD02CF1D38B0.roa
File: BDF1DECC698411F189BFBD02CF1D38B0.roa (raw, json)
Hash identifier: XY0uw3Tfjt9a1ajGbMtFMunOPAcJvO5kKmYnwc4c7Ro=
Subject key identifier: 64:03:54:F3:B1:43:33:86:01:FE:DF:9F:BA:9D:94:E5:BA:BE:A4:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDF1DECC698411F189BFBD02CF1D38B0.roa
Signing time: Tue 16 Jun 2026 13:10:27 +0000
ROA not before: Tue 16 Jun 2026 13:10:22 +0000
ROA not after: Wed 22 Jul 2026 13:10:22 +0000
asID: 401701
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114186 (0x1be0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 13:10:22 2026 GMT
Not After : Jul 22 13:10:22 2026 GMT
Subject: CN=6a314b43-742f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ac:2e:20:59:4a:4b:c8:4f:24:33:b4:1c:28:
51:65:2d:33:38:c5:80:c4:dd:ac:54:f1:d2:42:f9:
a0:b7:d0:31:75:7d:5b:49:fb:bd:97:e2:37:50:7f:
5d:4b:04:34:e7:c6:e9:a6:a9:79:85:a9:f6:25:6b:
7c:62:9f:c7:f2:af:39:67:48:1b:ef:b6:55:15:83:
79:c1:a7:58:a4:41:82:59:a7:16:85:a7:cc:db:e7:
08:46:28:da:ad:3b:bf:4e:e8:b2:bc:31:17:97:de:
90:b9:e5:2a:52:40:0d:46:b9:a6:49:11:8f:be:38:
af:f3:5d:d6:d1:6a:0f:1a:53:36:91:4a:85:0f:b8:
0b:da:ae:a0:8a:a7:76:7d:7c:3f:09:c9:44:8a:a7:
78:d3:26:03:2f:80:c3:31:0d:57:00:38:27:98:80:
d8:07:56:1c:f3:6b:62:6a:a2:1d:42:4e:14:e3:c5:
b1:9b:93:7e:a8:54:05:09:ff:c1:a6:6c:c1:c2:61:
d7:15:fb:a1:14:ad:9c:09:d9:24:f3:cd:4d:5b:dd:
a2:0d:be:f1:6a:c5:54:8c:72:61:10:ef:bb:05:a6:
a7:a9:4d:b7:78:b9:e2:11:ff:90:10:21:53:6d:5f:
07:49:89:b0:cb:3c:ba:56:7e:d8:24:01:15:20:46:
5a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:54:F3:B1:43:33:86:01:FE:DF:9F:BA:9D:94:E5:BA:BE:A4:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDF1DECC698411F189BFBD02CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:0e:4f:1b:ca:3b:38:38:fe:33:2d:a3:9d:df:3c:fd:98:73:
00:fc:c3:1a:b7:73:ad:f1:c7:2d:79:f6:81:a8:3c:91:2c:31:
85:28:46:33:14:85:a8:ae:68:e2:db:f7:98:52:38:b6:17:67:
ce:f5:8b:9c:32:5d:ee:12:26:48:f0:d6:43:ac:df:41:0b:b0:
1c:d9:6b:c0:36:0b:dc:97:20:30:8e:bd:19:54:e1:17:d4:4f:
20:a7:8e:04:ee:11:ce:88:36:23:55:af:fb:07:11:df:2f:21:
ad:4d:14:f4:e3:34:49:88:06:8a:33:54:84:84:0e:46:cd:5b:
83:0e:52:5f:d6:bb:a1:c0:ea:53:47:3f:b7:cd:e8:02:9c:4c:
5f:c4:84:32:f4:56:cf:f1:94:18:77:bf:29:c2:6e:d1:f7:1d:
f9:b5:9c:6a:7e:46:3a:d1:42:8d:3b:d1:07:e4:82:59:62:39:
03:ac:03:e2:58:56:e4:a3:7d:fe:a7:b4:d6:7a:8e:32:91:61:
76:8e:84:fe:79:8f:4d:20:fa:3e:6b:8e:87:84:ec:3e:c4:fc:
10:23:1e:0a:a7:7d:a3:8a:3e:97:60:75:fc:10:8d:3e:4e:8d:
6c:16:81:eb:24:8f:6a:07:34:8b:e4:6a:2f:32:69:9e:43:c6:
63:0a:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:56:43 2026 by rpki-client