Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE076930560211F1BBE2CAE8CE1D38B0.roa
File: BE076930560211F1BBE2CAE8CE1D38B0.roa (raw, json)
Hash identifier: jYBqxFvaXN35yMcwyKC7t2qNzYqIhLz+SS4QIHB4+ik=
Subject key identifier: 81:7B:68:8C:73:72:64:58:9E:E8:98:DF:60:45:44:BC:3D:F4:4D:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B828
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE076930560211F1BBE2CAE8CE1D38B0.roa
Signing time: Fri 22 May 2026 17:22:01 +0000
ROA not before: Fri 22 May 2026 17:21:56 +0000
ROA not after: Sun 28 Jun 2026 17:21:56 +0000
asID: 59187
IP address blocks: 156.238.97.0/24 maxlen: 24
156.238.98.0/24 maxlen: 24
156.238.99.0/24 maxlen: 24
156.238.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112680 (0x1b828)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 17:21:56 2026 GMT
Not After : Jun 28 17:21:56 2026 GMT
Subject: CN=6a1090b8-9bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:aa:01:f7:19:54:6a:01:c1:7e:c9:98:e7:
6f:fc:c2:1c:09:02:d4:14:0d:0e:b8:70:c3:6b:c7:
39:66:88:46:08:e3:97:7f:ca:3c:6e:ce:7e:19:94:
0e:60:50:54:c6:2e:be:75:d3:bc:de:bb:82:3d:f9:
c2:24:7e:72:c6:3b:50:6b:db:1d:cd:75:df:72:75:
5e:b7:1b:6e:c9:18:6b:83:72:e5:9f:23:fe:9e:07:
6d:77:94:53:32:42:fe:c0:99:c4:b4:e2:30:eb:90:
aa:fb:d1:40:40:36:fc:d9:75:56:7d:e4:0a:88:60:
a8:09:62:71:6e:70:46:15:11:2d:91:b0:0c:1e:f1:
28:b4:8b:77:2a:3a:03:21:f8:4c:ad:9e:09:be:d8:
07:48:7a:de:da:22:ec:63:41:f8:07:3b:b3:61:9d:
43:a8:ab:df:31:3e:61:77:62:6d:56:5c:3c:07:e1:
60:92:df:91:5e:e1:21:09:a0:6e:b4:3d:27:62:b4:
18:fd:be:a8:ec:38:00:b8:2d:8b:c0:8d:07:0b:32:
fa:f8:68:1c:b8:53:dd:fa:f5:4c:ed:5b:2d:4e:d0:
c1:85:b7:96:14:42:21:85:06:79:75:3e:e4:26:f5:
b7:30:0b:34:13:5c:9c:26:ed:b2:01:3c:7e:44:4a:
f4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:68:8C:73:72:64:58:9E:E8:98:DF:60:45:44:BC:3D:F4:4D:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE076930560211F1BBE2CAE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.97.0-156.238.100.255
Signature Algorithm: sha256WithRSAEncryption
b1:9f:9b:cb:a4:47:c6:b6:1b:de:c6:0c:b0:85:9b:88:f0:75:
1b:05:55:cf:a3:95:15:f8:0e:cf:28:c0:5f:05:56:63:fb:94:
1a:36:26:5f:41:b1:f3:4e:d4:e2:f2:6a:b5:69:e2:87:7f:c5:
3c:62:a3:fb:d0:2f:31:be:0d:80:9a:46:92:85:67:7f:d7:17:
c1:e9:c1:3a:f2:5e:3b:2d:f5:40:73:66:91:31:9a:14:4e:cc:
4a:e2:8f:ce:f1:43:f1:48:9e:9e:ea:23:ca:8f:b2:20:8f:4d:
52:bd:57:c2:57:96:a3:da:f2:5d:4d:58:1e:c6:8f:87:ad:47:
80:ab:e6:77:c3:bf:5b:69:78:e6:89:c6:ad:a7:a0:4f:dc:74:
ea:53:e7:89:ef:e7:09:ec:83:60:08:a8:f0:71:35:f5:6a:d8:
4c:48:20:84:50:4e:22:83:5a:c9:23:21:f2:ef:85:94:5e:15:
83:c0:e4:de:12:94:fc:ca:5c:50:a7:88:82:67:d1:70:74:f6:
08:2b:ec:59:3a:7d:bd:8f:69:56:12:07:ee:cd:ec:0e:01:db:
5e:89:b2:fb:1c:44:ed:02:cf:c9:2c:6e:19:49:ad:67:67:db:
4e:6e:86:f9:87:1a:9a:02:56:87:3a:d5:e7:5b:f2:e1:1d:90:
d0:2c:49:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client