Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0970EA6A5711F1A63F3008CF1D38B0.roa
File: BE0970EA6A5711F1A63F3008CF1D38B0.roa (raw, json)
Hash identifier: 0fn/iCOXQP1rWbxp4cLs/DCCcWHrfmUy+phTtHQYdAA=
Subject key identifier: 68:0D:6E:86:54:C5:13:3C:15:E0:E6:08:5C:D3:78:77:BD:EC:17:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0970EA6A5711F1A63F3008CF1D38B0.roa
Signing time: Wed 17 Jun 2026 14:20:51 +0000
ROA not before: Wed 17 Jun 2026 14:20:45 +0000
ROA not after: Sun 13 Sep 2026 14:20:45 +0000
asID: 139880
IP address blocks: 156.249.224.0/20 maxlen: 24
156.253.32.0/20 maxlen: 24
156.253.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114372 (0x1bec4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 14:20:45 2026 GMT
Not After : Sep 13 14:20:45 2026 GMT
Subject: CN=6a32ad43-c771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:41:ff:37:ec:ac:50:fa:04:68:9d:5f:e7:
1b:aa:ae:dc:e5:c1:1f:e2:f2:28:3c:d3:75:c7:b3:
c1:b3:e9:7d:09:01:bd:da:49:b8:ba:ac:c2:d3:32:
37:2e:06:2d:04:9d:35:07:ae:83:58:74:6d:cc:38:
19:42:14:ea:86:37:27:b1:19:1e:bf:7d:da:c2:02:
0c:ed:b2:04:05:14:09:2b:e4:53:cc:8f:7c:b2:9f:
38:c6:19:b8:d7:a2:5d:85:76:d0:96:96:03:9b:39:
73:f4:5b:59:82:c9:69:ec:dc:aa:24:7d:e4:6a:bb:
d4:73:e6:44:c8:3f:d8:a5:f4:7b:2e:82:25:3b:61:
e8:1d:f4:74:71:df:66:8a:d7:c5:8a:5d:90:e8:8f:
d3:69:d4:6a:a9:ab:d7:05:fc:47:31:15:b6:0a:5d:
a9:c3:d8:67:8d:cc:49:de:0f:49:a5:3c:90:12:4b:
d5:1e:dd:58:6e:07:a2:9a:b7:4a:a4:d0:ef:86:8d:
b6:af:fc:3a:d9:11:1f:c4:64:f4:89:a1:14:03:df:
69:06:11:f3:53:22:b3:ce:94:30:e6:41:a1:30:eb:
43:61:60:3e:bc:bd:59:b5:55:85:b2:86:22:2d:76:
76:68:a4:e8:f6:44:cc:c4:54:d4:ec:8d:b8:bc:3d:
c9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0D:6E:86:54:C5:13:3C:15:E0:E6:08:5C:D3:78:77:BD:EC:17:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE0970EA6A5711F1A63F3008CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.249.224.0/20
156.253.32.0/20
156.253.144.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:03:7b:a5:36:76:65:6d:b6:b2:b3:af:73:7a:47:c9:39:c7:
ba:28:1c:11:c7:c5:ca:3e:db:de:7b:67:48:85:af:0c:91:62:
3e:20:00:a2:58:19:f3:b7:06:57:a4:0c:b6:64:1f:ef:24:de:
e4:e8:06:ad:a2:b2:1a:29:7b:20:87:06:a4:25:36:bd:de:92:
42:9e:4f:75:84:c7:94:35:fe:e2:7a:69:c9:34:50:c4:87:5a:
08:cb:d1:49:7d:64:93:b0:7d:14:85:b5:e7:87:c4:12:0f:c0:
36:85:53:9c:ef:94:4b:97:67:80:6b:e2:22:4d:76:31:47:6a:
d9:bf:f6:24:c7:90:c7:3e:58:f2:08:c4:6e:ea:3d:2c:7c:86:
56:11:4c:1f:e3:7a:cb:cc:17:71:06:ee:55:70:f7:d2:2e:f1:
98:73:44:7a:4b:d7:a3:d9:65:73:23:a3:6a:37:43:3f:cb:45:
ba:15:6b:b0:6b:63:ea:27:6a:1e:5e:51:9e:12:99:a5:f4:8c:
a2:3a:94:90:1f:24:e1:d3:90:6e:d6:c5:1b:d2:17:e0:37:04:
e9:c7:e8:40:32:73:45:53:1f:33:54:97:d1:25:6e:69:27:56:
bb:3c:52:96:bc:18:09:89:3a:1d:9f:47:a4:0d:89:aa:a7:0a:
b2:a2:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client