Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1BA8C0949E11F1B658B404CF1D38B0.roa
File: BE1BA8C0949E11F1B658B404CF1D38B0.roa (raw, json)
Hash identifier: /RirIqqcjuX3r+RLl5eF1P91VwaURFn4+av5vHE11PI=
Subject key identifier: 8E:D8:03:9B:52:53:07:7A:ED:4D:E9:AE:C7:18:8D:DD:9F:AC:32:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CB01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1BA8C0949E11F1B658B404CF1D38B0.roa
Signing time: Mon 10 Aug 2026 09:34:54 +0000
ROA not before: Mon 10 Aug 2026 09:34:50 +0000
ROA not after: Thu 17 Sep 2026 09:34:50 +0000
asID: 22773
IP address blocks: 156.233.252.0/24 maxlen: 24
156.242.19.0/24 maxlen: 24
156.242.231.0/24 maxlen: 24
156.242.232.0/24 maxlen: 24
156.242.233.0/24 maxlen: 24
156.242.234.0/24 maxlen: 24
156.242.235.0/24 maxlen: 24
156.242.236.0/24 maxlen: 24
156.242.237.0/24 maxlen: 24
156.242.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117505 (0x1cb01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 10 09:34:50 2026 GMT
Not After : Sep 17 09:34:50 2026 GMT
Subject: CN=6a799b3e-f12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:d0:f5:c3:46:af:51:ea:6c:0b:a1:47:36:
d5:60:13:db:c5:38:67:b2:71:df:ce:bb:2b:ca:de:
19:c7:6c:67:b8:fe:dc:81:91:ea:55:b1:d9:45:8f:
4d:b3:e4:84:85:a2:15:37:13:69:65:29:61:08:0d:
01:22:1b:cc:3a:2a:af:a1:fe:6a:c2:41:b7:d3:69:
2b:9c:49:3a:4a:f1:5c:70:7a:ba:91:05:55:40:7b:
d3:ce:db:b9:e8:2e:9d:ac:7d:be:0a:f4:79:68:31:
96:c9:54:80:61:19:13:14:f1:ec:29:ce:11:ab:c3:
14:63:5b:ec:97:b5:80:28:d9:a5:22:14:26:2c:9d:
ad:63:60:95:28:fe:76:de:2b:23:50:fb:29:16:3c:
58:cf:c8:50:6f:7b:d4:73:7e:a3:78:46:eb:ef:94:
17:92:53:18:c7:9c:e6:c7:a9:86:39:22:3f:11:15:
9f:a9:58:b2:39:17:86:46:35:4a:86:d5:a5:1d:24:
d1:09:f6:8e:41:b9:38:a1:47:10:89:fe:32:f6:ec:
8d:3f:07:2d:37:05:69:e8:d2:be:4d:80:8c:33:36:
f4:42:f0:bf:46:a4:49:bd:9f:47:7c:a6:f7:72:42:
c7:ee:b9:be:80:0f:e5:f5:65:3f:4f:ac:cf:32:0d:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D8:03:9B:52:53:07:7A:ED:4D:E9:AE:C7:18:8D:DD:9F:AC:32:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE1BA8C0949E11F1B658B404CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.252.0/24
156.242.19.0/24
156.242.231.0-156.242.238.255
Signature Algorithm: sha256WithRSAEncryption
76:05:0f:59:5a:5e:e0:66:3a:78:ae:38:42:2e:3d:45:b3:e0:
a4:46:aa:de:85:d9:bc:69:bb:89:d9:79:c3:1e:1d:8f:45:02:
e0:4e:80:e2:d0:47:64:15:a1:4d:41:49:2f:63:9b:61:0f:7e:
31:57:05:6b:01:d9:7a:be:f7:17:9e:e9:69:91:6c:8a:48:7c:
b2:32:ca:6c:28:7e:a0:60:bf:0a:e3:94:16:7a:b5:7a:96:b4:
9d:2b:e6:95:f6:42:4a:0c:5e:22:f9:39:8f:dd:2f:eb:8e:ca:
52:73:94:28:8e:27:e0:2b:86:41:d9:7b:c3:eb:1c:3f:5f:78:
aa:b7:d4:15:97:0a:ac:d6:59:b3:de:a5:e4:e3:b0:69:78:78:
c6:ca:61:0f:b9:c7:99:08:ed:9a:0d:2d:12:88:81:65:cb:cf:
48:02:25:5e:e4:3b:4f:43:84:50:fc:6f:e0:40:c5:69:07:ec:
ad:e6:61:95:e6:ec:16:01:e2:f9:d6:00:b7:51:ae:ed:62:4d:
12:1a:e3:db:96:5d:e0:fe:a4:10:60:8c:d7:e1:24:76:58:3b:
64:cd:6e:ba:53:82:50:1e:30:d5:46:11:3c:7b:28:b6:0f:27:
1c:08:f2:04:07:c7:06:56:7a:08:c9:b7:c9:16:d3:7e:ca:5e:
cc:55:21:69
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAcsBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEwMDkzNDUwWhcNMjYwOTE3MDkzNDUwWjAYMRYw
FAYDVQQDEw02YTc5OWIzZS1mMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtJXQ9cNGr1HqbAuhRzbVYBPbxThnsnHfzrsryt4Zx2xnuP7cgZHqVbHZ
RY9Ns+SEhaIVNxNpZSlhCA0BIhvMOiqvof5qwkG302krnEk6SvFccHq6kQVVQHvT
ztu56C6drH2+CvR5aDGWyVSAYRkTFPHsKc4Rq8MUY1vsl7WAKNmlIhQmLJ2tY2CV
KP523isjUPspFjxYz8hQb3vUc36jeEbr75QXklMYx5zmx6mGOSI/ERWfqViyOReG
RjVKhtWlHSTRCfaOQbk4oUcQif4y9uyNPwctNwVp6NK+TYCMMzb0QvC/RqRJvZ9H
fKb3ckLH7rm+gA/l9WU/T6zPMg1dmQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFI7Y
A5tSUwd67U3prscYjd2frDIBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTFCQThDMDk0OUUxMUYxQjY1OEI0MDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAnOn8AwQAnPITMAwDBACc8ucD
BACc8u4wDQYJKoZIhvcNAQELBQADggEBAHYFD1laXuBmOniuOEIuPUWz4KRGqt6F
2bxpu4nZecMeHY9FAuBOgOLQR2QVoU1BSS9jm2EPfjFXBWsB2Xq+9xee6WmRbIpI
fLIyymwofqBgvwrjlBZ6tXqWtJ0r5pX2QkoMXiL5OY/dL+uOylJzlCiOJ+ArhkHZ
e8PrHD9feKq31BWXCqzWWbPepeTjsGl4eMbKYQ+5x5kI7ZoNLRKIgWXLz0gCJV7k
O09DhFD8b+BAxWkH7K3mYZXm7BYB4vnWALdRru1iTRIa49uWXeD+pBBgjNfhJHZY
O2TNbrpTglAeMNVGETx7KLYPJxwI8gQHxwZWegjJt8kW037KXsxVIWk=
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:12 2026 by rpki-client