Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE21DBC8816611F18E1414F7CE1D38B0.roa
File: BE21DBC8816611F18E1414F7CE1D38B0.roa (raw, json)
Hash identifier: acgg8sfKukn1mX0I6eIYoZKjLGABJeC+ZKBJmXb/CVc=
Subject key identifier: 12:A6:D4:F2:DF:00:2F:07:23:6E:02:7B:71:D6:02:0D:8A:0B:8D:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C582
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE21DBC8816611F18E1414F7CE1D38B0.roa
Signing time: Thu 16 Jul 2026 22:36:10 +0000
ROA not before: Thu 16 Jul 2026 22:36:06 +0000
ROA not after: Thu 20 Aug 2026 22:36:06 +0000
asID: 55933
IP address blocks: 156.254.6.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116098 (0x1c582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 22:36:06 2026 GMT
Not After : Aug 20 22:36:06 2026 GMT
Subject: CN=6a595cda-e4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:29:53:e3:73:3e:0b:e6:37:71:6e:cb:05:
de:11:0d:ce:96:72:7b:6d:bc:e3:9a:cc:45:9b:c9:
db:19:f8:37:30:fd:90:10:30:c3:20:88:bf:d8:c5:
91:2f:9e:e4:92:62:07:d0:75:28:1e:5d:4e:14:9c:
bf:f1:03:fa:ad:f1:cb:5c:7f:3d:21:38:40:fd:60:
5c:78:8f:07:a6:c5:8a:cc:1f:13:c5:53:95:13:94:
95:85:9f:91:82:73:0f:03:fb:8e:46:29:1c:af:2d:
3a:ce:20:ef:9c:dc:52:73:79:f3:ac:ea:f5:86:d0:
9e:d8:f4:a5:4f:78:65:6a:9f:25:8e:91:94:34:12:
d7:32:f4:ab:4b:d1:74:14:8b:c3:cd:1f:b8:ae:9d:
ea:ac:77:13:1a:90:58:ec:a0:ac:f4:f7:0e:7c:d1:
25:bc:c4:4a:a7:00:fb:62:d1:9a:2b:e9:de:85:54:
a7:5d:76:53:06:1e:86:09:89:b2:67:17:bb:79:f6:
03:e6:3d:d0:ed:f6:aa:14:47:0f:83:42:16:53:9b:
55:87:49:f0:6b:11:3b:14:3d:10:94:c6:c4:f4:af:
c1:19:7a:6a:03:5c:61:89:84:08:9b:f9:b6:de:e2:
68:95:c8:08:80:47:30:18:5e:2e:3e:36:eb:28:46:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A6:D4:F2:DF:00:2F:07:23:6E:02:7B:71:D6:02:0D:8A:0B:8D:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE21DBC8816611F18E1414F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.254.6.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e3:6f:21:f4:c0:26:29:75:fe:38:1a:06:ec:f6:fd:f0:18:
50:f1:a2:ff:e3:0c:4e:0e:33:49:87:96:c4:e1:b1:91:a6:9b:
02:95:ae:f9:dc:53:06:e5:a0:80:c7:24:5f:a6:30:0d:cf:a3:
25:bc:21:5b:e6:c9:2b:9c:b0:83:10:fe:d6:64:47:dd:19:88:
c5:9e:2e:14:2f:32:b6:e1:68:57:3c:b6:38:a5:e6:dc:07:9a:
5d:7f:64:7e:ff:3e:a4:08:23:1a:08:c2:66:2b:c9:dc:27:ec:
c1:9b:ef:90:e3:32:80:dd:8e:a5:37:7b:f8:a9:dd:20:52:f9:
69:ff:bc:08:3e:e4:bc:8e:82:1a:a2:b0:aa:d7:af:b7:04:09:
67:b1:ba:60:fb:76:94:63:35:07:ee:2a:a4:3e:39:13:1c:76:
e1:bb:0d:bf:e9:25:06:f8:ea:ea:11:96:45:ef:47:fa:67:5f:
13:f8:93:df:1e:5f:6c:91:fe:36:dd:d5:86:ff:2e:1d:09:70:
07:c4:0f:0c:e8:0c:d1:13:6a:5f:54:4e:47:47:a3:f1:50:dd:
ff:c9:11:bb:d3:8e:d1:0b:fa:8f:77:6e:86:57:87:b5:01:82:
90:d4:b3:8e:29:08:c1:4e:ce:51:b4:d5:56:32:94:f1:73:85:
01:0f:ce:8c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcWCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE2MjIzNjA2WhcNMjYwODIwMjIzNjA2WjAYMRYw
FAYDVQQDEw02YTU5NWNkYS1lNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA61spU+NzPgvmN3FuywXeEQ3OlnJ7bbzjmsxFm8nbGfg3MP2QEDDDIIi/
2MWRL57kkmIH0HUoHl1OFJy/8QP6rfHLXH89IThA/WBceI8HpsWKzB8TxVOVE5SV
hZ+RgnMPA/uORikcry06ziDvnNxSc3nzrOr1htCe2PSlT3hlap8ljpGUNBLXMvSr
S9F0FIvDzR+4rp3qrHcTGpBY7KCs9PcOfNElvMRKpwD7YtGaK+nehVSnXXZTBh6G
CYmyZxe7efYD5j3Q7faqFEcPg0IWU5tVh0nwaxE7FD0QlMbE9K/BGXpqA1xhiYQI
m/m23uJolcgIgEcwGF4uPjbrKEbeGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBKm
1PLfAC8HI24Ce3HWAg2KC40wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTIxREJDODgxNjYxMUYxOEUxNDE0RjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnP4GMA0GCSqGSIb3DQEBCwUA
A4IBAQBF428h9MAmKXX+OBoG7Pb98BhQ8aL/4wxODjNJh5bE4bGRppsCla753FMG
5aCAxyRfpjANz6MlvCFb5skrnLCDEP7WZEfdGYjFni4ULzK24WhXPLY4pebcB5pd
f2R+/z6kCCMaCMJmK8ncJ+zBm++Q4zKA3Y6lN3v4qd0gUvlp/7wIPuS8joIaorCq
16+3BAlnsbpg+3aUYzUH7iqkPjkTHHbhuw2/6SUG+OrqEZZF70f6Z18T+JPfHl9s
kf423dWG/y4dCXAHxA8M6AzRE2pfVE5HR6PxUN3/yRG7047RC/qPd26GV4e1AYKQ
1LOOKQjBTs5RtNVWMpTxc4UBD86M
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:13 2026 by rpki-client