Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE806004698C11F1A40031B4CE1D38B0.roa
File: BE806004698C11F1A40031B4CE1D38B0.roa (raw, json)
Hash identifier: +S83TKfYUG4+bCheGxHAbrn1ccoTpK6MWF+f81NICRY=
Subject key identifier: F3:38:66:F7:65:C2:B0:19:3F:9E:5A:69:5F:ED:EE:D8:4C:91:31:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE806004698C11F1A40031B4CE1D38B0.roa
Signing time: Tue 16 Jun 2026 14:07:44 +0000
ROA not before: Tue 16 Jun 2026 14:07:39 +0000
ROA not after: Wed 22 Jul 2026 14:07:39 +0000
asID: 8796
IP address blocks: 156.233.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114208 (0x1be20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 14:07:39 2026 GMT
Not After : Jul 22 14:07:39 2026 GMT
Subject: CN=6a3158b0-df46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a3:f0:19:20:9d:c2:22:77:df:54:be:e5:07:
6c:36:68:58:51:08:f2:b7:79:47:8b:c0:01:ff:12:
8f:10:e4:46:dc:b2:30:50:1c:2a:52:22:a3:ea:e5:
43:3a:03:24:ec:c2:43:21:57:3d:5b:eb:19:43:c1:
59:9b:0c:21:75:e3:c0:65:0e:13:e6:ca:47:19:63:
72:f4:1d:90:64:eb:0a:58:90:dd:a2:49:95:62:ce:
a9:1f:50:14:f6:d5:1d:64:6b:eb:b5:47:12:ac:de:
0f:33:94:5a:a5:78:bf:d6:18:78:71:fd:57:12:4f:
4d:ca:db:25:76:6f:13:62:09:15:8e:b2:d0:bd:80:
60:19:29:78:51:26:42:ca:1f:01:cc:d5:8a:e1:ea:
09:9d:2a:a9:6d:c0:dd:bc:b0:07:da:a4:e8:9d:d8:
04:f2:c1:0a:43:e0:3d:a0:33:32:8d:18:f7:12:6a:
a0:97:c0:b0:f6:85:b9:0f:c3:cb:ff:7e:a7:ee:aa:
b1:f8:91:0a:5e:7e:4d:a8:aa:6d:14:e4:60:73:61:
6e:78:6f:8b:8d:ab:12:c2:10:a6:9b:53:fb:ff:b9:
9f:3d:a1:93:52:9b:9e:04:d3:37:d3:2f:1b:af:8f:
10:c0:3b:66:45:d0:32:19:c0:17:3d:ea:c5:d8:7c:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:38:66:F7:65:C2:B0:19:3F:9E:5A:69:5F:ED:EE:D8:4C:91:31:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE806004698C11F1A40031B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.233.224.0/20
Signature Algorithm: sha256WithRSAEncryption
09:4d:48:b2:51:f6:5d:1f:e5:d1:64:14:61:87:99:84:85:e2:
d5:d3:a9:9b:d2:a0:e4:ac:ed:19:49:eb:1b:c6:b6:33:af:36:
77:2b:4d:38:d5:81:ad:cf:f8:7a:b4:dd:6d:5d:ff:30:ec:f9:
5b:bf:f6:d2:8a:47:90:ec:92:96:a1:98:0c:84:18:74:11:c6:
f9:b2:f0:6a:4c:39:d4:d5:c2:53:a7:56:9a:ec:fc:0a:c2:ed:
80:5c:39:2f:84:de:e8:ac:d6:48:4c:d4:19:c2:c5:32:3f:52:
63:de:c8:d9:71:11:ba:6c:c3:e4:0d:d9:8e:2c:30:b3:eb:17:
9d:3b:a0:32:dc:57:52:a0:0e:a4:0e:07:c7:1b:12:08:c6:1a:
e8:57:4a:10:31:fd:07:7c:53:74:a8:1e:fe:75:5e:ee:7c:a9:
54:d4:64:b0:b6:9d:e1:a9:39:d4:ab:24:8f:dc:5c:aa:48:86:
a9:34:bd:85:ac:9f:fa:77:6c:8a:35:58:58:b8:0d:58:6c:f9:
f1:f9:d9:b6:1d:aa:d2:93:be:c4:44:24:83:46:cb:a4:d2:21:
94:4d:ed:d9:76:ce:a9:11:cb:31:ff:c7:a4:0e:da:56:af:d8:
e7:aa:c9:26:57:19:ac:3c:87:56:34:51:d9:34:60:c2:7d:ea:
ba:9b:4d:17
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAb4gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjE2MTQwNzM5WhcNMjYwNzIyMTQwNzM5WjAYMRYw
FAYDVQQDEw02YTMxNThiMC1kZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu6PwGSCdwiJ331S+5QdsNmhYUQjyt3lHi8AB/xKPEORG3LIwUBwqUiKj
6uVDOgMk7MJDIVc9W+sZQ8FZmwwhdePAZQ4T5spHGWNy9B2QZOsKWJDdokmVYs6p
H1AU9tUdZGvrtUcSrN4PM5RapXi/1hh4cf1XEk9Nytsldm8TYgkVjrLQvYBgGSl4
USZCyh8BzNWK4eoJnSqpbcDdvLAH2qTondgE8sEKQ+A9oDMyjRj3Emqgl8Cw9oW5
D8PL/36n7qqx+JEKXn5NqKptFORgc2FueG+LjasSwhCmm1P7/7mfPaGTUpueBNM3
0y8br48QwDtmRdAyGcAXPerF2HwcnwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPM4
ZvdlwrAZP55aaV/t7thMkTHAMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRTgwNjAwNDY5OEMxMUYxQTQwMDMxQjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQAJTUiyUfZdH+XRZBRhh5mEheLV06mb0qDkrO0ZSesbxrYzrzZ3K0041YGt
z/h6tN1tXf8w7Plbv/bSikeQ7JKWoZgMhBh0Ecb5svBqTDnU1cJTp1aa7PwKwu2A
XDkvhN7orNZITNQZwsUyP1Jj3sjZcRG6bMPkDdmOLDCz6xedO6Ay3FdSoA6kDgfH
GxIIxhroV0oQMf0HfFN0qB7+dV7ufKlU1GSwtp3hqTnUqySP3FyqSIapNL2FrJ/6
d2yKNVhYuA1YbPnx+dm2HarSk77ERCSDRsuk0iGUTe3Zds6pEcsx/8ekDtpWr9jn
qskmVxmsPIdWNFHZNGDCfeq6m00X
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:33 2026 by rpki-client