Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF83E5465A6611F1819679ABCE1D38B0.roa
File: BF83E5465A6611F1819679ABCE1D38B0.roa (raw, json)
Hash identifier: b8Qfby7sswOvMsmmfNL8US0+e2GdeGoxjtks+JVkIxA=
Subject key identifier: 3B:60:25:88:6E:F8:DA:13:E2:2C:A1:67:A2:E4:5D:2B:B9:16:E4:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF83E5465A6611F1819679ABCE1D38B0.roa
Signing time: Thu 28 May 2026 07:27:57 +0000
ROA not before: Thu 28 May 2026 07:27:53 +0000
ROA not after: Sat 06 Jun 2026 07:27:53 +0000
asID: 9294
IP address blocks: 156.236.32.0/19 maxlen: 24
156.244.224.0/19 maxlen: 24
156.250.32.0/19 maxlen: 24
156.252.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113238 (0x1ba56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 07:27:53 2026 GMT
Not After : Jun 6 07:27:53 2026 GMT
Subject: CN=6a17ee7d-3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:23:49:da:cc:40:e1:17:82:8e:28:34:3d:41:
f1:d3:6c:c7:af:e4:83:b2:9b:89:d7:c1:5d:cf:08:
41:c7:96:62:1b:cc:d3:37:91:1d:30:2c:7e:37:b1:
e3:f0:44:aa:16:02:53:a8:14:43:6c:0f:f9:bd:92:
d0:79:fb:81:d4:43:2f:11:cf:0b:f6:60:d5:25:bd:
71:e8:69:b5:fe:78:b1:9d:0b:ab:6b:b7:dc:f3:ad:
d3:74:fa:92:aa:f5:ed:3c:7f:8b:50:c1:89:82:52:
bc:7f:76:7c:ff:11:58:04:45:84:3b:9c:dc:3e:7a:
84:64:a9:bd:60:9f:9b:3a:71:3e:2c:9d:f3:51:29:
7a:5e:d7:b7:04:3b:9e:89:25:e6:b6:7b:c6:ca:38:
0f:ba:e9:e7:6f:a4:67:5e:e8:0a:32:29:13:b8:21:
59:bb:e6:e9:fd:06:02:8f:78:4f:04:23:9a:de:f3:
df:25:51:54:23:48:39:bb:dc:da:f2:b4:27:58:88:
8f:82:64:82:a3:a1:77:23:70:13:c9:f8:4b:73:de:
35:39:26:02:97:d5:2b:53:e4:71:de:a7:56:39:cf:
8f:ed:db:b6:2c:70:59:bf:3d:e6:e1:11:d5:14:5a:
c2:ee:89:22:53:a5:4b:1f:9a:b3:4e:25:49:2f:07:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:60:25:88:6E:F8:DA:13:E2:2C:A1:67:A2:E4:5D:2B:B9:16:E4:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF83E5465A6611F1819679ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.32.0/19
156.244.224.0/19
156.250.32.0/19
156.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:1a:08:dd:0e:4b:02:79:f4:0a:c7:70:d4:c7:c4:51:15:3e:
3c:3d:49:3c:4b:53:84:af:9e:44:7e:29:90:cd:b0:58:32:12:
27:52:a4:16:3d:fa:a5:36:c6:78:cb:38:12:4d:22:27:c5:cc:
dc:0b:03:6e:02:e9:a1:3e:a9:43:36:f8:cf:ef:23:c4:69:d5:
71:2e:40:bb:5d:dc:97:f5:89:26:e3:6e:a9:93:eb:f7:8b:68:
ea:1c:08:12:b8:40:4e:0f:d6:55:95:9e:a3:97:f0:6d:68:df:
11:1c:aa:b5:b2:28:f2:3a:fc:35:ee:68:5e:2a:ab:ea:b9:f7:
23:4e:61:d5:1f:cf:5c:9d:7e:cf:ae:b6:c6:a2:a8:d0:89:1f:
51:4e:8a:b3:11:5e:58:bf:a7:83:7e:40:6e:73:a5:a1:97:86:
d3:b3:ed:76:c7:3a:e3:21:25:39:8e:48:6a:8b:5c:62:35:33:
54:9e:cf:7f:4b:c1:f0:1a:7d:df:cb:32:b1:84:b0:62:73:47:
ba:44:dd:24:3d:c3:37:d1:2f:92:3c:c6:1c:8a:d8:30:19:96:
98:a6:10:f5:39:e1:fd:89:fb:1c:6f:04:63:6a:45:87:ba:d7:
90:23:ec:06:88:c2:e9:b4:17:e3:9b:64:89:12:4a:7c:4a:4b:
ef:c7:43:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:30 2026 by rpki-client