Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC1FB080EF511F1A059558FDAE4EC9C.roa
File: BBC1FB080EF511F1A059558FDAE4EC9C.roa (raw, json)
Hash identifier: VM6k2IdhPegtK3rMRrTChjnncEimmuRggpMjCAIR7wg=
Subject key identifier: 27:7F:70:FA:78:A5:22:24:D1:88:C0:93:B5:2A:03:FD:3E:5D:3F:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC1FB080EF511F1A059558FDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 07:20:01 +0000
ROA not before: Sat 21 Feb 2026 07:19:57 +0000
ROA not after: Mon 23 Mar 2026 07:19:57 +0000
asID: 138648
IP address blocks: 156.247.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106264 (0x19f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 07:19:57 2026 GMT
Not After : Mar 23 07:19:57 2026 GMT
Subject: CN=69995ca1-ac33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:ee:b5:99:53:da:dc:51:8d:ba:9c:03:4a:
eb:81:39:c9:09:65:3a:f5:d4:07:b8:4e:91:87:bc:
85:76:ca:09:48:17:20:1b:6f:90:9c:cc:c0:3d:0d:
b0:53:47:04:15:f7:2a:c3:b0:ff:11:1b:3d:38:fb:
f7:a0:ad:0b:95:24:5a:fb:e1:45:7f:97:aa:96:cb:
92:14:c4:29:ad:7e:f6:eb:24:fd:18:7a:9b:e5:c2:
fe:84:b5:c6:97:30:5a:a3:6f:bc:11:0c:33:4e:c0:
60:a9:23:a2:d3:27:e4:72:eb:0a:f6:23:e2:35:3e:
a7:7e:7a:1a:67:58:18:41:f0:66:82:be:92:cb:33:
ae:da:5b:b9:b0:40:2d:1d:c8:7a:1d:eb:b5:2d:00:
98:a6:b0:f8:a5:2d:27:57:b8:e9:82:9c:31:1a:61:
21:74:bf:b6:b4:00:8c:bf:f4:88:f7:a7:2d:30:b8:
74:58:53:86:a7:3d:90:4d:e4:bb:f7:d3:4f:55:a5:
bf:d8:93:47:5f:f7:b7:10:e1:7c:85:c0:f4:6c:1c:
d2:c0:e3:4d:ab:83:1c:33:64:b6:8f:11:08:f7:c3:
7c:6f:1d:b6:7e:20:1e:94:cf:42:c5:0f:52:12:a0:
58:62:e5:f7:d5:25:57:e2:95:6d:10:89:65:68:6b:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:70:FA:78:A5:22:24:D1:88:C0:93:B5:2A:03:FD:3E:5D:3F:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BBC1FB080EF511F1A059558FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.247.62.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:bb:4b:fe:07:7d:17:a5:c2:86:33:10:80:e7:d7:17:c7:e8:
d6:3e:41:7b:e1:82:d8:1c:ab:98:93:aa:e8:ee:d0:bc:aa:39:
44:c1:c8:d0:bb:7b:98:f9:55:6b:5e:e6:85:5a:dd:7a:9c:96:
60:04:50:83:f6:16:94:d4:a4:6f:69:21:f2:cd:30:68:6d:a4:
93:4f:ab:d6:f3:18:ae:41:4c:53:93:b6:63:5e:1e:05:06:f1:
c8:c5:27:42:79:4b:b1:91:8e:22:ba:6a:01:3d:d5:fb:ac:fc:
ac:48:09:69:31:47:d9:8a:03:1d:dc:cc:e5:fd:f3:97:b4:8f:
89:4b:3f:89:ba:08:c2:ec:a0:94:72:3b:af:19:04:61:a8:e8:
f9:ef:8d:b1:8b:0c:1a:7a:5c:28:62:bd:08:57:9c:b4:72:25:
a8:17:f4:49:83:e8:cd:ae:db:7b:fe:1c:95:64:56:98:cc:60:
e4:35:eb:93:b5:b5:6a:98:3f:e7:14:d7:ad:7d:ed:f7:b4:a5:
fe:91:6d:81:ed:07:4a:d4:30:3a:9a:d8:8c:61:f3:d5:3c:70:
80:df:4c:b5:7f:a2:aa:2c:e1:68:30:de:c4:af:55:64:79:4a:
7d:9e:d0:89:48:9c:14:f2:e9:01:73:4a:07:c2:80:a3:2a:3b:
1c:77:38:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:05:36 2026 by rpki-client