Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC5F01EC2AAB11F1BC5D5695DAE4EC9C.roa
File: BC5F01EC2AAB11F1BC5D5695DAE4EC9C.roa (raw, json)
Hash identifier: Ni/VAfFvxSSjGXuBiScPqayRuIwNKrGbQobNq24Kr2g=
Subject key identifier: 85:41:DF:0A:6E:4B:8E:76:E1:D4:A3:08:C8:56:2D:14:67:64:D0:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A80B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC5F01EC2AAB11F1BC5D5695DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 13:40:52 +0000
ROA not before: Sat 28 Mar 2026 13:40:47 +0000
ROA not after: Fri 22 May 2026 13:40:47 +0000
asID: 40779
IP address blocks: 156.225.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108555 (0x1a80b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 13:40:47 2026 GMT
Not After : May 22 13:40:47 2026 GMT
Subject: CN=69c7da64-6bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:73:cc:e0:bc:ff:4d:79:bd:90:4a:06:98:
af:6a:0f:7e:da:6e:d5:0c:96:4f:a3:f2:f7:a0:b0:
5b:1a:bb:68:ae:6e:aa:75:51:ea:5d:86:5d:f6:a7:
9d:e1:61:d4:b8:07:8c:eb:05:3d:91:db:89:8c:69:
e2:34:86:38:d1:49:aa:ae:0b:09:6a:8d:3b:2e:28:
5b:cb:76:c7:38:05:7c:8b:12:ae:86:e2:c5:36:2c:
a6:ed:fb:9a:e3:12:e7:f4:c6:6d:59:f7:98:1a:ff:
c3:46:77:d7:d9:ce:e7:9f:ad:3f:a2:bb:6c:4f:9f:
e9:d0:67:57:27:ca:84:46:3f:5c:62:9f:87:ca:ea:
f2:8a:c7:95:f5:83:58:3e:59:cb:ff:e5:a9:68:7a:
1e:e9:f2:ee:cb:bc:1a:78:e2:e7:06:3d:20:db:b3:
d2:53:81:fe:eb:0c:c3:15:e2:f1:f8:50:70:50:fe:
57:45:9b:fa:73:ea:82:77:e4:ce:01:26:fd:fe:9a:
94:70:9c:54:3a:f9:8f:0a:e2:7e:38:c2:a7:fe:18:
1f:7e:61:24:3e:58:f6:98:77:a7:02:80:cf:40:82:
1b:23:61:88:a6:12:74:98:c4:b6:57:73:31:de:08:
a7:1d:20:09:3b:06:1d:a6:46:d2:62:75:9c:74:02:
d3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:DF:0A:6E:4B:8E:76:E1:D4:A3:08:C8:56:2D:14:67:64:D0:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC5F01EC2AAB11F1BC5D5695DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.225.16.0/20
Signature Algorithm: sha256WithRSAEncryption
34:00:f1:7b:1d:6c:a6:94:95:e9:e4:52:e1:7f:df:b8:2a:c1:
35:63:8d:f0:a3:97:8c:8d:d6:a2:22:af:09:5f:dc:ab:92:b0:
95:be:df:b9:53:f4:f5:8d:cb:58:ef:d2:f3:84:86:12:bf:ef:
ed:d8:0a:c4:c5:ba:83:91:44:89:2f:d3:a5:86:f1:dc:0e:ef:
c8:86:86:0f:5f:9e:11:58:87:9f:02:11:1f:2d:03:b4:1e:d4:
fb:7c:65:17:82:4b:63:02:bc:ea:be:dd:d0:a4:36:f5:f8:82:
04:33:f7:d7:13:81:63:7f:9e:e6:81:a2:18:06:5f:a4:bd:00:
8e:af:12:b8:41:28:20:97:d2:bd:b1:db:a2:94:1e:97:a9:83:
5a:e7:89:e9:5d:83:c6:62:aa:ea:cb:b8:f9:8f:e7:d1:8f:33:
98:7a:04:aa:87:18:91:2c:f6:44:f9:ec:a5:24:d3:fa:b6:d2:
39:6e:27:a6:dc:4f:fd:ba:ac:f2:9c:84:f3:94:ed:64:35:63:
77:7e:bc:d9:0f:95:ac:ac:e0:eb:c9:32:8f:35:1d:fb:b1:2c:
61:c4:76:d8:f8:da:1c:68:ed:e9:a8:00:cb:60:e8:e8:e4:ae:
bf:a2:f2:2a:00:c0:23:63:b8:dc:53:0c:b4:61:93:69:99:a7:
33:b4:b9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:53 2026 by rpki-client