Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC6A78F4113511F1906378DEDAE4EC9C.roa
File: BC6A78F4113511F1906378DEDAE4EC9C.roa (raw, json)
Hash identifier: zxGJVQwltq59WeWVQe/kKC/pCXRPEO3jzS6lDNIxAOg=
Subject key identifier: 91:2E:3F:E6:F3:69:B5:73:7C:06:5F:63:FE:0B:B8:78:FF:EA:9C:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC6A78F4113511F1906378DEDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 04:03:12 +0000
ROA not before: Tue 24 Feb 2026 04:03:07 +0000
ROA not after: Tue 03 Mar 2026 04:03:07 +0000
asID: 137443
IP address blocks: 156.236.96.0/24 maxlen: 24
156.236.97.0/24 maxlen: 24
156.236.98.0/24 maxlen: 24
156.236.99.0/24 maxlen: 24
156.236.108.0/24 maxlen: 24
156.236.109.0/24 maxlen: 24
156.236.110.0/24 maxlen: 24
156.236.111.0/24 maxlen: 24
156.236.112.0/24 maxlen: 24
156.236.113.0/24 maxlen: 24
156.236.114.0/24 maxlen: 24
156.236.115.0/24 maxlen: 24
156.236.116.0/24 maxlen: 24
156.236.117.0/24 maxlen: 24
156.236.118.0/24 maxlen: 24
156.236.119.0/24 maxlen: 24
156.236.124.0/24 maxlen: 24
156.236.125.0/24 maxlen: 24
156.236.126.0/24 maxlen: 24
156.236.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 04:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106495 (0x19fff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 04:03:07 2026 GMT
Not After : Mar 3 04:03:07 2026 GMT
Subject: CN=699d2300-0425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:85:d8:25:97:8a:72:12:00:0a:63:6a:17:
32:df:55:64:6b:b0:ac:00:37:a9:74:89:a4:2f:0e:
7b:2b:68:19:81:23:a0:58:e9:1b:af:28:49:07:a2:
a0:89:0c:1a:dd:b7:80:5b:a7:50:5c:74:20:9e:63:
31:33:d3:74:5f:8e:c6:e1:4a:7d:69:a3:0b:fc:9a:
73:75:c5:5b:55:03:bf:59:39:83:3f:a4:9f:d2:3d:
a3:91:03:c1:10:4e:9c:52:0d:24:00:6b:60:e5:7d:
17:77:2f:81:f5:f1:dc:b6:bd:6a:ce:c4:72:96:11:
c6:05:d3:75:db:dc:06:ee:b0:0e:17:7f:d1:2b:59:
53:64:c5:09:54:87:5d:d4:35:28:5d:dd:36:05:e0:
9c:4e:1c:65:db:be:dc:be:fa:05:c2:9d:cc:8c:ee:
34:c9:0a:fc:d2:bc:a9:3f:cf:c2:79:28:32:ab:a2:
08:3f:ed:6f:66:17:96:ee:93:98:ab:18:ad:47:2c:
67:e0:c6:0e:d1:6c:e7:2a:14:33:0f:9d:f6:20:74:
10:8c:ae:c5:eb:d5:33:21:27:b2:95:59:4e:5b:28:
ef:e7:23:51:9f:b2:c1:df:bf:62:02:b4:b4:9a:1d:
24:6e:af:9a:cf:b8:05:da:7c:b9:67:12:90:25:0f:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:3F:E6:F3:69:B5:73:7C:06:5F:63:FE:0B:B8:78:FF:EA:9C:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC6A78F4113511F1906378DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.236.96.0/22
156.236.108.0-156.236.119.255
156.236.124.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:40:22:b3:d0:ba:86:f4:fd:14:81:79:1b:da:65:10:db:bf:
57:81:24:06:2b:d5:20:ce:72:99:ac:f1:a1:41:36:df:ea:9f:
c1:53:cf:b9:30:1b:42:33:7a:ac:7e:4b:38:d8:34:1a:64:ac:
11:5f:61:06:48:1b:3c:c1:6c:fb:3a:cf:aa:d4:c3:bc:29:fc:
64:62:61:e6:7e:d4:3e:f4:f4:51:14:35:6d:73:0f:14:b4:b9:
6b:87:67:82:6f:d5:24:eb:7d:ca:02:9b:e8:ab:e8:df:57:5d:
2b:7c:eb:05:80:ac:6b:c2:73:ac:b1:5a:0a:fa:aa:51:b2:2b:
46:63:6b:c7:2b:bb:8c:52:a7:04:47:e8:14:62:30:2c:81:56:
e8:5f:94:ff:67:d2:3d:28:17:fb:02:dd:49:da:e2:ce:38:28:
cd:8a:3f:ca:7b:22:cf:c5:52:36:b8:81:a9:69:0e:bd:d6:19:
a2:9e:e6:8b:a5:56:b9:de:1c:22:9c:65:4a:e0:4a:43:21:9f:
a8:bd:84:0a:c2:cc:ab:1b:9d:aa:44:e2:4d:5e:ef:48:e8:33:
f4:c9:4f:b6:be:05:f7:f4:f5:48:1f:86:ff:8c:a5:a3:4b:eb:
7f:6f:46:3f:c8:34:3f:1d:76:51:b4:bb:1e:3d:48:be:6e:57:
de:2a:3d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:46:22 2026 by rpki-client