Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9AD27028E811F1A9683CD7DAE4EC9C.roa
File: BE9AD27028E811F1A9683CD7DAE4EC9C.roa (raw, json)
Hash identifier: O5s91JC5SkrA87j5G4ejlm/FVTAbljbUpHALj6MCbow=
Subject key identifier: 1D:2A:67:89:B6:62:EF:7F:69:80:F1:5C:A9:6B:0F:E0:7E:40:FA:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A766
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9AD27028E811F1A9683CD7DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 07:52:32 +0000
ROA not before: Thu 26 Mar 2026 07:52:27 +0000
ROA not after: Tue 05 May 2026 07:52:27 +0000
asID: 20326
IP address blocks: 156.246.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108390 (0x1a766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 07:52:27 2026 GMT
Not After : May 5 07:52:27 2026 GMT
Subject: CN=69c4e5c0-1d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:13:97:e0:12:fc:71:25:78:e8:5c:10:31:
0d:1b:d8:84:4b:eb:8c:ba:ac:26:6b:fd:44:25:cb:
57:a0:6d:12:39:2e:e4:d2:fe:a6:cb:34:d5:13:e3:
57:f2:67:c3:07:fb:08:7d:1a:09:8b:0f:cf:e6:61:
a8:7d:cc:13:67:a8:da:a5:89:9b:88:05:c6:0b:b8:
ec:19:46:34:46:b0:62:ad:16:65:80:f0:be:59:eb:
69:c5:59:6b:a5:e2:da:ee:85:ab:62:45:3f:bb:1a:
3e:0e:c0:8c:8e:e5:71:36:9f:9c:0b:36:07:15:7b:
f8:b1:d8:aa:03:12:e0:6a:e1:2e:32:6d:58:ed:07:
17:49:d9:32:d3:cf:94:70:8e:51:99:c2:d4:ba:a8:
b4:02:b6:ff:a5:45:45:1b:28:0b:35:cb:0c:0e:b0:
e7:94:82:9f:06:62:55:54:dc:a3:62:f8:7f:6b:a1:
23:2f:02:ef:4f:50:39:be:2b:cc:7a:26:a3:b7:a5:
c1:75:2d:53:33:72:02:eb:69:10:6f:08:dd:6e:20:
59:82:d4:7d:51:6c:ad:41:0f:5c:54:17:ac:af:b5:
ad:98:7a:ee:ea:64:ab:8c:7a:93:bc:5b:c5:d6:1b:
2e:56:20:51:4a:56:d2:82:1c:de:2d:6d:f9:a5:06:
42:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2A:67:89:B6:62:EF:7F:69:80:F1:5C:A9:6B:0F:E0:7E:40:FA:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9AD27028E811F1A9683CD7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:27:ac:01:b6:59:6e:f2:71:60:bf:9d:8b:aa:a8:fb:ca:bb:
f7:bf:d0:e3:72:04:98:2a:2c:05:d1:ed:3b:0e:be:1b:75:45:
0b:22:81:a9:a5:55:71:7d:95:56:77:52:7c:67:d0:28:4a:71:
07:bc:de:0b:c8:19:45:9e:af:ea:7c:26:c0:57:9d:a9:4e:db:
be:5a:91:40:4d:39:25:29:f6:13:8a:83:50:63:ac:5c:0d:1e:
56:bf:bd:cb:9e:c5:0e:0f:a5:ee:36:89:56:1f:2c:2d:d6:00:
eb:a1:28:ae:90:2e:78:b1:62:cb:55:1a:c4:8d:8c:95:2f:05:
24:1c:c5:44:4b:fa:08:a9:cb:7c:66:c6:69:fa:b4:88:dd:b4:
62:f4:70:15:18:90:22:97:05:f6:06:02:e8:ed:69:c3:53:0e:
8d:9b:6d:1a:14:47:28:83:29:df:03:84:94:b7:a3:9c:3c:e0:
63:ec:de:f1:7d:a0:d8:9c:ff:20:df:f9:7f:e4:39:f0:7d:78:
b9:35:44:66:43:58:1a:a8:33:17:26:d3:1e:e2:59:c2:0b:c3:
f3:38:9a:ce:f3:da:6c:16:a6:cf:45:ed:24:6b:c1:48:d9:29:
0f:64:9c:f1:20:c7:d6:96:e8:c9:ff:df:b1:55:3b:70:0b:c5:
f7:ca:20:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:19 2026 by rpki-client