Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED1D43E0F2311F19A4212A3DAE4EC9C.roa
File: BED1D43E0F2311F19A4212A3DAE4EC9C.roa (raw, json)
Hash identifier: 9JAMlPRL8JI7dNfNbnrD/ADZUu8m6Qz4eC6s+g3l2r4=
Subject key identifier: 60:0C:BE:9D:41:EA:D7:2E:F3:0B:EA:5E:8E:88:AB:26:87:49:8B:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED1D43E0F2311F19A4212A3DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:49:22 +0000
ROA not before: Sat 21 Feb 2026 12:49:18 +0000
ROA not after: Sat 28 Mar 2026 12:49:18 +0000
asID: 44559
IP address blocks: 156.246.235.0/24 maxlen: 24
156.246.236.0/24 maxlen: 24
156.246.237.0/24 maxlen: 24
156.246.238.0/24 maxlen: 24
156.246.239.0/24 maxlen: 24
156.246.240.0/24 maxlen: 24
156.246.241.0/24 maxlen: 24
156.246.242.0/24 maxlen: 24
156.246.243.0/24 maxlen: 24
156.246.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106371 (0x19f83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:49:18 2026 GMT
Not After : Mar 28 12:49:18 2026 GMT
Subject: CN=6999a9d2-57dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:38:aa:9d:ce:1b:14:eb:27:6a:0f:62:80:2b:
11:58:e2:32:25:79:10:5b:42:85:42:e4:64:70:61:
c2:28:0b:c8:35:0a:34:bf:bd:28:aa:f6:40:db:05:
f1:37:2c:d3:eb:ea:59:e7:e0:86:b9:4d:dc:3e:f9:
47:e7:87:db:dd:24:0c:69:fb:92:0e:f7:37:5c:23:
38:8e:9d:d0:b9:e8:d3:b1:e3:84:4e:24:98:b3:0f:
89:bb:39:40:58:ee:5a:1c:19:7b:6d:a7:52:8f:ce:
18:7b:63:3c:ec:be:46:14:64:23:3d:aa:7b:52:9b:
57:d5:40:da:02:68:d5:cb:8e:c4:bb:e1:11:22:f6:
6b:2d:8d:f9:20:f7:71:67:d6:5b:ec:7f:6d:03:56:
33:06:4f:e4:8d:a5:44:05:7a:37:57:20:0f:4e:d0:
57:c1:81:0c:07:83:c5:90:37:33:7c:0a:13:94:dd:
47:84:fa:95:e7:26:1f:1b:0a:5c:f5:8c:1a:ad:c6:
60:c3:d6:c0:56:7c:07:06:2e:90:93:82:59:61:0c:
97:f8:62:31:ae:3e:1e:4b:d5:93:40:27:a0:fb:27:
08:6c:0e:ae:2d:79:53:34:01:67:71:6f:ef:a9:2d:
28:56:d0:ee:53:2b:65:9a:76:10:54:55:c7:e1:bc:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:0C:BE:9D:41:EA:D7:2E:F3:0B:EA:5E:8E:88:AB:26:87:49:8B:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED1D43E0F2311F19A4212A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.246.235.0-156.246.244.255
Signature Algorithm: sha256WithRSAEncryption
a7:70:34:17:25:24:5f:e3:4c:cb:ef:04:6f:9f:3d:ac:45:50:
4f:be:70:cc:b4:91:51:36:91:40:93:0a:ec:19:1a:98:55:d0:
75:24:cd:d5:db:ec:ef:ee:be:0e:35:e9:f9:49:ee:b4:f8:1e:
68:69:d2:29:07:db:d6:c2:e9:99:11:16:2a:be:cd:63:db:4d:
da:5b:f7:82:d4:3f:77:7e:6b:57:8d:76:a8:b6:77:29:24:bc:
5b:96:d5:bc:d3:c3:a3:02:6d:89:b0:be:34:5e:f6:60:a1:44:
f5:96:cf:30:b5:1f:53:31:6b:45:3e:9b:0a:e4:f1:24:63:e6:
82:46:0b:c6:87:bf:c6:98:96:71:d0:78:35:74:7b:d2:6c:5e:
7a:14:4a:88:73:cb:af:99:2d:ed:6a:38:36:d9:8f:b8:3b:60:
27:4c:01:33:c4:eb:eb:0e:52:5a:a5:4f:ec:72:94:3a:00:be:
ec:55:43:00:0b:57:61:32:a4:2f:25:f1:88:5b:19:ec:52:c1:
c5:fb:78:3e:c4:61:8e:e1:22:52:bb:09:6d:03:80:a6:5b:6d:
59:fc:fc:31:34:58:2b:3f:d4:18:cb:75:46:f4:f4:d9:d0:7e:
29:93:90:7d:fd:44:a0:e6:03:b0:8a:7f:7b:52:51:a3:27:93:
2a:07:ae:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:19 2026 by rpki-client