Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6D6DC340811F1B159CBD7CE1D38B0.roa
File: BFC6D6DC340811F1B159CBD7CE1D38B0.roa (raw, json)
Hash identifier: me+QkcLX5O8IGhalIA4kV+4hTPsiF3hQdRKdKj/1AYM=
Subject key identifier: A0:B8:28:28:C3:9D:56:01:18:6B:35:BB:28:00:F7:18:0E:F7:31:F6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6D6DC340811F1B159CBD7CE1D38B0.roa
Signing time: Thu 09 Apr 2026 11:39:21 +0000
ROA not before: Thu 09 Apr 2026 11:39:16 +0000
ROA not after: Fri 01 May 2026 11:39:16 +0000
asID: 32043
IP address blocks: 156.230.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109391 (0x1ab4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 11:39:16 2026 GMT
Not After : May 1 11:39:16 2026 GMT
Subject: CN=69d78fe9-44f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:73:6f:a8:3c:e8:26:7a:52:04:48:f4:d8:12:
cd:09:07:00:2a:df:bd:13:ec:16:37:18:2d:98:77:
98:e9:e1:48:89:b8:25:3a:cc:40:68:41:30:7c:50:
b7:ba:85:a1:68:70:f0:e0:ce:d4:4e:b1:18:c4:6e:
c8:9a:79:62:83:8d:0d:6b:3d:ec:a2:99:e1:0f:20:
a2:11:43:59:01:f5:93:8d:fe:15:19:ab:83:c4:0f:
ba:9f:6a:0b:c4:ba:ad:e6:ac:50:15:5a:97:9e:82:
db:d7:71:12:c3:52:52:dc:e6:dc:cc:77:01:8b:d3:
1a:93:90:41:33:43:75:ed:6a:56:85:89:10:84:fd:
f3:56:e9:9c:c5:00:ee:88:bc:e9:92:03:7f:89:5d:
ca:31:8f:7d:50:f6:dc:22:86:1f:9d:34:f0:d3:0e:
98:a7:32:f7:1d:f4:46:b1:bb:db:37:9b:f2:ed:9a:
6a:20:b9:d3:e5:f3:f0:71:67:0a:da:dd:3b:0e:bf:
9b:a8:6a:3a:74:ae:7f:69:8f:ae:b7:8a:02:33:56:
52:67:69:19:b0:b0:1f:89:45:c3:3a:28:29:5f:d0:
6a:25:52:16:f7:14:ff:65:3f:0e:0b:37:66:3f:56:
4c:01:5c:26:8e:f0:79:9a:12:f1:dc:fd:70:1f:df:
66:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:28:28:C3:9D:56:01:18:6B:35:BB:28:00:F7:18:0E:F7:31:F6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFC6D6DC340811F1B159CBD7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.230.159.0/24
Signature Algorithm: sha256WithRSAEncryption
11:39:d6:e3:4b:53:08:c4:72:69:ab:8d:67:b1:d7:60:2a:b9:
ea:4b:df:9b:6c:cb:4d:d2:46:95:7b:54:9c:61:28:f6:5a:81:
f5:aa:f0:0d:32:0e:34:2e:b0:55:d9:a5:4a:8c:18:ab:cc:f4:
c6:4f:36:a6:04:57:4a:b5:43:a7:41:6e:7e:3d:2a:22:53:f5:
66:e4:c1:3d:c2:a1:4f:41:c6:bf:41:ac:e7:a3:ce:dc:a8:1b:
ea:51:7f:e3:f6:7e:4c:d1:0c:2c:4e:af:68:8f:7b:76:1d:4f:
1a:f0:c8:3f:fc:3d:e6:d1:25:f4:a0:89:c7:a1:16:e4:09:4a:
0f:da:d8:76:c4:01:b6:29:a3:d4:4c:d3:06:50:0f:61:14:88:
f6:de:a9:ff:ba:99:f9:4b:da:a9:c8:0a:ad:40:84:4e:fc:75:
ea:a3:18:44:3f:dd:17:b2:76:8b:82:ae:49:17:92:48:3c:1e:
98:a8:ad:25:b8:d2:96:ec:6a:08:a4:1d:a4:6a:b1:1b:50:17:
d1:67:75:3d:fa:6c:60:30:95:e1:f3:e8:45:73:a4:d3:ce:cb:
d6:f6:83:a1:30:5c:49:68:ff:8f:65:30:b9:85:2a:14:e5:12:
2b:bf:90:54:37:52:0a:6d:ea:59:85:8b:33:4b:4d:c8:b3:a0:
aa:a7:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:39 2026 by rpki-client