Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF3D6CA098111F18CE76980DAE4EC9C.roa
File: BFF3D6CA098111F18CE76980DAE4EC9C.roa (raw, json)
Hash identifier: zsuoubeKFj/PrxXWCCD/e3d++bNRzHcf4uOJoQuOd24=
Subject key identifier: 98:47:93:A2:80:03:A8:26:1B:54:E3:89:20:E1:7C:DB:36:0F:DB:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF3D6CA098111F18CE76980DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:47:10 +0000
ROA not before: Sat 14 Feb 2026 08:47:05 +0000
ROA not after: Wed 25 Mar 2026 08:47:05 +0000
asID: 401615
IP address blocks: 156.231.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105878 (0x19d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 08:47:05 2026 GMT
Not After : Mar 25 08:47:05 2026 GMT
Subject: CN=6990368e-d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:99:6e:b2:3f:50:55:7f:70:09:64:49:e2:
43:9e:62:2b:fd:05:9a:9a:6d:bf:42:f1:09:7f:c8:
90:e4:f8:1e:8c:fa:3b:c4:30:18:f1:d2:75:40:b7:
b5:5c:df:36:cf:f9:63:c3:7c:74:07:80:92:00:12:
8b:15:76:6b:44:ef:32:39:f8:8a:61:09:b1:29:90:
f5:42:b7:b5:37:44:02:da:d1:60:51:a3:10:00:20:
a5:c0:74:e3:f0:4e:28:cd:44:23:97:aa:6a:8a:b4:
94:36:ba:d6:d3:8a:04:5c:92:b4:d4:d2:57:cb:4d:
99:a4:6f:9f:fe:6b:f6:70:5c:e0:7c:aa:ed:67:b0:
3c:73:97:56:30:8b:05:1c:46:a7:59:57:fe:f0:eb:
c3:7c:07:b0:4c:55:28:40:71:e1:d2:a0:67:82:32:
47:b8:56:d6:e6:01:bd:89:80:7b:e2:83:b7:65:e2:
02:f5:82:19:e2:0a:a1:91:f2:66:60:ca:82:cd:19:
15:5d:2d:3f:1c:53:c8:f1:5b:41:97:e9:ec:af:2d:
9e:93:5e:07:92:c2:21:04:7c:44:fc:45:8e:d7:32:
a6:0b:c9:95:00:ec:4d:0a:db:50:e4:c5:eb:0e:7f:
9c:16:86:ee:cf:45:9c:53:7e:6e:24:98:ab:f8:f4:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:47:93:A2:80:03:A8:26:1B:54:E3:89:20:E1:7C:DB:36:0F:DB:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFF3D6CA098111F18CE76980DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.231.140.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:0a:a1:9a:6c:44:17:ba:75:1b:c2:c2:46:55:ee:46:81:7e:
6f:7b:22:71:0d:a8:d6:ef:9b:19:95:0c:a6:bc:11:67:7e:a2:
8a:b2:8f:cd:be:7e:07:c9:c1:b2:42:48:3a:6c:c7:cc:17:d5:
ee:d8:50:a7:cd:55:28:54:fc:7b:8b:a2:8d:12:a7:c1:46:f2:
13:4b:0c:c4:97:ff:c4:a6:72:e0:f0:e1:f4:e8:19:97:16:be:
61:5e:fd:9e:03:26:f4:dd:6c:60:d8:cd:a5:b2:fc:7f:6d:5f:
0f:f3:e6:cd:e1:dc:0d:c7:f8:2e:47:f3:00:94:04:48:b1:05:
7f:d8:2a:f1:2d:c0:31:d0:e5:65:e6:be:e4:6f:e2:ab:8a:23:
a9:0d:ad:4e:36:bb:31:00:9f:15:b3:18:09:98:ff:82:3b:a1:
1d:73:49:09:a7:35:f1:35:54:00:76:3c:e3:12:68:e1:d4:ad:
c1:71:20:7f:77:a8:90:2c:b7:cc:23:42:37:e1:40:8e:fe:0e:
7c:30:fe:c4:e8:fa:6b:1b:b4:48:b5:a7:f8:f7:ca:d2:09:7c:
c8:4b:d1:fa:61:32:e8:cb:5f:7b:9d:22:9a:85:62:f4:af:fe:
63:c4:1b:04:b7:9d:5a:36:f3:69:86:b3:2a:ce:0f:9f:79:51:
e4:1f:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:26 2026 by rpki-client