Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07E16F643EDF11F196E03417CF1D38B0.roa
File: 07E16F643EDF11F196E03417CF1D38B0.roa (raw, json)
Hash identifier: wV2BfVzI5UIFLJ1D6RHTezTSlZJJpgaYL6p1ccNeAjE=
Subject key identifier: 18:56:E7:F2:83:22:C9:71:19:D7:D7:B7:7A:8D:9B:52:EC:EB:97:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07E16F643EDF11F196E03417CF1D38B0.roa
Signing time: Thu 23 Apr 2026 06:38:26 +0000
ROA not before: Thu 23 Apr 2026 06:38:21 +0000
ROA not after: Tue 09 Jun 2026 06:38:21 +0000
asID: 401783
IP address blocks: 45.192.236.0/24 maxlen: 24
45.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110227 (0x1ae93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 06:38:21 2026 GMT
Not After : Jun 9 06:38:21 2026 GMT
Subject: CN=69e9be62-1051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:f4:f1:67:aa:f8:46:3a:38:bb:a4:ba:6f:
8e:f4:cb:4f:ec:4c:2f:32:a7:0d:86:01:11:0b:38:
11:59:93:77:b6:01:67:af:5e:a6:a2:64:21:fd:d9:
be:d3:77:72:fe:01:c0:84:ec:38:d1:3e:d6:57:8b:
c5:2a:9f:b1:f6:71:49:a3:89:1b:14:24:5e:a9:22:
b3:75:d8:3d:01:bc:b8:d7:08:a1:64:8f:af:7a:46:
bc:e6:69:59:9f:31:2a:15:ab:56:96:e6:51:8d:75:
4d:54:48:84:34:fa:bb:5e:68:e2:87:83:d7:9c:0f:
93:36:21:62:f9:28:80:79:d3:b4:20:18:ac:9e:ad:
25:c9:a5:77:6a:26:f8:50:61:60:e7:40:e1:a2:ba:
cb:ba:e6:eb:15:53:a0:15:bc:66:05:ee:5d:bf:31:
21:2d:fd:88:26:c6:5a:a5:24:3f:c8:3c:7b:1b:67:
6c:3a:fa:49:2c:1d:a2:36:8e:46:bf:8c:63:10:c3:
b6:2a:7b:1e:5d:15:5f:03:07:df:6b:84:ad:2b:6f:
4d:2c:06:0e:d8:24:13:ba:b8:34:0b:24:e7:37:b9:
37:8d:2a:42:91:93:cf:c8:0e:93:21:8b:c5:21:f2:
39:19:48:3d:2f:09:be:ad:62:67:e9:14:9f:5b:86:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:E7:F2:83:22:C9:71:19:D7:D7:B7:7A:8D:9B:52:EC:EB:97:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/07E16F643EDF11F196E03417CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
45.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
72:47:d4:ff:89:ef:8c:9d:4f:8c:a9:55:d4:ba:36:22:e3:be:
98:32:a9:a1:3b:d6:d9:bc:d3:3e:bd:5f:27:ad:23:79:cb:11:
7d:d5:2c:75:23:08:ca:25:0f:a7:3b:2b:dd:93:01:30:59:6a:
3e:f3:e0:92:62:31:70:a0:ad:30:10:f0:c4:80:dc:9e:2d:8b:
e0:ba:c6:12:63:14:eb:2b:fe:77:e5:28:57:9d:cf:e3:f4:a5:
91:b5:54:6d:06:7c:98:fb:19:ea:b6:f1:b2:9a:ee:db:13:43:
d1:c0:30:0c:d7:02:1c:42:b6:7b:b3:3f:1b:0b:89:b4:60:d2:
08:0a:cd:4a:b8:71:73:60:e1:8c:5b:e5:59:2b:74:df:aa:cb:
a8:4d:19:66:b1:ba:7d:79:7b:60:1f:da:03:56:bb:a9:cd:d5:
f8:59:f5:59:9a:af:0a:7b:fe:91:54:63:89:1f:10:28:90:f1:
b2:37:a4:e3:23:3f:35:20:01:37:a5:1b:b9:00:d1:eb:d7:84:
5d:2d:ef:74:2b:b6:7a:a2:77:99:b1:65:8f:b7:ee:77:0e:ef:
2b:f6:94:78:f6:04:4e:44:eb:a9:42:1c:8e:5f:81:19:00:da:
b7:14:c5:9e:0f:f3:a3:35:40:0d:2c:13:b1:5e:9a:ef:9e:46:
51:b4:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:38:24 2026 by rpki-client