Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0812C30043B411F1BCB3C60CCF1D38B0.roa
File: 0812C30043B411F1BCB3C60CCF1D38B0.roa (raw, json)
Hash identifier: +DaUGbcnpnjNJIxItBxyGnRM7cCt7KH0QASho3bsa0U=
Subject key identifier: 7C:63:B5:EC:C0:F1:6A:FB:18:C4:53:7B:A7:80:7C:D1:7E:E3:55:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0812C30043B411F1BCB3C60CCF1D38B0.roa
Signing time: Wed 29 Apr 2026 10:13:14 +0000
ROA not before: Wed 29 Apr 2026 10:13:09 +0000
ROA not after: Sat 28 Apr 2029 10:13:09 +0000
asID: 17561
IP address blocks: 45.192.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110561 (0x1afe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 10:13:09 2026 GMT
Not After : Apr 28 10:13:09 2029 GMT
Subject: CN=69f1d9ba-a96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:e4:3c:8c:4e:8e:5b:88:8c:20:57:e2:c6:
4b:e8:b5:80:91:41:63:a7:29:75:d2:53:39:5a:02:
c6:f8:3e:ef:a9:23:84:68:f8:2c:1d:b5:0d:31:ad:
86:db:6b:d2:9e:93:62:13:2a:e1:74:f3:5e:56:40:
b0:0e:5e:63:cf:fa:80:db:7b:c3:fa:e8:0c:68:37:
7e:1f:27:24:a6:3a:4d:a8:eb:fa:52:99:81:b1:56:
f1:20:a0:ed:ae:49:b3:2b:17:02:e3:36:74:74:a3:
bc:59:e2:da:b0:19:f1:da:ff:5e:d6:53:8e:11:06:
07:28:10:81:cc:f5:51:c8:98:f0:ee:e3:b0:01:ee:
c3:91:51:c4:f7:5b:7c:b0:66:b1:c1:85:1e:54:c2:
8d:b4:7e:0a:e9:05:58:e9:b4:e0:17:30:f2:73:32:
d0:c2:b0:87:bf:94:bb:0b:88:16:13:95:15:54:db:
9d:e2:6f:93:8d:d8:7d:64:db:73:e8:35:a4:44:0e:
ec:69:a9:d5:26:7a:81:8b:fa:89:d7:8b:a1:3a:fe:
2c:c5:3b:92:d4:34:87:b5:62:07:a6:48:74:2f:80:
eb:83:03:66:c6:2e:33:73:52:6b:52:a6:3e:eb:8a:
0e:14:69:c9:e3:bb:01:81:f5:df:24:24:2d:b8:2d:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:B5:EC:C0:F1:6A:FB:18:C4:53:7B:A7:80:7C:D1:7E:E3:55:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0812C30043B411F1BCB3C60CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.133.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b4:36:65:8b:a5:f1:a0:ab:37:f3:03:e1:38:50:91:80:9e:
30:aa:d7:7d:b7:a4:ed:db:91:88:c2:5e:d0:be:05:34:d5:76:
52:3c:ed:22:71:fc:c6:9a:05:9c:14:eb:c6:3f:9a:fe:4a:ca:
f2:0c:49:2b:3b:56:6e:47:a8:43:49:3b:44:b4:1c:d6:9b:c4:
a3:11:95:58:00:95:4b:57:af:00:29:d7:69:56:e9:f0:54:dd:
0f:5e:b4:8a:66:31:ae:9d:64:bc:26:5b:6c:1c:81:5b:c6:97:
c3:81:45:5e:4b:82:2b:f1:71:ea:11:b8:05:c4:e2:c1:45:43:
34:c0:87:9a:25:ea:80:c4:60:3d:57:9b:c8:29:b6:81:53:50:
e0:54:5d:0f:cc:8a:f6:dd:e1:46:4f:59:5a:b2:1f:1c:04:b6:
2e:c8:71:0e:4f:39:2c:d0:7f:f6:68:ca:2a:7a:4f:6f:a8:f7:
84:9d:65:68:b2:d6:59:3c:bb:3e:81:29:84:44:dc:ae:98:6d:
f7:6e:ec:66:fc:12:dc:f8:45:eb:8f:30:b4:eb:3d:cc:8c:cb:
d7:9c:14:c5:6c:b7:49:a8:91:27:32:8e:b4:b7:81:15:b9:f4:
5d:86:c4:dc:35:e4:9c:bc:56:60:dd:d8:ef:00:01:d6:35:85:
5b:7b:f4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:52 2026 by rpki-client