Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094FCF62457E11F1853B9DE7CE1D38B0.roa
File: 094FCF62457E11F1853B9DE7CE1D38B0.roa (raw, json)
Hash identifier: vwoBP3V/bOFFE70FJZJnyAKJru6l/TybrQsCXcNPAOA=
Subject key identifier: DC:CE:55:94:68:0A:FD:9B:3A:9A:93:BB:8A:5B:B7:21:47:01:24:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094FCF62457E11F1853B9DE7CE1D38B0.roa
Signing time: Fri 01 May 2026 16:51:45 +0000
ROA not before: Fri 01 May 2026 16:51:40 +0000
ROA not after: Thu 05 Nov 2026 16:51:40 +0000
asID: 141109
IP address blocks: 45.198.6.0/23 maxlen: 24
45.198.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110810 (0x1b0da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 16:51:40 2026 GMT
Not After : Nov 5 16:51:40 2026 GMT
Subject: CN=69f4da21-33a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:29:29:39:1e:8b:be:6a:f5:67:9d:8f:1d:
f6:0c:dd:c5:ee:a9:af:28:16:92:19:33:fe:36:c0:
47:9c:95:e9:3e:88:d4:e1:28:76:97:52:50:1b:f8:
96:9e:04:1d:11:00:a0:19:6d:f0:49:00:e1:11:97:
28:b8:7d:bd:69:39:c0:e0:ef:03:3a:06:7b:29:e0:
28:63:bc:8a:fe:e3:58:fc:fe:7b:dd:76:a0:df:1e:
b6:6d:18:00:83:4d:67:fd:f4:29:c0:03:14:23:11:
d1:9e:e1:88:7b:cb:d3:d9:cb:b1:bc:61:ba:58:f9:
83:69:ad:85:92:54:33:11:68:b7:1b:00:a7:02:c9:
02:d2:e1:20:7b:ce:64:75:af:2f:c4:8b:10:38:6e:
00:58:52:0f:02:b4:c7:2a:74:f4:df:b6:f2:b6:37:
ef:f8:c3:53:54:c1:06:96:a1:66:5a:cb:39:4b:23:
4f:98:a6:e1:6c:d9:b5:81:2c:99:a6:a8:e1:63:a8:
a7:ab:c2:70:33:6f:f6:c1:6a:fc:c5:53:84:71:9b:
bd:ee:3e:fc:91:c6:ce:78:f5:10:22:b8:4f:f3:e6:
ca:d0:18:41:0a:8c:56:94:e8:c9:0a:4a:6e:2b:ab:
fe:ec:e7:c8:27:43:84:56:56:97:2c:cc:d1:9c:c4:
41:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:55:94:68:0A:FD:9B:3A:9A:93:BB:8A:5B:B7:21:47:01:24:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/094FCF62457E11F1853B9DE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.6.0/23
Signature Algorithm: sha256WithRSAEncryption
64:73:fd:86:e1:7e:1b:4e:2d:c0:b1:46:2d:72:89:ff:a3:2a:
dc:a4:bb:f3:13:f9:6b:b2:cd:24:c0:ce:03:ef:82:98:a6:eb:
bd:2f:3d:05:5a:75:16:44:83:4d:81:15:ec:e9:94:0d:57:0b:
1a:ce:f5:c4:3f:5f:8c:aa:b1:ba:f0:8d:94:b2:b0:e2:8a:df:
9a:fe:a6:13:37:89:fb:6d:ef:7d:e3:a2:5d:e6:c6:64:7c:1e:
34:17:c1:5c:28:31:4f:92:ae:b4:db:23:c0:0f:a4:dd:fc:d1:
08:17:96:40:bd:ef:e6:2a:9c:40:77:40:66:98:4a:00:91:ab:
19:c0:02:47:36:15:8f:ca:e6:7f:92:ff:08:25:19:46:71:9b:
cb:e1:80:e0:aa:6d:2c:a9:2e:8b:cc:05:19:a6:12:79:a1:af:
48:55:af:81:85:19:d5:65:56:71:53:30:32:07:b7:e0:49:00:
8d:5d:24:d8:7e:b4:3e:3c:50:fc:a5:6b:5b:56:52:e6:45:db:
9b:a5:1d:b9:ec:30:01:ac:61:6e:e2:3e:a4:2a:fa:4d:0c:7e:
02:19:5c:52:b6:69:dd:50:2a:e4:a5:a3:7c:14:bd:85:dd:c8:
f8:67:20:c6:0b:2b:d2:b3:ea:28:1c:2b:3a:ce:40:57:80:63:
dd:20:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:15 2026 by rpki-client