Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056BE86455711F19173EEFFCE1D38B0.roa
File: 2056BE86455711F19173EEFFCE1D38B0.roa (raw, json)
Hash identifier: biuV8dAlBT9KE5o39rJGUXu6pFy11Dihqn+tumFgNig=
Subject key identifier: F2:53:34:60:38:38:F5:EA:A3:55:C6:D9:A3:91:7F:56:BD:F5:4B:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B092
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056BE86455711F19173EEFFCE1D38B0.roa
Signing time: Fri 01 May 2026 12:13:13 +0000
ROA not before: Fri 01 May 2026 12:13:09 +0000
ROA not after: Sat 06 Jun 2026 12:13:09 +0000
asID: 13335
IP address blocks: 45.198.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110738 (0x1b092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 12:13:09 2026 GMT
Not After : Jun 6 12:13:09 2026 GMT
Subject: CN=69f498d9-ad82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:d0:fe:be:d5:30:cb:67:74:f0:f4:bc:d5:
d7:c1:50:ad:78:06:d9:ca:a5:8a:59:76:88:a4:30:
ac:71:de:11:fe:81:30:fb:e0:ea:e7:20:f6:52:9e:
bd:46:fb:a6:ae:13:53:ec:ed:8f:87:65:92:61:72:
eb:1b:0a:a9:e5:2f:b7:3a:e8:e3:1f:c9:f6:00:a5:
3a:5f:d7:d6:b7:dc:32:62:ab:d8:ae:53:0b:cd:27:
4d:ee:1e:bf:d2:04:f9:97:b5:8b:32:6b:31:e8:a6:
be:be:94:c4:46:e0:ab:fd:b5:84:85:79:9a:da:aa:
85:ad:16:2f:24:26:af:03:b1:7f:a4:e4:89:6c:07:
70:eb:2a:52:a2:fb:d2:85:d3:b9:68:5f:8c:ad:9a:
02:47:2d:cb:8e:70:e3:68:93:fa:fd:3a:ca:11:96:
b0:a2:ca:3e:ed:5a:70:8a:79:bd:ec:fc:c0:49:98:
ef:7d:e1:a5:63:66:44:0a:61:9e:8f:dc:15:8d:83:
ce:af:98:5d:cb:18:3e:db:97:70:8d:8c:e9:0b:f4:
a0:6a:f1:ac:32:de:8b:f2:d3:7d:f7:f5:d2:cd:33:
e7:de:e4:52:17:04:f8:f3:b0:de:62:fb:cc:1a:06:
11:9b:76:b4:aa:a4:3f:51:db:da:da:7b:5c:ff:fe:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:34:60:38:38:F5:EA:A3:55:C6:D9:A3:91:7F:56:BD:F5:4B:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2056BE86455711F19173EEFFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.114.0/24
Signature Algorithm: sha256WithRSAEncryption
06:eb:cc:20:56:90:35:d1:ba:01:2e:9a:08:10:a0:7d:1e:d8:
76:57:01:bd:6c:15:13:4a:e2:6c:45:2a:83:2f:ae:e0:9d:05:
d6:24:b4:57:04:fe:83:44:7c:97:df:f0:3d:a9:96:d9:4f:19:
ce:0f:e8:aa:51:bc:66:f5:b2:67:cf:cb:dd:ca:17:9c:28:6a:
e3:c3:82:1e:f0:34:66:0f:04:fa:7a:5e:29:7f:bd:2e:d1:69:
7d:3c:ab:1c:6e:34:e0:77:7f:15:94:b3:6b:7f:24:52:99:71:
80:34:c7:c1:f8:71:4b:c1:9f:ef:ac:25:b5:73:d0:33:34:bf:
67:75:7c:cd:c3:b1:ca:9f:05:47:65:79:49:b7:26:de:03:9d:
9c:a2:db:fb:c9:0b:ae:b8:ae:26:4c:cd:26:d9:1b:53:e7:29:
0b:1c:b3:1e:bf:b2:37:de:fc:81:31:75:d3:d6:46:eb:bf:5f:
25:54:96:f3:25:70:5e:91:c0:72:5c:ba:46:af:15:bf:b2:28:
66:d3:70:44:af:1e:4d:28:74:d9:da:e8:ae:bc:d6:9a:4a:37:
6e:7a:90:2f:fe:ae:ad:e7:5d:b1:3e:06:6a:b2:f0:8f:2d:a8:
24:2c:24:fb:33:f3:f8:1d:05:57:e6:12:9b:b8:e1:b4:11:82:
60:19:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:21 2026 by rpki-client